1. Who we are
Quantact Partners ("we", "us") is a UK accounting practice led by M. Umer Aijaz. We are the data controller for the personal data described in this policy. Our registered details and Information Commissioner's Office (ICO) registration reference are available on request.
Questions about this policy or your data can be sent to mumeraijaz.writer@gmail.com or by phone on +92 336 4402552.
2. The data we collect
We collect only what we need to respond to you and run this website.
- Enquiry details: your name, business email address, company name if you give it, the service you are interested in, and the content of your message.
- Booking details: if you book a call through Calendly, Calendly collects the name, email address and time slot you provide. Calendly's own privacy notice applies to that processing.
- Technical data: the hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) for security and to keep the site running.
Please do not send financial documents, account numbers, passwords or other sensitive information through the enquiry form. We will ask for anything we need through a secure channel once we are working together.
3. Why we use it and our lawful basis
- Responding to your enquiry: with your consent, given by ticking the box on the form, and in our legitimate interest in answering people who contact us.
- Arranging and holding a consultation call: steps taken at your request before entering into a contract.
- Security, fraud prevention and keeping the site available: our legitimate interests in protecting the website and its visitors.
- Meeting legal and regulatory obligations: where the law requires us to keep records, for example under anti-money-laundering regulations once you become a client.
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. How long we keep it
- Enquiries that do not lead to an engagement: deleted within 12 months of our last contact.
- Enquiries that lead to an engagement: retained as part of the client file for the period required by law and professional guidance, normally six years after the engagement ends.
- Server logs: retained by the hosting provider for a short rolling period, typically 30 days.
5. Who we share it with
We share personal data only with providers who help us run the website and respond to you, and only to the extent needed:
- Our website hosting and form-handling provider.
- Our email provider.
- Calendly, if you book a call.
- Professional advisers, insurers or regulators where we are required or permitted to do so by law.
Some of these providers process data outside the United Kingdom. Where they do, we rely on the UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses so that your data receives an equivalent level of protection.
6. Cookies and analytics
This website does not set advertising or analytics cookies. Fonts are loaded from Google Fonts, which means your browser requests the font files from Google's servers; Google's privacy notice applies to that request. If we add analytics in future, we will update this policy and ask for consent where required.
7. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased where there is no good reason for us to keep it;
- restrict or object to our processing in certain circumstances;
- receive your data in a portable format where processing is based on consent or contract;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email mumeraijaz.writer@gmail.com. We will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, although we would welcome the chance to address any concern first.
8. Security
We use reputable providers, keep access to enquiry data limited to the people who need it, and transmit data over encrypted connections (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.
9. Children
This website is aimed at businesses and adults. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on this page.