Privacy Policy

1. Introduction

SiteQuant Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SiteQuant platform ("the Service").

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

SiteQuant Ltd is the data controller for the personal data we collect through the Service. If you have any questions about how we handle your data, you can contact our Data Protection Officer at privacy@qsovereign.com.

3. Information We Collect

Information you provide

• Account information: name, email address, company name, and password when you register for an account.
• Payment information: billing details processed securely through our third-party payment provider (Stripe). We do not store full card numbers on our servers.
• Project data: documents, contract details, compensation event descriptions, and other content you upload or input into the Service.

Information collected automatically

• Usage data: pages visited, features used, timestamps, and interaction patterns.
• Device information: browser type, operating system, and device identifiers.
• Log data: IP address, access times, and referring URLs.

4. Lawful Basis for Processing

We process your personal data on the following legal bases:

• Performance of a contract: to provide the Service and manage your account.
• Legitimate interests: to improve the Service, prevent fraud, and ensure security.
• Consent: for marketing communications, which you can withdraw at any time.
• Legal obligation: to comply with applicable laws and regulations.

5. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service.
• Process transactions and manage subscriptions.
• Generate AI-powered analyses based on the content you provide.
• Send service-related communications and updates.
• Monitor usage patterns and optimise performance.
• Detect and prevent fraudulent or unauthorised activity.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: third-party vendors who assist us in operating the Service (hosting, payment processing, analytics), bound by data processing agreements.
• AI processing: content you submit may be processed by third-party AI providers to generate analyses. This data is transmitted securely and is not used to train external models.
• Legal requirements: when required by law, court order, or governmental authority.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

Project data and uploaded documents are deleted within 30 days of account closure or upon your request.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of your personal data.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your personal data.
• Right to restriction: request limitation of processing.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@qsovereign.com. We will respond within one month of receiving your request.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Cookies

We use essential cookies to maintain your session and preferences. We use analytics cookies to understand how you interact with the Service. You can manage cookie preferences through your browser settings.

12. Children

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact and Complaints

If you have questions or concerns about this Privacy Policy or our data practices, contact us at privacy@qsovereign.com.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.