Privacy Policy

Definitions

"QuantarisAI", "we", "us" means the QuantarisAI platform and the operators behind it. "You" means a visitor, enquirer or registered client. "Personal data" means information relating to an identified or identifiable living individual. "Processing" means anything done with that information, from collecting it to erasing it. "Controller" means the party deciding why and how data is processed; "processor" means a party processing it on the controller's instructions.

Personal data we collect

We collect the data needed to answer enquiries, open accounts and operate the service: first name and last name, email address, mobile phone number, and the content of messages you send us. For registered clients we also collect date of birth, residential address, identity documents, and, where a check requires it, a selfie or liveness capture. Payment transactions generate their own records: amounts, methods, dates and statuses, with card details handled by the payment processor rather than stored by us in full.

Usage data

As you use the site, we collect technical usage data: pages visited, referring pages, approximate location derived from your IP address, device and browser type, language, and timestamps. Server logs hold this data briefly for security and diagnostics. Usage data helps us understand how the site is used, defend against abuse, and keep the service running; it is analysed in aggregate unless a security incident requires looking at a specific session.

Cookies

The site uses a small number of strictly necessary cookies and equivalent technologies: to keep your session secure, to remember your preferences, to distinguish humans from automated traffic, and to support the platform's fraud-prevention checks. Where analytics or marketing cookies are used, they are set only with your consent through the banner presented on first visit, and you can change or withdraw that choice at any time. You can also block or delete cookies in your browser, though doing so may affect some functionality.

Operators and processors

QuantarisAI acts as controller for the personal data described in this policy. Where another company processes that data on our documented instructions, such as a cloud host, an identity-verification provider or a payments processor, it acts as a processor under a written contract requiring at least the same protection this policy describes. Where trading is executed with licensed third-party providers, those providers act as controllers of the client data they must collect under their own obligations, and their policies govern that part of the relationship.

Collection and use of information

We use your data to: respond to enquiries and support requests; verify identity and meet onboarding obligations; operate your account, including deposits, trading activity and withdrawals; send service communications such as security alerts and transaction notices; send marketing where you have opted in; improve the site, its content and its performance; prevent fraud, abuse and unauthorised access; and comply with legal obligations, resolve disputes and enforce our terms.

Legal bases (UK GDPR)

Where the UK GDPR applies, we rely on: performance of a contract, for the data needed to open and operate your account; legitimate interests, for site security, fraud prevention, record-keeping and service improvement, each assessed and balanced before use; legal obligation, for identity, anti-money-laundering and tax-related record-keeping; and consent, for optional marketing communications and any non-essential cookies, which you may withdraw at any time. Where we rely on contract or legal obligation and you do not provide the data, we may be unable to provide the service.

Data storage and retention

Personal data is stored on systems located in jurisdictions that provide adequate protection under UK and EU data protection law, encrypted at rest and in transit, with access restricted to the roles that need it. Retention follows purpose: enquiry data is kept for up to 24 months from last contact; account and verification records are kept for the statutory period applicable to financial records after the account closes; support correspondence for 7 years; server logs for up to 12 months; and consent records for as long as the consent remains effective plus 3 years. When a retention period ends, data is securely deleted or anonymised.

International transfers

Some processors operate outside the UK and the EEA. Any such transfer is made only with appropriate safeguards: adequacy regulations, the UK International Data Transfer Agreement or Addendum, or standard contractual clauses, together with supplementary measures where needed. A copy of the safeguards applying to your data is available on request using the contact details at the end of this policy.

Disclosure of data

We disclose personal data only to: service providers processing on our instructions under confidentiality obligations; the licensed providers with whom trading is executed, to the extent needed to operate your account; professional advisers; and regulators, law-enforcement or other competent authorities where disclosure is legally required or necessary to establish, exercise or defend legal claims. We do not sell personal data, and we do not disclose it for third-party advertising.

Security of data

Technical measures include TLS encryption in transit, encryption of stored data, access control based on role, least-privilege configuration, audit logging and monitoring for anomalous activity. Organisational measures include staff training, confidentiality obligations and a documented incident process. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the regulator as the law requires. The Security page describes the account-level protections available to you.

Your rights

Subject to legal limits, you have the right to: access the personal data we hold about you and receive a copy; have inaccurate data corrected; have data erased where it is no longer needed, you withdraw consent, or processing was unlawful; restrict processing while a dispute over accuracy or lawful basis is resolved; object to processing based on legitimate interests or to direct marketing, at any time; receive your data in a structured, machine-readable format and have it transmitted to another controller (portability); and withdraw consent for consent-based processing without affecting prior lawful processing. To exercise any right, email [email protected] from your registered address; we respond within one month, extendable by two months for complex requests, with reasons if so. You may also complain to the UK supervisory authority, the Information Commissioner's Office.

Service providers

Categories of processor we rely on: cloud hosting and infrastructure; email delivery; identity verification and document checking; analytics (only with consent for non-essential analytics); payments processing; and customer-support tooling. Each receives only the data needed for its function, under contract, and none is permitted to use your data for its own purposes.

Analytics

We use analytics to understand aggregate site usage: which pages are read, where visitors struggle, what devices are used. Where analytics involves non-essential cookies or similar technologies, it runs only with your consent and can be switched off with the same control. Analytics output is used to improve the site, not to make automated decisions about you.

Advertising and retargeting

Where you see QuantarisAI advertising elsewhere on the internet, third-party advertising partners may measure campaign performance or limit how often an advert is shown. These tools use their own cookies or identifiers, set only with your consent where the law requires it, and can be declined through your consent choices or the advertising industry's opt-out mechanisms. We do not share your name, email or account data with advertising partners.

Links to other websites

Our site links to third-party websites. This policy does not apply to them: their own policies govern data collected there, and we encourage you to read them. We are not responsible for third parties' data practices.

Children's privacy

The service is directed at adults and is not intended for anyone under 18. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it promptly.

Changes to this policy

We may update this policy as the service or the law changes. Material changes are announced on the platform and, where they affect registered clients, by email; the published version applies from its effective date, and continued use of the service after that date constitutes acceptance.

Contact us

Data protection questions, requests and complaints: [email protected] (Client Support & Compliance), or by post to London, United Kingdom — [REGISTERED OFFICE ADDRESS]. We answer privacy correspondence within the timescales described in the rights section above.