Effective Date: 7/1/2026
WHO WE ARE
This Privacy Policy applies to QuotientHR, Inc. and itscurrent and future subsidiaries and affiliated companies that reference or adopt this Privacy Policy (collectively, the “Company Group”, “QHR”, “we”,“our”, or “us”).
It describes the applicable Company Group entity collects, uses, discloses, retains, transfers, and safeguards personal information when individuals visit our websites, request ademonstration, communicate with us, or otherwise interact with us. For purposes of this Privacy Policy, the Company Group currently includes: QuotientHR Inc., IQHR LLC,
QHR Connect, current list of Company Group entities is available upon request at
contactus@quotienthr.com.
Scope of this Notice
This Privacy Policy covers personal information collected through our public websites, demonstration requests, business communications and similar interactions described in this Policy.Separate privacy notices apply to certain other activities. In particular, people who apply for, or are considered for, a contract of employment with QuotientHR Limited are covered by the QuotientHR Candidate Privacy Notice (UK). That notice sets out the categories of information collected, the purposes and legal bases for processing, retention periods, international transfers, sharing, and the rights available in connection with UK employed-role recruitment. It does not apply to independent contractors or to people held only on a contractor bench.Additional or supplemental notices may also apply to employees, workers, customers, and users of customer-managed services, or individuals whose information we process on behalf of a customer. When a Company Group entity processes personal information solely on a customer’s instructions, that customer is responsible for its own privacy notice, and related requests should generally be directed to the customer.
Data Controller Information
The Company Group entity that determines why and how personal information is processed is the controller responsible for that processing. This will ordinarily be entity with which you interact or contract.In some circumstances, two or more Company Group entities may act as joint controllers or as separate controllers when they process personal information for shared administrative, operational, compliance, customer support, human resources, marketing or business management purposes.Where required by applicable law, the relevant Company Group entity acting as the data controller will be identified when personal information is collected, together with its contact details and, where applicable, the contact details of its data protection officer or representative. Where Company Group entities act as joint controllers, we will also provide information about their respective responsibilities and the principal contact for privacy requests. For recruitment of employees by QuotientHR Limited (company number 17380837), that entity is the data controller. Details of the processing and the contact for rights requests are set out in the QuotientHR Candidate Privacy Notice (UK).
Legal Bases, Sources, Retention, and Automated Decisions
Where UK data protection law applies, we process personal information only where we have a lawful basis. Depending on the circumstances, that basis may be taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, pursuing our legitimate interests or those of a third party where those interests are not overridden by your rights, or obtaining your consent. Our legitimate interests may include responding to business inquiries, providing and improving our websites and services, maintaining the security of our system, preventing fraud, managing business relationships, and conducting appropriate business administration and marketing. Where we rely on consent, you may withdraw it at any time without affecting processing carried out beforewithdrawal. If we obtain personal information from a source other than you, we will identify the relevant categories of sources and provide the required privacy information within the period required by applicable law. We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to satisfy legal, accounting, reporting, security, and dispute resolution requirements. Retention periods are determined by the nature and sensitivity of the information, the purpose for which it is processed, the risk of harm from unauthorized use or disclosure, and applicable legal requirements. We will disclose whether we use automated decision making or profiling that produces legal or similarly significant effects and, where required, provide meaningful information aboutthe logic involved, the significance and expected consequences, and available rights.
Sharing Personal Information within the Company Group
We may share personal information among members of the Company Group for purposes including:
·Providing products and services;
·Managing customer and business relationships;
·Operating and improving our website and systems;
·Accounting, finance, and auditing activities;
·Legal, regulatory, and compliance obligations;
·Information security and fraud prevention;
·Human resources and recruiting activities;
·Business planning, reporting, andadministration.
All Company Group entities receiving personal information are required to use and protect that information in accordance with this Privacy Policy and applicable law.When we disclose personal information, recipients may include service providers and processors that support hosting, analytics,customer relationship management, communications, security, professional advice, and business administration; other Company Group entities; business partners where relevant to a requested service; regulators, courts,law-enforcement authorities, and other parties where disclosure is required or permitted by law; and parties involved in a merger, acquisition, financing,reorganization, sale of assets, or similar corporate transaction. Service providers and processors are authorized to process personal information onlyfor specified purposes and subject to appropriate contractual obligations.
