Legal
Privacy Policy.
Your privacy matters to us. This policy explains what personal information we collect, how we use and protect it, and the rights you have over it.
Who we are
This policy applies to the Quanta website and its verification portal. For the purposes of data-protection law, Quanta Pharmaceuticals (“Quanta”, “we”, “us”, or “our”) is the data controller responsible for the personal information described here — that is, we decide why and how it is processed.
We only collect the information we need, we're transparent about how we use it, and we never sell it. If you have any questions, the details in Section 13 tell you how to reach us.
Information we collect
Information you give us
When you get in touch — for example, by completing our contact form — we collect the information you choose to provide, such as your name, email address, and the contents of your message. Please don't include sensitive health information in what you send us.
Information we collect automatically
When you visit the Site, we may collect limited technical information automatically, including your device and browser type, approximate location derived from your IP address, the pages you view, and how you arrived at the Site. We use this to keep the Site secure and working well and to understand, in aggregate, how it is used.
Verification data
When you check a product code on our verification portal, we process that code and basic technical details of the request so we can return a result and detect misuse. Checking a code does not require you to create an account or tell us who you are.
How we use your information
We use the information described above to:
- respond to your enquiries and provide the information or support you ask for;
- operate, maintain, secure, and improve the Site and the verification portal;
- confirm product authenticity and detect fraudulent or counterfeit activity;
- understand how our Site is used, in aggregate, so we can make it better; and
- comply with our legal obligations and enforce our Terms of Use.
We do not use your personal information to make decisions about you by automated means alone, and we do not sell it to anyone.
Legal bases for processing
Where data-protection law such as the GDPR applies, we rely on one or more of the following legal bases to process your personal information:
- Consent
- Where you have given us permission for a specific purpose — for example, sending you information you have asked for. You can withdraw consent at any time.
- Legitimate interests
- Where processing is reasonably necessary for our legitimate interests — such as securing the Site, preventing counterfeiting, and understanding how the Site is used — provided those interests are not overridden by your rights.
- Legal obligation
- Where we need to process information to comply with a legal or regulatory requirement that applies to us.
How long we keep it
We keep personal information only for as long as we need it for the purposes set out in this policy — for example, to answer your enquiry and keep a reasonable record of our correspondence — and then for as long as required to meet legal, accounting, or reporting obligations. When information is no longer needed, we securely delete or anonymise it.
How we protect it
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration — including encryption in transit, access controls, and the principle of collecting only what we need. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.
International transfers
We and our service providers may process personal information in countries other than the one you live in. Where we transfer information across borders, we take steps to ensure it remains protected to a standard consistent with this policy and applicable law — for example, by relying on recognised adequacy decisions or standard contractual clauses.
Your privacy rights
Depending on where you live, you may have some or all of the following rights over your personal information:
- Access
- Ask for a copy of the personal information we hold about you.
- Rectification
- Ask us to correct information that is inaccurate or incomplete.
- Erasure
- Ask us to delete your information where there's no longer a reason to keep it.
- Restriction & objection
- Ask us to limit, or object to, how we use your information.
- Portability
- Ask to receive certain information in a portable, machine-readable format.
- Withdraw consent
- Withdraw consent at any time, without affecting earlier processing.
To exercise any of these rights, contact us using the details in Section 13. We will respond within the time required by law. You also have the right to complain to your local data-protection authority, though we'd appreciate the chance to resolve your concern first.
Children's privacy
The Site is intended for adults and healthcare or research professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we do, we will update the “last updated” date at the top of this page, and we will highlight any significant changes more prominently. Please review this page periodically.
How to contact us
If you have any questions about this policy, or would like to exercise your rights, please get in touch.
- General enquiries
- Use the contact form on our website.
Questions?
If anything here is unclear, or you'd like to exercise a right described above, our team is happy to help.