Part A

Privacy Policy

Last updated: [date to be inserted upon publication]

A1

Introduction

AQUINTAQA Technologies Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with aquintaqa.com.

This policy applies to data collected through: the aquintaqa.com website; contact and investor enquiry forms; newsletter subscription; and electronic NDA (e-NDA) and Data Room access flows.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Site is not intended for children under 16 years of age, and we do not knowingly collect data from them.

A2

Data Controller

AQUINTAQA Technologies Ltd is the data controller for personal data collected through this Site.

Registered address: [AQUINTAQA Technologies Ltd registered address]

Data protection contact: privacy@aquintaqa.com

A3

Categories of Personal Data We Collect

Data you provide directly: name, email address, company name, job role (via contact and investor forms); message content; newsletter opt-in; investor onboarding data (e-NDA acceptance, KYC); Data Room account information and access logs.

Data collected automatically: IP address, browser type and version, device type; server and access logs (pages visited, timestamps, referrers); strictly necessary cookies (always active); analytics and marketing cookies (consent only).

A4

Purposes and Legal Bases for Processing

PurposeLegal Basis (UK GDPR)
Responding to contact enquiriesArt. 6(1)(b) Contract; Art. 6(1)(f) Legitimate interests
Investor onboarding (e-NDA, Data Room)Art. 6(1)(b) Contract; Art. 6(1)(f) Legitimate interests; Art. 6(1)(c) Legal obligation
Operating and securing the Data RoomArt. 6(1)(f) Legitimate interests
Newsletters and marketing communicationsArt. 6(1)(a) Consent
Site analytics and performance measurementArt. 6(1)(a) Consent
Security monitoring and fraud preventionArt. 6(1)(f) Legitimate interests
Compliance with legal obligationsArt. 6(1)(c) Legal obligation
A5

Cookies

We use cookies and similar tracking technologies. Strictly necessary cookies are always active. Analytics and marketing cookies are placed only with your explicit consent. Full details are in Part B: Cookies Policy below.

A6

Data Retention

  • Contact enquiries: up to 24 months from submission date.
  • Investor documents and e-NDA records: 6 years from execution date (UK legal requirements).
  • Newsletter subscriptions: until consent is withdrawn or you unsubscribe.
  • Security and server logs: 12 months.
  • Data Room access logs: duration of access plus any applicable legal retention period.

Data no longer needed for its original purpose and with no legal retention obligation is securely deleted or anonymised.

A7

Data Sharing and Processors

We do not sell your personal data. We share data only with trusted processors under written agreements:

  • Vercel Inc. — website hosting (EU regions: Frankfurt & Amsterdam);
  • Cloudflare Inc. — CDN, DNS, DDoS protection (EU Data Localization Suite);
  • MailerLite UAB — email marketing and form processing (EU data centre);
  • Analytics provider — GA4 Consent Mode v2 or EU-based alternative (Plausible/Matomo);
  • Professional advisers — lawyers, accountants, auditors (professional secrecy obligations);
  • AQUINTAQA group companies — including AQUINTAQA IP Ltd, for legitimate business purposes.

We may also disclose data where required by law, court order, or regulatory authority.

A8

International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including: UK International Data Transfer Agreement (IDTA) and/or UK Addendum to the EU Standard Contractual Clauses (SCCs). Our primary processors (Vercel EU regions, Cloudflare EU Localization) process data within the EU/EEA.

A9

Security

We implement appropriate technical and organisational measures, including: HTTPS/TLS encryption for all data in transit; least-privilege access controls; audit logging for Data Room access; and personnel confidentiality obligations. If you believe your data has been compromised, contact privacy@aquintaqa.com immediately.

A10

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Access

Request a copy of data we hold about you.

Rectification

Request correction of inaccurate data.

Erasure

Request deletion (subject to exceptions).

Restriction

Request we restrict processing in certain circumstances.

Objection

Object to processing based on legitimate interests.

Portability

Receive data in a machine-readable format.

Withdraw consent

Withdraw at any time where processing is consent-based.

To exercise any right, contact: privacy@aquintaqa.com. We will respond within 30 days.

To lodge a complaint: Information Commissioner's Office (ICO)ico.org.uk | +44 303 123 1113

A11

Changes to This Privacy Policy

We may update this policy from time to time. The "Last updated" date will be revised accordingly. Continued use of the Site constitutes acceptance of the updated policy. Contact: privacy@aquintaqa.com

Part B

Cookies Policy

Effective date: 05 December 2025

B1

What Are Cookies?

Cookies are small text files placed on your device by websites you visit. We also use related technologies including local storage, pixels (tracking images), and server log identifiers. Cookies serve various purposes: keeping you logged in, remembering your preferences, understanding how you use the site, and enabling certain features.

B2

Legal Basis

Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR. Strictly necessary cookies do not require consent. For all other cookies, we obtain your explicit consent via the cookie banner on your first visit.

B3

Cookie Categories and Details

1. Strictly Necessary

Always active — no consent needed

Essential for the Site to function. Cannot be disabled.

2. Analytics

Consent required

Help us understand how visitors use the Site. Activated only with consent.

3. Functional

Consent required

Remember your preferences and personalise your experience.

4. Marketing

Consent required — off by default

Used for campaign analytics. Disabled by default; activated only with explicit consent.

B4

First-Party vs Third-Party Cookies

First-party cookies are set by aquintaqa.com and readable only by this site. Third-party cookies are set by external services (Cloudflare, Vercel, Google, MailerLite) and may be accessible to those parties per their own privacy policies.

B5

Cookie Duration

Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a specified period or until manually deleted. Duration for each cookie is shown in the table above.

B6

Managing Your Consent

  • Cookie banner: displayed on first visit — select "Accept all", "Reject", or "Settings".
  • Cookie Settings (footer): use the "Cookie Settings" link in the page footer to re-open preferences at any time.
  • Browser settings: most browsers allow you to block or delete cookies. Note: disabling cookies may affect Site functionality.

Withdrawing consent does not affect the lawfulness of prior processing.

B7

Main Cookie Providers

B8

Updates to This Cookies Policy

We may update this Cookies Policy to reflect changes in the cookies we use or for legal/regulatory reasons. The effective date will be updated accordingly.

B9

Contact

For questions about this Cookies Policy or to exercise your rights: privacy@aquintaqa.com