Privacy Policy

Who we are

Quintworx is a trading name of QuintworX - S.T., an independent consultancy operating as a sole trader in the United Kingdom. Quintworx is the data controller for personal data described in this policy. You can contact us at hello@quintworx.com.

What data we collect

• Contact details you provide, name, email address, organisation, role and the message you send through the contact form or by email.
• Business correspondence, emails, meeting notes and documents exchanged in the course of an enquiry or engagement.
• Technical data, limited information such as IP address, browser type and pages requested, processed by our hosting provider to deliver and secure the website.
• Analytics data (consent only), if you accept analytics cookies, Google Analytics 4 (measurement ID G-BTZTY3D8PB) collects pseudonymous usage data: pages viewed, referrer, approximate location derived from an anonymised IP address, device and browser type, and a randomly generated client identifier. No analytics script loads and no analytics cookies are set unless you accept. We do not use advertising, remarketing or cross-site tracking, and Google Signals and ad personalisation are disabled.

We do not knowingly collect special category data and we do not collect data from children.

How we use it

• To respond to enquiries and discuss potential work.
• To deliver and administer consultancy services.
• To maintain business records and meet legal or tax obligations.
• To keep the website secure and functioning.
• Where you consent, to measure aggregate website usage so we can improve the content and structure of the site.

Lawful bases

We rely on legitimate interests for responding to business enquiries and operating the site securely, contract where we are delivering agreed services, legal obligation for record-keeping and tax, and consent where consent is specifically requested, including analytics cookies and any optional communications. Consent can be withdrawn at any time from the Cookie Policy page, without affecting the lawfulness of processing carried out beforehand.

Sharing your data

We do not sell personal data. We share it only with service providers that support our operations, website hosting, email, document and productivity tools, and, where you consent, Google Analytics, and with professional advisers or authorities where required by law. Providers act as our processors on our instructions under appropriate contractual terms.

International transfers

Some providers may process data outside the UK. Where that happens, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. Google Analytics data may be transferred to Google servers outside the UK under Google’s EU–US Data Privacy Framework certification and standard contractual clauses.

Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects for you.

How long we keep it

Enquiry correspondence is retained for up to 24 months where no engagement follows. Records relating to an engagement are retained for up to seven years to meet legal, accounting and tax requirements. Analytics data is retained by Google for up to 14 months and is held in aggregate, pseudonymous form. Data no longer needed is deleted or anonymised.

Cookie-consent records (your accept or reject decision, its timestamp, the policy version and a random per-browser token) are kept for 24 months as our proof of consent under UK GDPR Article 7(1). They contain no name, email or IP address.

Links to other sites

Our pages cite external standards bodies, regulators and industry sources. Following those links takes you to sites we do not control, each governed by its own privacy notice. We do not share your data with them and place no tracking on those links.

Security

We use reputable providers, access controls, encryption in transit and the principle of least privilege. No system can be guaranteed completely secure, but we take appropriate technical and organisational measures.

Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent where processing relies on it. To exercise any right, email hello@quintworx.com. We respond within one month.

You can also complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

Changes

We may update this policy to reflect changes in our practices or legal requirements. The current version always appears on this page.