Privacy Policy

The QUIXXS platform is operated by AMNEXIS HOLDING Ltd, trading as AMNEXIS ("we", "us", "our"). This privacy policy applies to the QUIXXS app and web application ("Services") and explains how we collect, use, disclose and safeguard your information.

1. Data Controller

QUIXXS is the data controller of all data collected and processed when using the App and Services, under EU and UK data protection laws. Our contact details are set out at the end of this policy.

2. Data Protection Officer

We have a designated Data Protection Officer (DPO) who oversees compliance with this privacy policy. You can contact our DPO at DPO@amnexis.com.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data — names, usernames, dates of birth, gender
• Contact Data — addresses, email addresses, phone numbers
• Financial Data — bank and payment card details
• Transaction Data — details about payments and purchases made through our Services
• Device Data — mobile device identifiers, IMEI numbers, MAC addresses
• Profile Data — usernames, passwords, purchase history, preferences and feedback
• Usage Data — details of your use of our app including traffic data and resources accessed
• Marketing and Communications Data — your preferences in receiving marketing from us
• Location Data — GPS-determined current location where you grant permission

We do not intentionally collect any special categories of personal data about you (including details about your health, race, religion, sexual orientation, or criminal convictions) unless you are a healthcare professional using clinical functions of the Service where this is strictly necessary.

4. How We Collect Your Data

We collect data through:

• Information you provide directly via registration forms and in-app inputs
• Automatic collection during use of our app or website using cookies and similar technologies
• GPS technology for location services (with your permission)
• Third-party sources including business partners and analytics providers

5. Failure to Provide Data

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you.

6. Cookies and Tracking Technologies

We use cookies and/or other tracking technologies to distinguish you from other users and to improve your experience. Please see our Cookie Policy for full details.

We also use pixel tags (small graphic files) and web beacons (electronic images) to monitor use of our Services. These may collect information including IP addresses, browser type, referring URLs, and time of access.

7. How We Use Your Personal Data

We process your personal data only where we have a lawful basis, including:

• Where you have given consent
• Where processing is necessary for the performance of a contract with you
• Where we have a legitimate interest that is not overridden by your rights
• Where we have a legal obligation to process your data

Direct marketing communications are only sent where you have provided consent, which you may withdraw at any time.

8. Disclosures to Third Parties

We may share your personal data with:

• Group members and subsidiaries of Amnexis Holding Ltd
• Business partners involved in delivering our Services
• Analytics and advertising providers
• Professional advisors (lawyers, auditors, insurers)
• Tax authorities and regulatory bodies where required by law

We do not disclose personal data about identifiable individuals to advertisers. We may provide aggregated, anonymised data to third parties for research and analysis purposes.

9. International Data Transfers

Some of our third-party service providers are based outside the UK and EU. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Transfers to countries with an adequacy decision
• Standard contractual clauses approved by the ICO or European Commission
• Data Privacy Framework certifications

10. Data Security

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way. All payment transactions are encrypted. We have procedures to deal with any suspected personal data breach and will notify you and applicable regulators where required by law.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal and regulatory requirements. Customer data is retained for 6 years after the end of the customer relationship for tax purposes. Deleted accounts are archived for 30 days before permanent deletion. Accounts inactive for 12 or more months may be deleted.

12. Your Legal Rights

Under data protection law, you have the right to:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data in certain circumstances
• Restriction — request restriction of processing in certain circumstances
• Objection — object to processing based on legitimate interests
• Portability — request transfer of your data to another party
• Withdraw consent — where processing is based on consent

Requests will be fulfilled within 30 days unless particularly complex. To exercise your rights, contact us at DPO@amnexis.com.

13. Marketing

You will receive marketing communications from us only if you have opted in or purchased services from us. Third-party marketing requires your express opt-in consent. You may opt out at any time through your account settings or by using the unsubscribe link in any email.

14. Age Restrictions

Our Services are not intended for and shall not be used by anyone under the age of 18. We do not knowingly collect personal data from children.

15. Complaints

You have the right to lodge a complaint with a supervisory authority. In Ireland, the relevant authority is the Data Protection Commission (DPC): www.dataprotection.ie. In the UK, contact the Information Commissioner's Office (ICO): ico.org.uk.

16. Third Party Suppliers

A list of third-party suppliers used in connection with our Services is available at: amnexis.com/quixxslegals/

17. Changes to This Policy

This privacy policy was last updated on 15 July 2024. We may update this policy from time to time. We will notify you of any significant changes by email or by posting a notice on our website.

18. Contact Us

Amnexis Holding Ltd.
The Guinness Enterprise Centre
Taylor's Lane, Dublin 8, Ireland
Email: DPO@amnexis.com