Privacy Policy

1. Who We Are

Quant Prime is operated by Sean Jack Davies, a sole trader trading as "Quant Prime", based in the United Kingdom. We are the "data controller" for the personal data described in this policy, which means we decide how and why it is used.

You have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by phone at 0303 123 1113.

2. What We Collect

When you subscribe to our emails

• Email address
• First name, if you provide it
• The date you signed up and which form you used
• Whether you open our emails and which links you click

When you create an account

• Email address and name
• Your TradingView username (for indicator access)
• Your Discord ID, if you link your account
• Which tier you are on and when you joined
• Account preferences and settings

When you buy something

• Email address and billing address
• A record of what you bought, when, and how much you paid

When you join our Discord server

• Your Discord username and ID
• Your join date
• Messages you post in the server
• Your assigned roles and permissions

When you email us or use support

• Your email address and the contents of your correspondence
• Any attachments or files you send

Automatically, when you use our website

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, timestamps, and time spent
• Referral source (how you found us)
• Actions taken on our site (clicks, form submissions)

3. Why We Use It, and Our Legal Basis

Under UK GDPR, we must have a lawful basis to process your personal data. Here's how we use your data and which legal basis applies:

Where we rely on consent, you can withdraw it at any time — every marketing email has an unsubscribe link, and you can email us if you prefer. Withdrawing consent does not affect anything we did before you withdrew it.

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we believe it is not. You have the right to object — see Section 9.

4. Automated Processing in Our Discord Server

Our Discord server uses an AI assistant powered by Anthropic. Messages posted in channels where the assistant is active are sent to Anthropic so it can generate a reply. This means your Discord messages may be processed by a third party located outside the UK.

The AI assistant does not:

• Make any decision that produces a legal effect for you
• Significantly affect you in any meaningful way
• Decide access, pricing, or anything about your account
• Store your messages beyond what is necessary for the conversation

The assistant is purely for community engagement and support purposes.

5. Who We Share It With

We use the following providers to run Quant Prime. Each only receives the data it needs, and none of them are permitted to use it for their own marketing purposes.

We may also disclose personal data where:

• We are legally required to (e.g., court order, regulatory request)
• It is necessary to establish, exercise, or defend legal claims
• It is necessary to protect the rights, property, or safety of Quant Prime, our users, or others

6. Cookies

Cookies are small text files placed on your device when you visit a website. We use a minimal number of cookies to make our site work properly.

Essential Cookies (Required)

These are necessary for the site to function and cannot be switched off:

• Authentication cookies — remember that you're logged in
• Session cookies — maintain your session as you navigate the site
• Security cookies — help protect against cross-site request forgery
• Preference cookies — remember your theme preference (light/dark mode)

Analytics Cookies (Optional)

We use basic analytics to understand how visitors use our site. This helps us improve the user experience. Analytics data is aggregated and does not identify individual visitors by name.

Third-Party Cookies

Some of our providers may set their own cookies when you interact with their services:

• Stripe — for payment security and fraud prevention
• Supabase — for authentication tokens

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to:

• Block all cookies
• Delete existing cookies
• Allow only first-party cookies
• Set preferences for specific websites

Note: Blocking essential cookies may affect how our site functions, including your ability to log in or make purchases.

For more information on managing cookies, visit allaboutcookies.org.

7. Sending Data Outside the UK

Several of our providers are based outside the UK, as shown in the table above. The countries include the United States and France (EU).

Where personal data is transferred out of the UK, we ensure it remains protected to UK standards by relying on:

• The UK International Data Transfer Agreement (UK IDTA)
• The UK Addendum to the European Commission's Standard Contractual Clauses
• Adequacy decisions where applicable (e.g., transfers to the EU)

You can request more detail about the safeguards for any particular transfer by contacting us.

8. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it.

Technical Measures

• Encryption in transit — All data transmitted to and from our website is encrypted using TLS (HTTPS)
• Encryption at rest — Sensitive data stored in our database is encrypted
• Secure authentication — We use industry-standard authentication protocols and secure password hashing
• Access controls — Only authorized personnel have access to personal data, on a need-to-know basis
• Regular updates — We keep our systems and software up to date with security patches

Payment Security

All payment processing is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of certification in the payment card industry. We never see, store, or have access to your full card number.

Third-Party Security

We carefully select providers who maintain high security standards. Our key providers (Stripe, Supabase, Netlify) all maintain SOC 2 compliance and industry-standard security certifications.

Incident Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the ICO within 72 hours where required
• Notify affected individuals without undue delay if there is a high risk
• Take immediate steps to contain and remediate the breach

9. Your Rights

Under UK data protection law (UK GDPR), you have the following rights:

• Right to Access — Get a copy of the personal data we hold about you
• Right to Rectification — Have inaccurate data corrected or incomplete data completed
• Right to Erasure — Ask us to delete your data in certain circumstances (e.g., data no longer needed, consent withdrawn)
• Right to Restriction — Ask us to limit how we use your data while a complaint is resolved
• Right to Data Portability — Receive your data in a structured, commonly used, machine-readable format
• Right to Object — Object to processing based on legitimate interests, and to direct marketing at any time
• Right to Withdraw Consent — Where we rely on consent, withdraw it at any time
• Rights related to automated decision-making — We do not make significant decisions about you using solely automated means

How to Exercise Your Rights

To exercise any of these rights, email support@quantprime.uk with "Data Rights Request" in the subject line.

We will:

• Respond within one month (we may extend this by up to two months for complex requests)
• Verify your identity before processing your request
• Not charge you a fee (unless requests are manifestly unfounded or excessive)
• Not treat you differently for exercising your rights

Right to Complain

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

We would appreciate the chance to address your concerns before you contact the ICO, so please reach out to us first.

10. How Long We Keep It

We keep your data only as long as necessary for the purposes described in this policy. Our retention periods are:

When data is no longer needed, we will securely delete it or anonymize it so it can no longer be linked to you.

11. Children's Privacy

Quant Prime does not knowingly collect or solicit personal data from anyone under the age of 18. Our Services involve financial trading concepts and are designed exclusively for adults.

If you are under 18:

• Do not use our Services
• Do not create an account
• Do not provide any personal information to us

If we learn that we have collected personal data from a child under 18, we will delete that information as quickly as possible. If you believe a child under 18 has provided us with personal information, please contact us immediately at support@quantprime.uk.

Parents or guardians who believe their child has submitted personal information to us should contact us, and we will promptly remove the information and terminate any associated account.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You

• Minor changes (clarifications, formatting) — We will update the "Last updated" date at the top of this page
• Material changes (new data collection, new third parties, changes to your rights) — We will notify you by email and/or a prominent notice on our website at least 30 days before the changes take effect

Your Options

If you do not agree with a change to this policy, you may:

• Stop using our Services
• Delete your account
• Contact us to discuss your concerns

Continued use of our Services after changes become effective constitutes your acceptance of the revised policy.

Review History

We encourage you to review this policy periodically. Previous versions are available upon request by emailing us.

13. Contact Us