Privacy Policy

1. Application

At Quantyx OÜ ("Quantyx", "we", "us", or "our"), we understand the importance of safeguarding your privacy. This Privacy Policy governs the use of quantyxou.com (the "Website") and explains how and why we process personal data, what personal data we may collect, how it is used and stored, with whom it may be shared, how we safeguard it, and the rights and choices available to you.

This Privacy Policy applies to your interactions with our Website and communications with Quantyx. It does not govern third-party websites, platforms, or services that may be accessible through links on our Website. Such third parties maintain their own privacy policies and practices.

By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data Controller

The controller of your personal data is:

For personal data collected directly through the Website or through communications with us, Quantyx OÜ generally acts as the data controller, meaning that we determine the purposes and means of processing such personal data.

In certain circumstances, particularly when providing marketing, analytics, user acquisition, or related services to our business partners or clients, Quantyx OÜ may process personal data on behalf of another organization. In such cases, Quantyx OÜ may act as a data processor, and the relevant client or partner remains responsible for determining the purposes and legal basis of that processing.

Where Quantyx OÜ and another party jointly determine the purposes and means of processing, the parties may act as joint controllers in accordance with applicable data protection law.

Questions or requests concerning personal data processed directly by Quantyx OÜ may be submitted to info@quantyxou.com.

3. Personal Data We Process

3.1 Information You Provide

We may collect personal data that you voluntarily provide when you contact us, communicate with us, submit information through the Website, or inquire about our services.

• Full name;
• Email address;
• Phone number;
• Company name;
• Job title or professional role;
• Information submitted through contact forms;
• Information contained in correspondence with us;
• Business or partnership inquiry details;
• Customer or partner support requests; and
• Any other information you choose to provide.

We ask that you do not provide personal information that is unnecessary for the purpose of your communication with us.

3.2 Information Collected Automatically

When you access or use the Website, certain technical and usage information may be collected automatically.

• IP address;
• Browser type and version;
• Device type and device information;
• Operating system;
• Date and time of access;
• Referring website or source;
• Pages viewed and Website interaction data;
• Approximate location derived from IP address;
• Cookie and similar technology identifiers; and
• Technical logs and diagnostic information.

We may use this information to operate and secure the Website, understand how visitors interact with it, measure Website performance, and improve our services and user experience.

4. Age Restrictions

Our Website and services are intended for business and professional audiences and are not directed to individuals under the age of 18.

We do not knowingly collect personal data from children. If we become aware that personal data relating to a child has been collected without an appropriate legal basis, we will take reasonable steps to delete such information.

5. Cookies and Similar Technologies

We may use cookies and similar technologies to operate the Website, understand Website usage, improve performance, and support analytics and marketing activities.

• Essential Website functionality;
• Security and fraud prevention;
• Remembering preferences;
• Website analytics;
• Performance monitoring;
• Understanding traffic sources and user interactions; and
• Marketing or advertising purposes, where applicable and legally permitted.

Where required by applicable law, we will request your consent before placing or accessing non-essential cookies or similar technologies on your device.

You may also control or delete cookies through your browser settings. Disabling certain cookies may affect the functionality or performance of the Website.

Where third-party analytics or advertising technologies are used, those providers may process information in accordance with their own privacy policies.

6. How We Use Your Personal Data

We may process personal data for the following purposes:

• Operating, maintaining, and securing the Website;
• Responding to inquiries and contact requests;
• Communicating with prospective and existing clients, partners, and service providers;
• Providing information about our services;
• Providing and managing our marketing, user acquisition, analytics, and related business services;
• Managing business and contractual relationships;
• Performing analytics and measuring Website performance;
• Improving Website functionality and user experience;
• Developing and improving our services;
• Monitoring and preventing fraud, misuse, and security incidents;
• Sending administrative or service-related communications;
• Sending marketing communications where legally permitted;
• Establishing, exercising, or defending legal claims;
• Enforcing contractual rights; and
• Complying with applicable laws, regulations, and lawful requests from authorities.

If we intend to use personal data for a purpose materially different from the purpose for which it was originally collected, we will provide additional information or obtain consent where required by applicable law.

7. Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR) or similar data protection laws apply, we process personal data only where we have an appropriate legal basis.

Depending on the circumstances, our legal bases may include:

Performance of a Contract

Processing may be necessary to enter into or perform a contract with you or the organization you represent, including responding to requests relating to our services.

Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms.

• Operating and improving our Website;
• Managing business relationships;
• Responding to inquiries;
• Understanding Website usage;
• Protecting our systems and services;
• Preventing fraud and misuse; and
• Developing and improving our business and services.

Consent

Where required, we may process personal data based on your consent, including for certain cookies, analytics technologies, or marketing communications.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Compliance with Legal Obligations

We may process personal data where necessary to comply with legal, regulatory, accounting, tax, or other obligations applicable to Quantyx OÜ.

