Privacy Notice

1. Introduction

QuantSpark Limited is committed to protecting the privacy of our clients and users of our website. We will ensure that the information you submit to us, or which we collect via various channels (including our website, through written correspondence including e-mail), is only used for the purposes set out in this policy.

Through this Privacy Policy we aim to inform you about the types of personal data we collect from users, the purposes for which we use the data and the ways in which the data is handled. We also aim to satisfy the obligation of transparency under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

For the purpose of this Privacy Policy the Data Controller of personal data is QuantSpark and our contact details are set out in the Contact Us section at the end of this Privacy Policy.

2. What is personal data?

'Personal data' is any information from which you can be identified, either directly or indirectly. For example, your name or an online identifier.

'Special category personal data' is more sensitive personal data and includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purposes of uniquely identifying someone, data concerning physical or mental health or data concerning someone's sex life or sexual orientation.

3. Personal data we collect

We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The personal data we collect includes:

• First name
• Last name
• Email address
• Job title
• Information about your company or affiliation
• Any other personal data required for the purpose of providing our services to you

When you use our website, we also collect certain information via cookies including statistical information about browsing actions and patterns to improve our products and to personalise and improve the Site's user experience. This includes browsing actions and patterns which can be associated with specific users, including the pages on the website that you visit and the functionality of the services of which you make use and aggregated statistical information, which does not identify you.

We don't collect information on the content of any documents that you create or generate through the Site (such as Excel reports, pdf reports, etc).

4. Purposes for which we use your personal data and the lawful basis

When providing services to you, we may use your personal data for the following purposes and on the following lawful bases:

Purpose	Lawful Basis for Processing
Responding to correspondence from you	It is in our legitimate interest to respond to enquiries made via our website, by email, through our social channels or any other means
To provide our services to you as a client	It will be necessary to process your personal data to provide our services to you as a client. Where we do so, it will be on the basis of it being necessary for the performance of a contract.
To contact you (e.g. news, updates, events, promotions)	Our direct marketing will be carried out either in our legitimate interest to inform you of updates, deals and events we believe you would be interested in or with your consent.
To improve our website and user experience	It is in our legitimate interests to ensure your experience using our website and services is optimised and to inform you about potential changes.
To obtain valuable user insights via cookies	Cookies on our website will only be set with your consent.

Where personal data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide our services without the required information.

5. Sharing your personal data

To provide our services to you, it may be necessary for us to transfer personal data to our trusted third-party service providers for purposes including IT or Professional Support. Where third parties have been engaged to help provide our service to you, we have ensured that measures have been put in place to protect your personal data. A list of these third parties is available upon request.

6. International Transfers

When we collect your personal data, it may be processed outside the UK. This is because the organisations we use to provide our services to you are located in other countries.

We have taken appropriate steps to ensure that where personal data is processed outside the UK, it has an essentially equivalent level of protection as it has within the UK. We do this by ensuring that:

• Your personal data is only processed in a country which the Secretary of State has confirmed has an adequate level of protection (an adequacy regulation); or
• We enter into either International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) (with the UK Addendum) with the receiving organisations and ensure that supplementary measures are also applied, where necessary.

7. How long we keep your personal data

We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims.

At the end of the retention period, your personal data will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.

8. Security of your personal data

We have implemented appropriate technical and organisational measures to safeguard your personal data and protect it from accidental or unlawful destruction, loss or alteration and from unauthorised disclosure or access.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site via third party networks; any transmission is at your own risk.

In addition to the technical and organisational measures we have put in place, there are a number of simple things you can do to further protect your personal information:

1. Never share a One Time Passcode (OTP).
2. Never enter your details after clicking on a link in an email or text message.
3. Always send confidential information by encrypted email where possible.
4. If you're logged into any online service do not leave your computer unattended.
5. Close down your internet browser once you've logged off.
6. Never download software or let anyone log on to your computer or devices remotely, during or after a cold call.

9. Your rights

You have certain rights in relation to personal information we hold about you. Details of these rights and how to exercise them are set out below.

• Right of Access, You have the right at any time to ask us for a copy of the personal information about you that we hold.
• Right of Correction or Completion, If personal information we hold about you is not accurate, out of date or incomplete, you have a right to have the data rectified, updated or completed.
• Right of Erasure, In certain circumstances, you have the right to request that personal information we hold about you is erased.
• Right to object to or restrict processing, In certain circumstances, you have the right to object to our processing of your personal information. You also have the right to object to use of your personal information for direct marketing purposes.
• Right of Data Portability, In certain instances, you have a right to receive any personal information that we hold about you in a structured, commonly used and machine-readable format.
• Right to withdraw consent, Where you have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent at any time.

If you wish to exercise your rights, please contact us at dpo@quantspark.com.

10. How to complain

You have the right to lodge a complaint with the supervisory authority if you believe we are infringing the UK data protection laws. The supervisory authority in the UK is the Information Commissioner's Office who can be contacted online at ico.org.uk or by telephone on 0303 123 1113.

11. How to contact us

If you wish to contact us in relation to this privacy notice or if you wish to exercise any of your rights, please address your correspondence to:

QuantSpark Limited
230 Blackfriars Road
London, England, SE1 8NW
Email: dpo@quantspark.com