QUANT-FX INFRASTRUCTURE LTD · Co. no. 17496299

Privacy Policy

What personal data QUANT-FX INFRASTRUCTURE LTD collects, why we collect it, and the rights you have under UK data protection law.

Last updated 24 October 2026

1. Who we are

QUANT-FX INFRASTRUCTURE LTD ("QuantFX", "we", "us") is the data controller for personal data collected through quant-fx.com and through our business enquiries. We are registered in England and Wales (company no. 17496299).

For any privacy question or request, email info@quant-fx.com.

2. What we collect

Contact form and email
Your name, email address, the purpose you select, your message and anything else you choose to send us.
Business relationships
Business contact details and correspondence when we work with you or your organisation.
Usage and technical data
IP address, browser and device type, pages requested and timestamps, recorded in our hosting and server logs.
Signing and payment
When you sign an agreement on our signing page: your company's name, company number, registered address and country; your name, position, email address and WhatsApp number as signer; the names, positions and email addresses of any additional signatories; your typed or drawn signature; your IP address, browser user agent and the timestamps of each step, together with a SHA-256 hash of the agreement text; the files you upload for the engagement, such as source code, backtests, account statements, specifications and datasets; the bank transfer receipt for your deposit, as a PDF or image, which contains bank details; and the signed PDF. We process this data for the performance of a contract, and we keep the signing record as evidence of the contract.

3. How we use it

  • To reply to your enquiry and follow up on it.
  • To prepare, perform and manage agreements with business clients and partners.
  • To run, secure, troubleshoot and improve the website.
  • To send you updates, only where you have asked for them.
  • To meet our legal, tax and accounting obligations.

4. Lawful bases (UK GDPR)

We only use personal data when the UK GDPR gives us a lawful basis:

Legitimate interests
Answering business enquiries and running and securing the website. We balance these interests against your rights.
Consent
Optional updates and any non-essential cookies. You can withdraw consent at any time.
Contract
Taking steps at your request before an agreement, and performing an agreement with you or your organisation.
Legal obligation
Keeping records we are required to keep by law.

5. Who we share it with

We do not sell your personal data. We share it only with:

  • Cloud hosting, database and storage providers (Vercel, Supabase).
  • A transactional email provider (Resend).
  • An automated document-reading service that checks bank receipts against the expected payment, used only for that purpose.
  • Other service providers that process it on our behalf.
  • Professional advisers, such as lawyers and accountants, where needed.
  • Authorities, where the law requires it.

Our service providers may only use your data to provide their services to us.

6. International transfers

Some of our service providers store or process data outside the UK, for example in the European Economic Area or the United States. When that happens we rely on UK adequacy regulations or on appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep it

  • Enquiries and correspondence: up to 24 months after our last contact, unless we start working together.
  • Client and contract records: for the length of the relationship, plus the period required by UK law.
  • Signed agreements and signing evidence: six years after the agreement ends.
  • Uploaded files and bank receipts: for the duration of the engagement plus the statutory accounting retention period.
  • Server and usage logs: kept by our hosting provider only as long as needed for security and diagnostics, then deleted.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and restricted access. No transmission over the internet is completely secure.

9. Your rights

Under the UK GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we use your data;
  • object to processing based on legitimate interests, and to direct marketing at any time;
  • receive your data in a portable format;
  • withdraw consent at any time, where we rely on consent.

To use any of these rights, email info@quant-fx.com. We will respond within one month.

We use an automated check to compare an uploaded bank receipt with the expected payment. A receipt that does not match is not accepted automatically; you can upload the correct receipt, email it to us for manual matching, or ask for a person to review it. We make no other decisions based solely on automated processing.

You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk. We would appreciate the chance to resolve your concern first.

10. Cookies and local storage

The public website does not use advertising cookies. It uses your browser's local storage to cache public performance data so pages load faster. Password-protected areas of the site store a sign-in flag in local storage. You can clear local storage and block cookies in your browser settings.

If we add analytics or other non-essential cookies, we will ask for your consent first where the law requires it and update this policy.

11. Children

Our website and services are for businesses and adults. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy. The date at the top of this page shows the current version. See also our Terms of Service.

13. Contact

Privacy questions and requests: info@quant-fx.com.