Last updated: 20 September 2026

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

QUANTIPHI SL
Commercial name: QuantPhi
Registered address: Calle Periodista Aureliano Fernández Guerra 7, Portal 1, 3.º C, 18014 Granada, Spain
Website: https://quant-phi.com
Contact email: privacy@quant-phi.com

For any inquiries related to the processing of personal data or the exercise of data protection rights, users may contact QUANTIPHI SL using the email address provided above.

2. Personal Data Collected

QUANTIPHI SL may collect and process the following categories of personal data through the website:

• Identification data, such as name and surname and, where required for billing or legal purposes, tax identification data
• Contact data, such as email address, postal address, and telephone number where applicable
• Account-related data, such as account and login information, when users create an account, register for courses, or access restricted content
• Transaction and billing data associated with purchases of courses, digital content, or physical products, including order and payment-related information
• Academic or training-related data, including course enrolment, course progress, lesson completion, quiz results, completion status, and certificates or diplomas issued where applicable
• Communication-related data, such as information provided when subscribing to newsletters or other informational communications
• Content and correspondence data, such as comments, questions, support requests, or messages submitted through the website or learning platform
• Technical and usage data, such as IP address, browser type, operating system, device information, and other technical information generated when using the website, including information collected through cookies and similar technologies where applicable

QUANTIPHI SL processes only personal data that is necessary and proportionate to the relevant purposes. Such data may be provided directly by users, generated in connection with their use of the website and its services, or collected automatically through technical means, as further described in this Privacy Policy and the Cookie Policy.

3. Purposes of Data Processing

Personal data collected through this website may be processed for the following purposes:

• To manage and respond to inquiries, requests, and communications submitted through the website or other available communication channels.
• To manage user registration, authentication, accounts, and access to courses, digital educational content, and related services.
• To provide, administer, and manage online courses and educational materials, including lesson access, course progress, assessments, quizzes, completion records, certificates, diplomas, and related academic activities.
• To process and manage purchases, payments, orders, billing, and the delivery of digital or physical products and services offered through the website.
• To issue and retain invoices, contractual documentation, records of consent and acceptance, and other documentation required to demonstrate and manage contractual and legal obligations.
• To comply with applicable legal, tax, accounting, consumer protection, and other regulatory obligations.
• To manage subscriptions to newsletters and other informational or marketing communications where the user has provided the required consent.
• To maintain the security, integrity, proper functioning, and performance of the website, user accounts, and online services, and to prevent or detect fraudulent, abusive, or unauthorized activities.
• To improve the quality, structure, and content of courses and educational materials using aggregated or anonymized information, where such information no longer identifies individual users.

The legal bases applicable to these processing activities depend on the specific purpose and may include the performance of a contract or pre-contractual measures, compliance with a legal obligation, the user’s consent, or the legitimate interests of QUANTIPHI SL, as described in this Privacy Policy.

4. Legal Basis for Processing

The processing of personal data carried out by QUANTIPHI SL is based, depending on the specific purpose, on one or more of the following legal grounds under applicable data protection regulations:

• Consent: where users have provided their consent to the processing of their personal data, including for newsletters, marketing or informational communications where consent is required, and for non-essential cookies and similar technologies. Consent may be withdrawn at any time.
• Performance of a contract: where processing is necessary to provide courses, digital content, physical products, or other services requested by the user, including account management, course access, order management, payment-related processing, and delivery.
• Pre-contractual measures: where processing is necessary to respond to requests or take steps at the user’s request before entering into a contract, such as providing information or assistance concerning a prospective purchase or service.
• Compliance with legal obligations: where processing is necessary to comply with legal obligations applicable to QUANTIPHI SL, including tax, accounting, invoicing, consumer protection, and other regulatory requirements.
• Legitimate interests: where processing is necessary for legitimate interests pursued by QUANTIPHI SL, such as maintaining the security and integrity of the website and services, preventing fraud or abuse, and ensuring their proper technical operation, provided that such interests are not overridden by the rights and freedoms of the data subject.

Where processing is based on consent, users may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Data Recipients and Third Parties

QUANTIPHI SL may use third-party service providers where this is necessary to operate the website, provide the services requested by users, process transactions, manage communications, maintain technical infrastructure, or comply with legal obligations.

Depending on the services involved, these providers may include:

• Payment service providers used to process payments and transactions, such as PayPal and WooPayments
• Hosting and infrastructure providers
• Email delivery and communication service providers, including MailPoet, used for transactional, service-related, or marketing communications
• Technical service providers involved in website maintenance, security, analytics, and performance
• Logistics and delivery providers, where physical products are purchased and shipped

Where a service provider processes personal data on behalf of QUANTIPHI SL, the provider will be engaged in accordance with the requirements applicable to data processors under the GDPR, including appropriate contractual arrangements and technical and organisational safeguards.

Some service providers may process personal data outside the European Economic Area (EEA). Where an international transfer of personal data takes place, QUANTIPHI SL will ensure that the transfer is carried out in accordance with applicable data protection law and is supported by an applicable adequacy decision, appropriate safeguards, or another lawful mechanism for international transfers.

QUANTIPHI SL does not sell personal data to third parties.

6. International Data Transfers

Some of the service providers used by QUANTIPHI SL may be located outside the European Economic Area (EEA), or may process personal data in countries outside the EEA.

Where the use of a service involves a transfer of personal data outside the EEA, QUANTIPHI SL will ensure that the transfer is carried out in accordance with the requirements of applicable data protection law.

Depending on the circumstances, such transfers may be based on an applicable adequacy decision adopted by the European Commission, appropriate safeguards such as the Standard Contractual Clauses adopted by the European Commission, or another lawful transfer mechanism recognised under applicable data protection law.

