Privacy Policy
This policy explains what personal data Quanaliz collects, why we collect it, on what basis we process it, who it can be shared with, how long we keep it, and the rights you have over it. It applies to this website and the services provided through it to clients in the United Kingdom.
Definitions
"Quanaliz", "we" and "the platform" mean the Quanaliz technology service operated for UK users. "Personal data" means information relating to an identified or identifiable individual, such as your name, email address or telephone number. "Processing" means anything we do with that data, from storing it to analysing it.
Personal data we collect
We collect the data needed to answer enquiries, operate accounts and meet legal obligations. Specifically: your first name, surname and telephone number given in the registration or contact forms; your email address; the content of the requests and messages you send us; identity and address documents required for verification; and transaction records connected to deposits, trading and withdrawals. Aggregate usage data about how the site is used is collected in a form that is not associated with your name.
Data about how the site is used
When you visit, standard technical information is recorded: your IP address, browser type and version, device category, referring page, and the times and addresses of requests. This serves security (detecting abuse and unauthorised access attempts), performance (understanding which pages fail or load slowly) and basic analytics. IP addresses are retained only for the security period described below.
Cookies
The platform sets a small number of strictly necessary cookies that keep your session working and remember security choices such as two-factor authentication state. Analytics and preference cookies are used only where you have accepted them through the consent banner, and your choice can be withdrawn at any time from the same banner. We do not use cookies for advertising profiling.
Who is responsible for your data
Quanaliz is the controller of the personal data described in this policy: it decides the purposes and the means of processing. Where verification providers, hosting companies or payment partners process data on our instructions, they act as processors under written contracts, and they never use your data for their own purposes.
Collection and use of information
The data we collect is used to: answer your questions and provide the services you request; set up, verify and operate your account; process deposits and withdrawals and prevent payment fraud; meet identity-verification, anti-money-laundering and tax obligations; secure the platform and investigate incidents; improve the service; and, with your separate consent, send you marketing messages. Every use falls within one of the lawful bases described next.
Lawful bases and UK GDPR
Processing rests on four bases. Contract: operating your account and providing the services you signed up for. Legal obligation: identity checks, AML monitoring, record-keeping and tax reporting that UK law requires. Legitimate interests: keeping the service secure, preventing fraud, and improving quality, balanced against your interests and rights. Consent: marketing emails and non-essential cookies, where consent is freely given, specific and withdrawable at any time through the links in every message or the cookie banner.
How long data is kept
Account and verification records are kept for the duration of the relationship and for the statutory period afterwards (for AML purposes, five years from the end of the relationship). Transaction records follow equivalent legal retention periods. Support correspondence is kept for two years after the matter closes. Marketing consent records are kept until withdrawal plus a short evidence period. Security logs are kept for twelve months. Where a period is set by law, deletion follows the law rather than a request; everything else is deleted or anonymised when its purpose ends.
Transfers of data
Your data is processed in the United Kingdom and the European Economic Area. Where a provider operates from another country, transfers take place only under adequacy regulations or the UK International Data Transfer Agreement, with the same protections applied as within the UK.
Disclosure of data
We do not sell personal data. Data is shared only with: identity-verification and fraud-prevention providers running checks on our instructions; IT and hosting suppliers operating the platform; payment partners executing your deposits and withdrawals; affiliated companies involved in delivering the service; and regulators, courts or public authorities where UK law requires disclosure. Each category is bound by confidentiality and data-protection obligations.
Security of your data
Data is encrypted in transit and at rest, access is limited to named roles, and every security-relevant event on an account is written to an audit log described in our Security policy. No system is perfectly secure, so we also maintain an incident process: affected clients are informed without undue delay where a breach presents a risk to them.
Your rights over your data
You have the right to access the personal data we hold about you; to have inaccurate data corrected; to have data erased where no legal basis requires us to keep it; to restrict processing while a dispute about accuracy is resolved; to object to processing based on legitimate interests, including profiling; to receive a portable copy of data you provided under contract or consent; and to withdraw consent for marketing at any time. Requests go to [email protected] and are answered within one month, extended by two further months for complex cases with notice.
Service providers
The platform relies on a short list of processors: cloud hosting and email delivery providers, an automated identity-verification service, payment partners for card and bank transfers, and an analytics tool used in aggregate form. Each is assessed before onboarding and periodically afterwards, and each processes only what its task requires.
Analytics
Aggregate analytics tell us which pages are read, where visitors drop off and how long pages take to load. The analytics configuration masks IP addresses, is used only to improve the service, and is loaded only with the consent given through the cookie banner. Analytics data never feeds marketing lists.
Advertising and retargeting
Where Quanaliz advertises, measurement partners may set cookies on our pages strictly to report whether an advertisement led to a registration. This category of cookie is set only with consent and can be refused in the banner or in your browser without affecting any other part of the service. We do not sell audiences built from your data to anyone.
Links to other websites
Our pages contain links to services we do not operate, such as the map provider used on the Contact page. This policy does not cover those services; their own policies apply from the moment you follow a link. We link only to providers relevant to the page and review the links periodically.
Children
The platform is intended for adults. Accounts are offered only to people aged eighteen or over, verification includes a date-of-birth check, and any account found to belong to a minor is closed immediately with any funds returned to their source.
Changes to this policy
We may update this policy to reflect changes in the service or the law. Material changes are announced on this page before they take effect, and where a change meaningfully affects you we notify you by email to your registered address. The version in force is always the one published here.
Contact us
Questions, data-subject requests and complaints about privacy go to [email protected], handled by the Client Support & Compliance team, Monday to Friday, 9:00–17:30 GMT/BST (excluding public holidays). Postal enquiries: 30 St Mary Axe, London EC3A 8EP, United Kingdom. If you believe we have not resolved a privacy matter properly, you may complain to the Information Commissioner's Office, the UK supervisory authority for data protection.