Effective Date: 01-January-2024
Purpose:
Quantox Digital Ltd. is committed to ensuring that personal data is handled in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This policy outlines how Quantox Digital Ltd. collects, processes, stores, and protects personal data, ensuring transparency and safeguarding individuals’ privacy rights.
1. Scope
This policy applies to all personal data processed by Quantox Digital Ltd. in relation to its business operations. It covers any data collected directly from clients, business contacts, and website users, as well as data shared by third parties.
2. Legal Framework
Quantox Digital Ltd. processes personal data in compliance with the following legislation:
• General Data Protection Regulation (GDPR) (EU) 2016/679.
• UK Data Protection Act 2018.
• Any other applicable local data protection laws and regulations.
3. Principles of Data Protection
Quantox Digital Ltd. is committed to adhering to the following data protection principles:
1. Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and transparently. Individuals will be informed about how their data is being used.
2. Purpose Limitation: Data will be collected for specified, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
3. Data Minimization: Only the personal data that is necessary for the specific purpose will be collected and processed.
4. Accuracy: Personal data will be kept accurate and up to date. Inaccurate data will be rectified or deleted without delay.
5. Storage Limitation: Personal data will not be retained for longer than is necessary for the purposes for which it was collected.
6. Integrity and Confidentiality: Personal data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.
4. Data Collection
Quantox Digital Ltd. may collect personal data in the following ways:
• Directly from clients during the course of business (e.g., name, contact information, company information).
• Automatically through its website (e.g., IP addresses, cookies, usage data).
• From third-party partners or clients who share personal data for business purposes.
5. Legal Basis for Processing
Quantox Digital Ltd. processes personal data based on one or more of the following legal grounds:
• Consent: Where the data subject has given clear consent for their personal data to be processed for a specific purpose.
• Contractual Necessity: Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which Quantox Digital Ltd. is subject.
• Legitimate Interests: Processing is necessary for the legitimate interests of Quantox Digital Ltd., except where such interests are overridden by the data subject’s fundamental rights and freedoms.
6. Data Subject Rights
Individuals whose personal data is processed by Quantox Digital Ltd. have the following rights under GDPR:
• Right to Access: The right to obtain confirmation as to whether or not personal data is being processed and access to that data.
• Right to Rectification: The right to have inaccurate personal data corrected or completed if incomplete.
• Right to Erasure (Right to be Forgotten): The right to request the deletion of personal data where there is no compelling reason for its continued processing.
• Right to Restriction of Processing: The right to request the restriction of data processing in certain circumstances.
• Right to Data Portability: The right to obtain and reuse personal data across different services.
• Right to Object: The right to object to the processing of personal data where processing is based on legitimate interests, or for direct marketing purposes.
• Right to Withdraw Consent: The right to withdraw consent at any time where data processing is based on consent.
Individuals can exercise these rights by contacting Quantox Digital Ltd. at [hello@quantoxdigital.com].
7. Data Security
Quantox Digital Ltd. is committed to protecting personal data and implements the following security measures:
• Encryption: Personal data is encrypted at rest and in transit using industry-standard encryption algorithms.
• Access Control: Only authorized personnel have access to personal data. Access is restricted to individuals who require the data to perform their job duties.
• Incident Response: Quantox Digital Ltd. has an incident response plan in place to address data breaches or security incidents. In the event of a breach affecting personal data, the appropriate regulatory authorities (such as the Information Commissioner’s Office) and affected individuals will be notified within the required timeframes.
8. Data Retention
Quantox Digital Ltd. retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When personal data is no longer required, it will be securely deleted or anonymized.
9. Third-Party Data Sharing
Quantox Digital Ltd. does not share personal data with third parties without the explicit consent of the data subject unless required to do so by law or for the performance of a contract. Any third parties processing personal data on behalf of Quantox Digital Ltd. will be subject to Data Processing Agreements to ensure they comply with GDPR and other relevant regulations.
10. International Data Transfers
Where personal data is transferred outside the UK or European Economic Area (EEA), Quantox Digital Ltd. ensures that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to protect the data in line with GDPR requirements.
11. Cookies and Tracking Technologies
Quantox Digital Ltd. may use cookies or similar tracking technologies to collect website usage data (www.quantoxdigital.com). Users will be informed of the use of cookies, and consent will be obtained where required.
12. Changes to This Policy
Quantox Digital Ltd. may update this policy from time to time to reflect changes in legal or regulatory requirements. The latest version of this policy will be made available on the company’s website or can be requested by contacting [hello@quantoxdigital.com].
13. Contact Information
For any questions or concerns about this policy or to exercise your rights under GDPR, please contact Quantox Digital Ltd. at:
• Email: hello@quantoxdigital.com
This Data Protection and Privacy Policy ensures that Quantox Digital Ltd. complies with GDPR and provides clear information to clients and stakeholders about how personal data is handled.