PRIVACY POLICY

1. Who We Are

Quantropic is an AI security advisory firm operating globally, with offices in Singapore and Germany. We provide AI security assessments, LLM red-teaming, adversarial testing, and governance frameworks for regulated industries.

Data controller: Quantropic
Contact: info@quantropic.ai

2. Data We Collect

2.1 Contact and enquiry forms

When you submit an enquiry through our website we collect: first name, last name, business email address, company name, role, enquiry type, and any message you choose to include. We also record your IP address and approximate location (country/city) for anti-spam and analytics purposes.

2.2 Resource downloads

When you request a downloadable resource we collect: first name, last name, business email address, company name, and role.

2.3 Website analytics

We use Google Analytics with IP anonymisation enabled. This collects aggregated, non-personally identifiable data about how visitors use our site (pages visited, session duration, referral source). No personally identifiable information is shared with Google Analytics.

2.4 Cookies

Our website sets only functional and analytics cookies. We do not use advertising or tracking cookies. Analytics cookies are set by Google Analytics and are subject to Google's privacy policy.

3. How We Use Your Data

• To respond to your enquiry or deliver the requested resource
• To assess your enquiry and match it to the appropriate service
• To send relevant follow-up communications where you have requested them
• To improve our website and services using aggregated analytics data
• To comply with legal and regulatory obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA), our legal basis for processing your personal data is:

• Legitimate interest — to respond to business enquiries and provide the services you have requested.
• Consent — where you have explicitly opted in to receive communications from us.
• Legal obligation — where processing is required by applicable law.

5. Data Retention

We retain enquiry and contact data for up to 3 years from the date of last contact, or as long as necessary to fulfil the purpose for which it was collected. Analytics data is retained in aggregated, anonymised form indefinitely.

You may request deletion of your personal data at any time (see Section 7).

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our servers are hosted in the European Union and access is restricted to authorised personnel only.

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we restrict processing of your data
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, email us at info@quantropic.ai with the subject line "Data Privacy Request". We will respond within 30 days.

8. International Transfers

As a global firm, your data may be accessed from Singapore or Germany. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements (Standard Contractual Clauses or equivalent).

9. Third-Party Services

We use the following third-party services that may process data on our behalf:

• Google Analytics — website analytics (anonymised)
• Microsoft 365 — email and internal communications

Each provider operates under their own privacy policy and data processing agreements.

10. Complaints

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:

• Germany (EEA): your local Data Protection Authority
• Singapore: Personal Data Protection Commission (PDPC)

11. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by an updated effective date at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this privacy policy or how we handle your data:
info@quantropic.ai
Quantropic · Global · Singapore · Germany