Your Privacy

How we look after your privacy and how you can manage your

privacy settings

Introduction

Qintil takes your privacy very seriously. This privacy policy has been prepared in line with the EU’s
General Data Protection Regulation (GDPR) which takes effect on 25 May 2018.

The GDPR promotes fairness and transparency for all individuals in respect of their personal data. This
privacy policy applies to all data we process, and by using Qintil you consent to our collection and use of
such data.

If you would like to get in touch about anything in this policy or about your personal data then please
contact our Data Protection Officer at support@qintil.com

Data we collect
What personal data do we share with third parties and who are they?
Why do we share data outside of the EU
How do we keep your personal data secure?
Changes to our privacy policy and control
Your rights
About us

1. Data we collect

As a data controller we collect a variety of data in order to deliver our services. We'll tell you:

what data we have collected from you;
the basis on which we are holding it (e.g. because you gave us consent);
what we will do with it;
how long we will hold it for;
where it is stored;
who it might be shared with;
your rights in relation to the data, and
information on how you can access and manage this data.

We have provided further detail below about the specific types of data we collect and our reasons for
doing so.

1.1. What data do we ask you to provide to us, and why?

We collect data to enable us to deliver our services to you. We may collect the following data: your email
address, your phone number if we need to call you, your address details if you give them to us for billing
purposes, your social media identities if you connect them in Qintil, records of learning activities
completed in or uploaded to Qintil by you or your employer and other information used to deliver
services to you. You can change or withdraw your consent at any time, but you may not be able to use
some or all of Qintil's services if you do.

We may use this data to: provide account access, send direct marketing of services or products that
you've told us might be of interest to you and to provide support to you when using our service.

We only collect this data lawfully and with your consent. By using Qintil services, you give us your
consent to collect this data to help us to deliver the service to you.

1.2. What data do we collect when you visit our website, and why?

We collect cookies. Cookies are small pieces of data that websites send to a user's computer and are
stored on the user's web browser. They are designed to enable the website to remember information,
such as what a user might have put in a shopping cart for example.

We will never share your data or pass your data to a third party for marketing purposes. We use third
party services to help deliver our services to you, and we have agreements in place with these providers
to protect your data. Below is a list of third parties we use to deliver our services, and the nature of the
data protection agreement we have with them:

Your employer(s) - when you accept an invitation to join your employer's Qintil account, they'll see some of the information we hold about you including your email address.

Pipedrive CRM (customer relationship software) - Data is transferred outside of the European Economic
Area to United States under the protection of EU/US Privacy Shield.

Intercom (our customer messaging and support tool) - Data is transferred outside of the European
Economic Area to United States under the protection of EU/US Privacy Shield.

Google Apps for Business (Google provides our team email service) - Data is transferred outside of the
European Economic Area to United States under the protection of EU/US Privacy Shield.

Sendgrid (Sendgrid send transactional account emails for us) - Data is transferred outside of the
European Economic Area to United States under the protection of EU/US Privacy Shield.

Stripe Payments Europe Limited (payment collections service) - Data is transferred outside of the
European Economic Area to United States under the protection of EU/US Privacy Shield.

Xero (accounting software) - Data is transferred outside of the European Economic Area to United States
under the protection of EU/US Privacy Shield.

Chargebee (Our billing software) - Data is transferred outside of the European Economic Area to United
States under the protection of EU/US Privacy Shield.

There are certain situations in which we may share access to your personal data without your explicit
consent; for example, if required by law, to protect the life of an individual, or to comply with any valid
legal process, government request, rule or regulation.

We may transfer personal data to a country outside of the European Economic Area (EEA), for example if
a third party we share data with has servers located outside of the EEA. If this is the case we will obtain
your consent or otherwise ensure that the transfer is legal and your data is secure by following the EU's
guidelines.

You can see above where we send data outside of the EEA and on what basis we do so.

4. How do we keep your personal data secure?

We keep your data secure:

by carrying out regular penetration testing;

by following internal policies of best practice and training for staff;

by encrypting personal data;

by using Secure Socket Layer (SSL) technology when information is submitted to us online.

In the unlikely event of a criminal breach of our security we will inform the relevant regulatory body within
72 hours and, if your personal data were involved in the breach, we shall also inform you.

5. Changes to our privacy policy and control

We may change this privacy policy from time to time. When we do, we will let you know by adding
notices to the Qintil website and application, and by notifying you of the changes by email. By continuing
to access or use our services after those changes become effective, you agree to be bound by the
revised privacy policy.

6. Your rights

You have certain rights that we will comply with upon request. They are:

the right to be informed about the collection and use of your personal data;

the right of access to your personal data and any supplementary information;

the right to have any errors in your personal data rectified;

the right to have your personal data erased;

the right to block or suppressing the processing of your personal data;

the right to move, copy or transfer your personal data from one IT environment to another;

the right to object to processing of your personal data in certain circumstances, and

rights related to automated decision-making (i.e. where no humans are involved) and profiling (i.e. where
certain personal data is processed to evaluate an individual).

We also give you the option to manage your data via:

email: support@qintil.com

telephone: +44 020 3468 8768

updating your preferences in your Qintil Profile

While we do not hold personal data any longer than we need to, the duration will depend on your
relationship with us.

7. About us

We are Qintil Technology Limited and our address is 75 High Street, Croydon, CR0 1QE United Kingdom.
You can contact our Data Protection Officer at support@qintil.com.

8. Digital Marketing Service Providers

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:

(i)Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.”

Updated on: 18/11/2022

Was this article helpful?

Thank you!