Last updated: October 21, 2025

​

1. Introduction

​

At Quanturisk Analytics Ltd (“we”, “us”, “our”), your privacy is important to us.
This Privacy Policy explains how we collect, use, disclose and protect information in relation to our risk-analytics services (the “Services”).

We are committed to complying with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection laws.

By using our Services, you agree to the collection and use of information in accordance with this policy.

​

2. What Personal Data We Collect

​

We may collect the following categories of data:

1. Customer Data: Financial risk datasets, models, and analytics you submit; any personal information contained within your own datasets.

2. Account Information: Name, email address, company name, job title, billing information, and contact details.

3. Usage & Technical Data: IP address, browser type, operating system, device information, and activity logs within our Services.

4. Communications: Messages you send to us (support tickets, emails, feedback forms); survey or marketing data.

We do not intentionally collect special categories of personal data (such as health data, racial/ethnic origin, political opinions, religious beliefs, etc.) unless you provide it through your use of the Services.

​

3. How We Use Your Personal Data (Legal Bases for Processing)

 

​We process personal data for the following purposes:

- To provide and operate our Services (Contract performance, Art. 6(1)(b) GDPR);

- To maintain and improve security, performance, and reliability of the Services (Legitimate interest, Art. 6(1)(f));

- To provide support, respond to inquiries, and resolve issues (Contract performance, Art. 6(1)(b));

- To send service updates and important notifications (Legitimate interest, Art. 6(1)(f));

- For billing, invoicing, and account management (Contract performance, Art. 6(1)(b));

- For marketing communications where you have provided consent (Consent, Art. 6(1)(a)).

​

4. Cookies & Similar Technologies

​

Our website and Services may use cookies and similar technologies to:

- Enable essential service functionality;

- Measure usage and improve performance;

- Provide analytics for service development.

Where required by law, we will request your consent before setting non-essential cookies. You can manage cookie settings through your browser or our cookie banner.

​

5. Location & Data Residency

​

We provide transparency about the regions where Customer Data is processed and stored.

By default, data is hosted within Western European data centers.

​

6. International Data Transfers

​

If we transfer your personal data outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, such as:

- Adequacy decisions by the European Commission or UK authorities;
- Standard Contractual Clauses (SCCs);

- Additional contractual, technical, or organisational measures to ensure protection.

​

7. Access, Use and Disclosure of Customer Data

​

We will access, use, or disclose Customer Data only as necessary to provide the Services, with your consent, or as required by law.

Sub-processors and partners are contractually bound to safeguard data and only act on our instructions.

​

8. Retention & Deletion

We retain personal data only as long as necessary to fulfil the purposes described in this policy or as required by law.

After termination of Services, we will securely delete or return Customer Data, unless retention is required by applicable regulations.

​

9. Your Rights Under GDPR

​

As a data subject, you have the following rights:

- Right of access

- Right to rectification

- Right to erasure (“right to be forgotten”)

- Right to restriction of processing

- Right to data portability

- Right to object

- Right to withdraw consent

- Right to lodge a complaint with a supervisory authority

Requests can be submitted by contacting us at the details in Section 12.

​

10. Children’s Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal data from children.

If you believe we have inadvertently collected such data, please contact us so we can delete it.

​

11. Security Measures

​

We maintain industry-standard organisational and technical measures to protect data, including:

- Encryption in transit and at rest;

- Access controls and multi-factor authentication;

- Regular vulnerability assessments and audits;

- Security incident response processes.

​

12. Contact & Data Protection Officer (DPO)

​

If you have questions or wish to exercise your data rights, please contact us at:

Quanturisk Analytics

Email: info@quanturisk.com

Address: Phoenix House, 2 Huddersfield Road, Stalybridge, SK15 2QA

Data Protection Officer: Johannes Wassenberg, email: johannes.wassenberg@quanturisk.com; postal address see above

​

13. Changes to This Policy

​

We may update this Privacy Policy from time to time.

When we make material changes, we will notify you by posting the new policy on our website and updating the “Last updated” date.​​​