We may collect personal data: directly when you engage with us; indirectly from third-party sources that engage with you and us; when we handle personal data for the purpose of providing our services; and from regulatory bodies. We only collect the minimum data necessary for the performance of our regulatory or client duties, or related service to those duties.
We will only use your personal data when applicable law allows us to and where it is necessary (for example performance of a contract). Depending on the nature and purposes of processing being carried out, our basis for processing may include: pursuing our legitimate interest or those of a third party. Under the EU GDPR and the UK GDPR, the lawful basis of such processing is the EU GDPR (or equivalent provisions in the UK GDPR).
You have the right to withdraw your consent at any time by contacting us using the contact page. We do not sell your personal data nor does it undergo any automated decision making.
To the extent that our processing of your personal data is subject to the GDPR or other data protection legislation with data subject rights. To exercise these rights, please contact us at dpo@qrnm.com.
In most circumstances, you have the right to ask us for a copy of your personal data; to correct or complete any inaccurate or incomplete personal data; to object to or withdraw consent for the processing of your data; and to delete your data. These rights are subject to applicable law and relevant exemptions.
We respond to all legitimate rights requests within the relevant statutory time limits; where permitted by law, this may take longer than usual if the request is complex.