International Transfers
Because the Company Group operates in multiple jurisdictions, personal information may be transferred to, stored in, oraccessed from countries or states other than the location in which it was collected. Those destinations may have data protection laws that differ from those in your location. Where applicable law restricts an international transfer, we use a recognized transfer mechanism, such as an applicable adequacy regulation, approved contractual safeguards, or a permitted exception, and we take additional measures where required. Information about the safeguards applicable to a transfer, including how to obtain a copy where the law provides thatright, may be requested at contactus@quotienthr.com.
Information We CollectWe may collect information that you voluntarily provide, including your name, company name, job title, email address, phone number, employee count, and information submitted through forms or demonstration requests. We may also automatically collect certaintechnical information, including, IP address, browser type, device information, referring website, pages visited, and date and time of access
How We Use InformationWe use collected information to respond to inquiries, schedule and provide product demonstrations, improve our website and services, communicate with prospective customers, analyze website performance and user behavior; and comply with legal obligations
Analytics and CookiesWe may use cookies, analytics tools, and similar technologies to understand how visitors use our website and improve the user experience. Where required by law, we obtain consent before using cookies or similar technologies that are not strictly necessary. Our cookie notice or preference tool describes the categories, purposes, providers, and durations of the technologies in use and allows users to withdraw or change consent. Browser settings may not provide the same choices as the website preference tool or prevent all forms of tracking.
Sharing of InformationWe do not sell personal information. We may share information with service providers that assist with website operations, hosting, analytics, customer relationship management systems, and business operations. Information may also be disclosed when required by law or to protect our legal rights. Any statement that we do not sell or share personal information applies only if itaccurately reflects our practices, including the operation of advertising, analytics, and cookie technologies.
Data SecurityWe maintain administrative, technical, and physical safeguards designed toprotect personal information against unauthorized access, disclosure,alteration, loss, or misuse. No method of transmission or storage can beguaranteed to be completely secure.
Your RightsDepending on your location and applicable law, you may have the right to request access to or a copy of your personal information, correction, deletion, restriction of processing, data portability, or objection to processing, including certain direct marketing. Requests may be submitted to:
contactus@quotienthr.com. We may take reasonable steps to verify your identify and authority before acting on a request. You may use an authorized agent wherepermitted by law. We will respond within the period required by applicable law, explain any applicable exception ordenial, and will not discriminate against you for exercising a privacyright. Where UK data protection law applies, you may lodge a complaint with the UK Information Commissioner’s Office or another competent supervisory authority. Where applicable US state law provides a right to appeal our decision, you may submit an appeal using the same contact address and identifying the request you wish to appeal. UK candidates applying for employed roles with QuotientHR Limited should refer to the QuotientHR Candidate Privacy Notice for the specific information and rights that apply to that process. Rights requests relating to that notice may be sent to
sarah.akanbi@quotienthr.com.
California Consumer Privacy RightsIf the California Consumer Privacy Act (CCPA), as amended, applies to our processing, California residents may have rights to know, access, correct, ordelete personal information; opt out of its sale or sharing, limit certain uses and disclosures of sensitive personal information, and receive equal serviceand pricing when exercising their rights. Where required, we will provide legally compliant opt-out methods and honor recognized opt-out preference signals.
Children’s Privacy
Our websites and the interactions covered by this Privacy Policy are not directed to children, and we do not knowingly collect personal information from children through them. If we learn that we have collected a child’s personal information in circumstances requiring parental consent or authorization, we will take appropriate steps to delete it or obtain the required consent. A parent or guardian who believes that a child has provided personal information to us may contact us at contactus@quotienthr.com.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites.
Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated effective date. If a change materially affects how we use personal information, we will provide additional notice where required by applicable law before the new uses begin.
Contact
Questions, complaints, and privacy requests regarding this Privacy Policy maybe directed to: contactus@quotienthr.com.
