Privacy notice

This notice explains how Qantid processes personal data, under the Nigeria Data Protection Act 2023 and the equivalent laws of the other markets we operate in.

What we collect

• Account data: name, work email, job title, telephone number and the organisation you belong to.
• Engagement data: the answers you give at intake and the documents you upload. These may contain personal data relating to your staff or your customers, in which case you are the controller and we are your processor.
• Usage data: authentication events, document access records and audit log entries. These exist for security and are not optional.

Why we process it

To deliver the engagement you have contracted for, to meet our own legal obligations including anti-money-laundering checks on our clients, and to secure the platform. We do not sell personal data and we do not use client engagement material for any purpose beyond that engagement.

Who we share it with

Only the sub-processors listed on the trust page, and any accredited partner firm named on your engagement. Each is bound by a written agreement.

Where it is held

In the European Union by default. Residency is configurable per organisation where your licence conditions require it.

How long we keep it

Engagement records are retained for the period required by the professional and regulatory obligations that apply to the work, and are then purged automatically. A legal hold suspends that purge where a matter is live.

Your rights

You may request access to your personal data, correction of it, deletion where no overriding obligation requires us to keep it, and a structured export. Write to privacy@qantid.com. We respond within the statutory period.

Complaints

If you are not satisfied with our response you may complain to the Nigeria Data Protection Commission, or to the supervisory authority in your own market.