Privacy Policy

1. Introduction

Qexoria SARL ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services. This policy applies to all data we collect through our website, services, and communications.

2. Data Controller Information

The data controller for your personal information is Qexoria SARL, registered in Luxembourg with registration number RCS291643. Our registered office is located at Rue du Curé 93, 4655 Esch-sur-Alzette, Luxembourg. For any privacy-related enquiries, please contact us at privacy@qexoria.top or +352 26480183.

3. Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you use our website. The data we collect includes:

• Contact information (name, email address, phone number, company details)
• Communication records (enquiries, support requests, consultation notes)
• Website usage data (IP address, browser type, pages visited, time spent on site)
• Technical information (device information, operating system, referral sources)
• Cookie and tracking data (preferences, analytics data, advertising identifiers)

4. How We Use Your Information

We process your personal data for various purposes based on legitimate business interests, your consent, or to fulfil contractual obligations. How we use your information includes:

• Providing and improving our open finance consultation services
• Responding to your enquiries and providing customer support
• Sending relevant business communications and service updates
• Analysing website performance and user behaviour for improvements
• Complying with legal obligations and regulatory requirements
• Protecting our business interests and preventing fraud

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: (a) Consent - when you have given clear consent for specific processing activities; (b) Contract - when processing is necessary to perform a contract with you; (c) Legal obligation - when we must comply with legal requirements; (d) Legitimate interests - when we have legitimate business reasons that do not override your rights and freedoms.

6. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

7. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and providing services, such as hosting providers, analytics services, and email platforms. All third parties are required to maintain the confidentiality and security of your personal information and may only use it for the specific purposes we have outlined.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Contact information and communication records are typically retained for 7 years after the last interaction, whilst website analytics data is retained for 26 months. You may request earlier deletion of your data by contacting us at privacy@qexoria.top.

9. Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access - to request copies of your personal data
• Right to rectification - to request correction of inaccurate information
• Right to erasure - to request deletion of your personal data
• Right to restrict processing - to limit how we use your data
• Right to data portability - to request transfer of your data
• Right to object - to object to certain types of processing
• Right to withdraw consent - where processing is based on consent

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure hosting, access controls, and regular security assessments. However, no internet transmission is completely secure, and we cannot guarantee absolute security of your data.

11. International Data Transfers

As we operate primarily within the European Union, your data is generally processed within the EU/EEA. If we transfer data to countries outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

12. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

13. Complaints

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) or your local supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.