Loading…
One form, one purpose. This page explains what happens to the data you send us and to the request metadata needed to keep the form abuse-free.
QuantStratum OÜ (a private limited company registered in Estonia, Tallinn, via e-Residency) is the data controller for personal data submitted through this website. You can reach us about anything in this policy at contact@quantstratum.com.
The enquiry form collects your name, company, email address, the service you are interested in, an optional budget range, and your project brief. We use this data for exactly one purpose: responding to your enquiry and, if you engage us, preparing that engagement. The legal basis is our legitimate interest in answering enquiries you initiate (GDPR Art. 6(1)(f)) and, where you request a proposal, steps prior to entering a contract (Art. 6(1)(b)). We do not use this data for marketing, we do not sell it, and we do not run analytics or advertising trackers on this site.
Enquiry emails are retained for as long as the conversation is live and up to 24 months after the last exchange, so we can pick up a returning conversation with context. Enquiries that lead to a contract are retained as part of the engagement record for the legally required accounting periods.
To protect the enquiry endpoint from abuse, the server derives your IP address from the request (the proxy-appended X-Forwarded-For entry) and holds it in memory as a rate- limiting key for up to 10 minutes, on the legal basis of our legitimate interest in preventing abuse and fraud (GDPR Art. 6(1)(f)). It is never written to a database or combined with your form data by this website. Independently of that, our infrastructure providers keep short-lived operational logs: Google Cloud Run records standard request metadata and Resend records email delivery metadata, each under their own data processing terms.
Form submissions are delivered to our inbox by Resend (Resend, Inc.), acting as an email delivery processor under their data processing terms. The submission travels from your browser to this website's server and from there to Resend; it is not stored in a database by this website. Our mailbox and internal tooling are the only other places the data lives.
Under the GDPR you can request access to, correction of, or deletion of your personal data, object to the processing, or ask for a copy in a portable format. Email contact@quantstratum.com and we will answer within one month. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
Last updated: August 2026