Protection of Vital Interests

In exceptional circumstances, we may process personal data where necessary to protect the vital interests of an individual.

8. Sharing of Personal Data

We do not disclose personal data except where necessary for legitimate business purposes, to provide our services, or where required by law.

Service Providers

We may share personal data with third-party service providers that assist us with functions such as:

• Website hosting and infrastructure;
• Cloud services;
• Website analytics;
• Communication tools;
• Customer and business relationship management;
• IT and cybersecurity services;
• Professional advisory services; and
• Marketing and advertising services, where applicable.

Where required by law, such providers are subject to contractual obligations regarding confidentiality, data protection, and security.

Clients and Business Partners

Where necessary for the provision of our services or management of a business relationship, limited personal data may be shared with clients, advertising platforms, technology providers, or other business partners.

Such sharing is performed only where there is an appropriate legal basis and subject to applicable data protection requirements.

Corporate Transactions

Personal data may be transferred or disclosed in connection with a proposed or completed:

• Merger;
• Acquisition;
• Investment;
• Corporate restructuring or reorganization;
• Financing transaction; or
• Sale or transfer of assets.

Legal Requirements

We may disclose personal data where reasonably necessary:

• To comply with applicable laws or regulations;
• To respond to lawful requests from courts, regulators, law enforcement, or other authorities;
• To establish, exercise, or defend legal rights;
• To enforce agreements; or
• To detect, investigate, or prevent fraud, security incidents, or illegal activity.

We do not sell personal data for monetary consideration.

9. International Data Transfers

Because some of our service providers, technology providers, clients, or business partners may operate internationally, personal data may be transferred to or processed in countries outside Estonia or the European Economic Area ("EEA").

Where personal data is transferred outside the EEA to a country that has not been recognized by the European Commission as providing an adequate level of data protection, we implement appropriate safeguards where required by law.

• European Commission Standard Contractual Clauses ("SCCs");
• Adequacy decisions;
• Data Processing Agreements;
• Supplementary technical and organizational measures; and
• Other legally recognized transfer mechanisms.

You may contact us for additional information about safeguards applicable to relevant international transfers.

10. Data Security

We maintain reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

• Access controls;
• Secure hosting and storage;
• Encryption where appropriate;
• Authentication mechanisms;
• Monitoring and logging;
• Confidentiality obligations;
• Restricted access to personal data; and
• Security and risk assessments.

While we take reasonable steps to protect personal data, no internet transmission, electronic communication, or storage system can be guaranteed to be completely secure.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including as necessary to:

• Provide our services;
• Respond to inquiries;
• Maintain business relationships;
• Fulfill contractual obligations;
• Comply with legal, tax, accounting, or regulatory requirements;
• Resolve disputes; and
• Establish, exercise, or defend legal claims.

Retention periods may vary depending on the nature of the information, the purpose of processing, contractual requirements, and applicable law.

When personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it in accordance with applicable requirements.

12. Your Privacy Rights

Subject to applicable data protection law, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to certain processing;
• Withdraw consent at any time where processing is based on consent;
• Request portability of personal data where applicable; and
• Lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us at: info@quantyxou.com

We may need to verify your identity before responding to certain requests.

If you are located in Estonia or otherwise subject to the GDPR, you also have the right to lodge a complaint with the competent data protection supervisory authority.

13. California Privacy Rights

If you are a resident of California and applicable California privacy legislation applies to our processing of your personal information, you may have certain rights regarding your personal information.

Subject to applicable law and exemptions, these may include the right to:

• Know the categories of personal information we collect and process;
• Request access to specific personal information;
• Request deletion of personal information;
• Request correction of inaccurate personal information;
• Opt out of the sale or sharing of personal information, where applicable;
• Limit certain uses or disclosures of sensitive personal information, where applicable; and
• Receive equal service and not be unlawfully discriminated against for exercising privacy rights.

Requests may be submitted to: info@quantyxou.com

We do not sell personal information for monetary consideration.

If our practices regarding the sale or sharing of personal information change, we will update this Privacy Policy and provide any legally required mechanisms for exercising applicable rights.

14. Third-Party Websites and Services

The Website may contain links to websites, platforms, or services operated by third parties.

Quantyx OÜ does not control the privacy practices of such third parties. Your interaction with third-party websites or services is governed by their respective terms and privacy policies.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, services, data processing practices, technologies, or legal requirements.

Any changes will be published on this page with an updated Effective Date.

Where required by applicable law, we will provide additional notice or obtain consent regarding material changes.

16. Contact Information

If you have questions about this Privacy Policy, our processing of personal data, or wish to exercise your privacy rights, please contact:

Effective Date: September 21, 2026