Where required, QUANTIPHI SL will also take into account any additional measures necessary to ensure an appropriate level of protection for personal data transferred to a third country.

Users may obtain further information about the applicable safeguards for international transfers by contacting QUANTIPHI SL at privacy@quant-phi.com.

7. Data Retention Periods

QUANTIPHI SL retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

The applicable retention period depends on the nature of the data and the purpose for which it is processed. In particular:

• Contact and communication data: retained for as long as necessary to respond to the relevant inquiry, request, or communication and, where appropriate, for the period necessary to manage the resulting relationship.
• User account data: retained for as long as the user maintains an account and the data is necessary to provide the associated services. Where an account is no longer required, personal data will be deleted or anonymized unless continued retention is necessary for another lawful purpose.
• Course and educational data: course enrolment, progress, assessment, completion records, and related academic information may be retained for as long as necessary to administer the course, provide evidence of completion, issue and verify certificates or diplomas, and manage the resulting contractual relationship. Where continued identification of the user is no longer necessary, data may be anonymized.
• Orders, invoices, contractual documentation, and related business records: retained for the periods required by applicable tax, accounting, commercial, and other legal obligations. In particular, business books, correspondence, documentation, and supporting records falling within Article 30 of the Spanish Commercial Code are retained for the legally applicable six-year period.
• Contractual and consent records: records of contractual acceptance, applicable terms and conditions, consent where relevant, and other evidence necessary to demonstrate the existence and content of the contractual relationship may be retained for as long as necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
• Newsletter and marketing data: retained until the user withdraws consent or unsubscribes, except for the minimum information that may be necessary to record and respect the user’s withdrawal of consent or objection to further communications.
• Technical and cookie-related data: retained in accordance with the purposes and retention periods described in the applicable Cookie Policy and, where relevant, by the settings of the third-party services involved.

When the applicable retention period expires, QUANTIPHI SL will delete or anonymize the relevant personal data, unless continued retention is required or permitted by law, or is necessary for the establishment, exercise, or defence of legal claims.

Different categories of personal data may therefore be retained for different periods, depending on their purpose and the legal obligations applicable to them.

8. User Rights

Users may exercise the following rights in relation to their personal data, subject to the conditions and limitations established by applicable data protection law:

• Right of access: to obtain confirmation as to whether QUANTIPHI SL processes their personal data and, where applicable, access to such data and the information required by law.
• Right to rectification: to request the correction of inaccurate or incomplete personal data.
• Right to erasure: to request the deletion of personal data where the legal requirements for erasure are met.
• Right to restriction of processing: to request the restriction of processing in the circumstances established by applicable law.
• Right to object: to object to certain processing of personal data, including processing based on legitimate interests and, where applicable, direct marketing.
• Right to data portability: to receive personal data in a structured, commonly used, and machine-readable format and, where legally applicable, to have it transmitted to another controller.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right not to be subject to certain automated decisions: where applicable under data protection law, to request appropriate safeguards in relation to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise these rights, users may contact QUANTIPHI SL at:

privacy@quant-phi.com

Requests to exercise data protection rights are generally free of charge. QUANTIPHI SL will respond without undue delay and, in any event, within one month of receiving the request. This period may be extended by up to two additional months where necessary, taking into account the complexity and number of requests. Where an extension is necessary, the user will be informed within the first month.

Where QUANTIPHI SL has reasonable doubts concerning the identity of the person making a request, it may request additional information necessary to confirm the user’s identity.

If QUANTIPHI SL does not take action on a request, the user will be informed without undue delay and, at the latest within one month, of the reasons for this and of the possibility of lodging a complaint with a supervisory authority.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) or another competent supervisory authority if they consider that their personal data protection rights have been infringed.

QUANTIPHI SL does not currently make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect users.

9. Security Measures

QUANTIPHI SL implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk associated with the processing of personal data.

These measures are designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access, and to maintain the confidentiality, integrity, availability, and resilience of the systems and services used to process personal data.

Depending on the nature and risks of the processing, such measures may include access controls, authentication mechanisms, encryption or other appropriate protection measures, secure communication protocols, regular software and security updates, backups and recovery measures, and procedures for detecting, managing, and responding to security incidents.

QUANTIPHI SL periodically reviews and, where appropriate, updates its technical and organisational measures in accordance with technological developments, identified risks, and applicable data protection requirements.

10. Cookies and Similar Technologies

This website uses cookies and similar technologies for purposes including ensuring its proper functioning, maintaining security, remembering user preferences, and, where applicable, analysing website usage and improving the services.

Cookies and similar technologies may include strictly necessary or technical technologies and, where applicable, preference, analytics, or marketing technologies.

Where consent is required by applicable law, non-essential cookies and similar technologies will only be activated after the user has provided the required consent.

Detailed information about the cookies and similar technologies used on the website, including their purposes, providers, categories, and retention periods, is available in the Cookie Policy.

Users may review, modify, or withdraw their cookie preferences at any time through the cookie consent management tool available on the website.

11. Changes to This Privacy Policy

QUANTIPHI SL may update this Privacy Policy from time to time in order to reflect changes in applicable legal or regulatory requirements, guidance from data protection authorities, or changes to the website, services, or data processing activities carried out by QUANTIPHI SL.

Any material changes will be published on this page and, where required by applicable law, users will be provided with any additional information or notice required.

The date of the latest update will be indicated at the beginning of this Privacy Policy.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their personal data is processed.

Changes will apply from the effective date indicated in the updated Privacy Policy and will not affect the lawfulness of processing carried out before that date.