Privacy Policy

This Privacy Policy explains how Barrakuda Quant collects, uses and protects personal information when you visit barrakudaquant.com, request access to our platform, or otherwise interact with us. We take privacy seriously and aim to comply with the Personal Data (Privacy) Ordinance of Hong Kong (PDPO) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who we are

The data controller responsible for personal information collected through this website is:

2. Information we collect

We aim to collect the minimum information necessary for the purposes described in this policy. The categories of personal information we may collect include:

• Contact information you provide. When you click "Request access" or otherwise email us, you send us your email address and any details you choose to include (for example, your name, firm, or message body).
• Technical information. Our hosting provider may keep standard server logs containing IP addresses, browser user-agent strings, request URLs and timestamps, retained for a limited period for security and diagnostics.
• Account information (platform users only). If you are granted access to our platform (app.barrakudaquant.com), authentication and account-related information are processed by our authentication provider on our behalf.

We do not knowingly collect special-category personal data (such as racial or ethnic origin, political opinions, health, or biometric data) through this website. Please do not send us such data unless we specifically request it.

3. How we use information

We use personal information for the following purposes:

• To respond to access requests, enquiries and other communications you initiate;
• To provide, operate, maintain and improve the platform for users who have been granted access;
• To protect the security and integrity of our website and platform, including detecting and preventing fraud or abuse;
• To comply with applicable laws and to respond to lawful requests from competent authorities.

We do not sell personal information. We do not use personal information for behavioural advertising or for any decision that produces legal or similarly significant effects without your involvement.

4. Legal basis (EU/UK visitors)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Legitimate interests — to respond to your enquiries, secure and improve our services, and run our business in a sensible way, balanced against your rights and expectations;
• Performance of a contract — to provide the platform to users who have entered into an access arrangement with us;
• Legal obligation — to comply with laws that apply to us;
• Consent — where consent is required by law and where you have given it, you may withdraw that consent at any time.

5. Sharing with third parties

We share personal information only with service providers that help us operate the website and platform, under appropriate contractual safeguards. These include:

• Hosting and infrastructure — providers that host the website and platform and route email;
• Authentication — a third-party provider used to authenticate platform users.

This website itself does not load resources from third-party domains and therefore does not expose your visit to any external party. See our Cookie Policy for details.

We may also disclose personal information where required by law, to enforce our agreements, or to protect the rights, property or safety of Barrakuda Quant, our users or others.

6. International transfers

Barrakuda Quant is established in Hong Kong S.A.R. If you access the website or platform from outside Hong Kong, your information will be transferred to, stored and processed in Hong Kong and in any country where our service providers operate. Where required by applicable law, we use appropriate safeguards (such as standard contractual clauses) for international transfers of personal data originating from the EEA or the UK.

7. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy. As a general rule:

• Access-request emails and related correspondence: retained for up to 24 months after the last meaningful interaction, unless a longer period is required by law or to resolve a dispute;
• Server logs: typically retained for up to 90 days;
• Platform account information: retained for the duration of the access arrangement and for a reasonable period after termination for accounting, audit and legal compliance.

8. Your rights

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request erasure of your personal information, where permitted;
• Request restriction of, or object to, certain processing;
• Request portability of information you provided to us;
• Withdraw any consent you have given, at any time;
• Lodge a complaint with a competent supervisory authority — in Hong Kong, the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk); in the EEA or the UK, your local data-protection authority.

To exercise any of these rights, contact us using the details in section 13. We may need to verify your identity before acting on a request, and some rights are subject to exceptions under applicable law.

9. Cookies and tracking

This website does not set cookies for its own purposes and does not use analytics, advertising or tracking technologies. For a full description of the third-party services that may interact with your browser, see our Cookie Policy.

10. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or destruction. No method of transmission over the Internet or method of electronic storage is fully secure, however, and we cannot guarantee absolute security.

11. Children's privacy

The website and platform are intended for adult professionals. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page indicates when the policy was last revised. Material changes will be highlighted on this page; please check back periodically.

13. Contact

For any privacy-related question or request, contact the Privacy contact named in section 1 at hello@barrakudaquant.com, or write to the registered office address shown above.