Privacy Policy
Last updated: 27 October 2026
alexsantos.ie, Ireland, is the controller of account, enquiry and service administration data for Quantica Legal. We address Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486) and the EU General Data Protection Regulation (GDPR), where applicable. Privacy requests are handled at hello@quanticalegal.com.
Information and purposes
We collect your name, email, organisation, account and subscription details, enquiries you send, saved searches and technical records needed to keep the service secure. We use them to manage accounts, provide search, respond to enquiries, administer payment, resolve problems and prevent misuse. Do not include client names or confidential case information in searches or contact forms.
Lawful bases under the GDPR
Account and subscription processing is necessary to perform our contract. Statutory accounting or disclosure relies on legal obligations. Security and enquiry administration rely on legitimate interests, balanced against your rights. Product emails require separate consent, which you may withdraw without affecting service access. Searches are never used to train AI.
Providers and international transfers
Supabase hosts the primary database and sign-in service in Singapore. Vercel provides the application and global content delivery. Resend handles email. Provider support and onward processing may take place in other countries. Our Security page lists the providers.
Transfers outside the EEA require applicable safeguards under Chapter V of the GDPR. The final policy must confirm provider contracts, standard contractual clauses and any necessary transfer assessments during legal review; this draft does not represent that review as complete. Contact us for information about the safeguards applicable to your data.
Retention and security
The search history retention period is twelve months. Account data is kept for service delivery and related requests; billing records are retained as required by law. Backups and security logs follow the relevant provider’s retention arrangements. We use encrypted connections, access controls and database row-level security. Data export or deletion can be requested.
Your rights
You can request access, correction or deletion, and where applicable restriction, portability and objection to processing. You can withdraw marketing consent at any time. Contact hello@quanticalegal.com; we may first verify your identity. Hong Kong access and correction requests are handled under the PDPO. GDPR requests are normally answered within one month, subject to statutory exceptions.
You may complain to Ireland’s Data Protection Commission or the Hong Kong Privacy Commissioner for Personal Data. We do not make solely automated decisions about you with legal or similarly significant effects.
Published judgment information
The Index contains material from published judgments on HKLII, including personal information contained in those judgments, for legal research. Contact us about accuracy, source restrictions or personal-data concerns to request correction or restriction.