Privacy Policy
Version 1.0 · Effective 3 July 2026
This policy describes how Quantelaris Ltd (company number 17008714), registered in England and Wales with its registered office at 82a James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom ("Quantelaris", "we", "us"), processes personal data as a controller in connection with this website and our business communications. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018 and, where applicable to individuals in the European Economic Area, the EU GDPR.
1. Data we process
We keep data collection to the minimum a professional services website needs:
- Website technical data. Our hosting provider records standard server logs (IP address, timestamp, requested resource, browser type) for security and operation of the site.
- Consent preference. If you make a choice in our cookie banner, we store that single preference in your browser so we don't ask again. See the Cookie Policy for details.
- Correspondence data. When you e-mail us, we process your name, e-mail address, organisation and the content of your message.
- Business contact data. In the course of an engagement we process professional contact details of client personnel (names, roles, work e-mail addresses) needed to deliver our services.
This website has no user accounts, no contact forms and no third-party advertising or analytics trackers.
2. Purposes and lawful bases
- Operating and securing the website — legitimate interests (Art. 6(1)(f) UK GDPR).
- Responding to enquiries and negotiating engagements — legitimate interests and steps prior to entering into a contract (Art. 6(1)(f) and 6(1)(b)).
- Performing client contracts and managing the business relationship — performance of a contract (Art. 6(1)(b)) and legitimate interests.
- Complying with legal obligations, including accounting and tax record-keeping — legal obligation (Art. 6(1)(c)).
- Establishing, exercising or defending legal claims — legitimate interests (Art. 6(1)(f)).
3. Client data in engagements
Where we access personal data contained in a client's systems or datasets in the course of delivering services, we generally act as a processor on the client's documented instructions, under a written data processing agreement compliant with Art. 28 UK GDPR. This policy covers our activities as a controller; processing performed on behalf of clients is governed by the relevant agreement.
4. Retention
- Enquiry correspondence that does not lead to an engagement: up to 24 months from last contact.
- Contract and engagement records: for the duration of the engagement and 6 years thereafter, in line with limitation periods and accounting obligations.
- Server logs: the short rolling period applied by our hosting provider.
- Cookie/consent preference: as stated in the Cookie Policy.
5. Recipients
We share personal data only with service providers who support our operations — website hosting, e-mail, document storage and accounting — each acting under contract and on our instructions. We do not sell personal data and we do not share it for third-party marketing.
6. International transfers
Some of our providers process data outside the UK. Where that happens, transfers are protected by UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or EU Standard Contractual Clauses, as applicable.
7. Your rights
You have the rights of access, rectification, erasure, restriction, data portability and objection under the UK GDPR (and EU GDPR where applicable). To exercise them, contact [email protected]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or, if you are in the EEA, to your local supervisory authority.
8. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, least-privilege access to client environments and multi-factor authentication on our core systems.
9. Changes
We will update this policy when our practices or providers change. The current version and its effective date are always published on this page.
82a James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom
[email protected]