Privacy Policy

1. Introduction

Welcome to Quantt ("we," "us," or "our"). Quantt is operated by Scott Bromley. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.quantt.co.uk and use our online learning platform for quantitative finance (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, subscribe to a plan, or contact us, we may collect:

• Full name
• Email address
• Phone number (optional, when provided via our contact form)
• Account credentials (managed securely by our authentication provider)
• Payment and billing information (processed securely by Stripe; we do not store your full card details)
• Any other information you choose to provide (e.g., messages via our contact form)

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information, including:

• Usage Data: Pages visited, features used, course progress, time spent on pages, and interaction patterns
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to collect information about your browsing activity (see Section 5)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the Service: Deliver course content, track your learning progress, and manage your account
• Process payments: Handle subscriptions, billing, and refunds through Stripe
• Communicate with you: Send account-related notifications, respond to enquiries, and provide customer support
• Improve the Service: Analyse usage patterns to enhance our courses, features, and user experience
• Personalisation: Tailor content and recommendations based on your learning activity
• Security: Detect and prevent fraud, abuse, and security incidents
• Marketing: With your consent, send promotional communications about new courses, features, or offers (you can opt out at any time)
• Legal compliance: Comply with applicable laws, regulations, and legal processes

4. Third-Party Services

We use the following third-party services to operate and improve the Service. Each has its own privacy policy governing the use of your information:

• Clerk — Authentication and user account management
• Stripe — Payment processing and subscription management
• Vercel — Hosting, deployment, and web analytics
• Hotjar — Session recording, heatmaps, and user behaviour analytics
• Google Ads / Google Tag Manager — Advertising and conversion tracking
• LinkedIn Insight Tag — Advertising analytics and conversion tracking
• Cloudflare Turnstile — Bot protection and security verification

We do not sell your personal information to third parties. We only share information with third-party services as described above and as necessary to provide the Service.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your activity on our Service. Cookies are small data files placed on your device.

Types of cookies we use:

• Essential Cookies: Required for the Service to function properly (e.g., authentication session cookies)
• Analytics Cookies: Help us understand how visitors interact with the Service (e.g., Vercel Analytics, Hotjar)
• Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness (e.g., Google Ads, LinkedIn Insight Tag)

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Service.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal information within 90 days, unless we are required to retain it for legal, accounting, or regulatory purposes.

Usage data and analytics information may be retained in an aggregated, anonymised form for longer periods to help us improve the Service.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication through Clerk
• PCI-compliant payment processing through Stripe
• Regular security reviews and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information ("right to be forgotten")
• Restriction: Request that we restrict the processing of your information
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to the processing of your personal information for certain purposes
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time

To exercise any of these rights, please contact us at scottbromley17@gmail.com. We will respond to your request within 30 days.

8.1 UK GDPR

If you are located in the United Kingdom, you have rights under the UK General Data Protection Regulation (UK GDPR). Our legal bases for processing your personal information include: performance of a contract, legitimate interests, and consent. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

8.2 EEA / EU GDPR

If you are located in the European Economic Area, you are protected under the EU General Data Protection Regulation (GDPR) and have the rights listed above. You may lodge a complaint with your local data protection authority.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us at scottbromley17@gmail.com, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: