Privacy policy

Last updated: 1 October 2026


  1. GENERAL INFORMATION

The purpose of this information notice (hereinafter the Notice) is to set out the conditions under which TP Quants S.à r.l., a limited liability company under Luxembourg law, established and having its registered office at L-8048 Strassen (Luxembourg), 37, rue du X Septembre, registered in the Luxembourg Trade and Companies Register under number B306899 (hereinafter we or TP Quants) processes and protects the personal data of private and business users (hereinafter collectively you) on its website accessible at tpquants.com and on its client portal (together hereinafter the Website).

All such data processing is carried out by TP Quants in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the General Data Protection Regulation (hereinafter the GDPR), as well as the Act of 1 August 2018 on the organisation of the National Data Protection Commission and the implementation of the GDPR, and any subsequent regulations (hereinafter collectively referred to as the Applicable Legislation).

More specifically, this Notice explains when and why we need your personal data, what data we collect, how and for how long we process it, to whom we disclose it, what your rights are in relation to such processing, and how you can exercise those rights.

We may amend this Notice from time to time to reflect changes in the legislation or our data processing practices. The date of the last update is indicated at the top of the Notice. Where we make material or significant changes, you will be notified by appropriate means in due course.

  1. DATA CONTROLLER AND GDPR CONTACT POINT

In relation to the processing activities listed under the section Purposes, legal bases and retention periods of this Notice, TP Quants acts as the data controller within the meaning of Article 4.7 of the GDPR.

For any questions concerning the processing of your Personal Data or to exercise your data protection rights, you may contact TP Quants at:

by email at contact@tpquants.com; or
by post at the following address: L-8048 Strassen (Luxembourg), 37, rue du X Septembre.

  1. PERSONAL DATA COLLECTED

Personal data is any information that enables a natural person to be identified, either directly or indirectly (hereinafter referred to as Personal Data or Data).

We collect your Personal Data directly from you when you provide it voluntarily via our Website, in particular when you contact us through the contact form or by email, you when you create or use an account, submit a request for services through our client portal, upload documents or exchange messages in connection with our services, or contact us through our Website or by any other means of communication, including by email. We also collect certain technical data automatically when you access or use our Website or client portal.

The Personal Data required to create and manage an account and to access the services are clearly identified by an asterisk (*). Failure to provide such mandatory information may prevent TP Quants from creating the relevant account or providing access to the services.

Any other information that you may provide through the Website is optional. You may choose to provide additional information where you consider it relevant to your use of the Services or to a request submitted to TP Quants. Choosing not to provide such optional information will not prevent you from creating an account or accessing the services proposed by TP Quants on the Website.

More specifically, we process the following categories of Personal Data:

  • Personal identification and contact details: first name*, surname*, company's name*, login details* (email address, password), etc.

  • Electronic identification data: IP address, connection timestamps, user agent, authentication and server logs; a cookie or session token strictly necessary for authentication on the client portal, etc. The Website does not use advertising or tracking cookies.

  • Enquiry and engagement data: the content of your messages, requests submitted through the contact form or the client portal, and documents exchanged in connection with our services, etc.

  • Website audience data: aggregated, anonymised traffic statistics, without retaining IP addresses in clear form.

  • Other data: any other information you voluntarily provide to us (e.g. in connection with a complaint or specific request).

Documents exchanged in the course of an engagement may contain personal data relating to third parties. Where TP Quants processes such data on behalf of a client, it does so as processor under the terms of the relevant engagement, and that processing is governed by those terms rather than by this Notice.

You are only required to provide us with the Personal Data necessary to establish a relationship with us or to fulfil the contract(s) entered into with us, as well as that which we are required to collect and process by law. Consequently, if you do not wish to provide us with certain information, this may affect our ability to enter into and/or continue to perform the contract(s) or our ability to offer or provide certain services to you.

  1. PURPOSES, LEGAL BASES AND RETENTION PERIODS

The table below lists the various purposes for which your different categories of Personal Data are processed, the legal bases for their processing and their retention periods.

Management and provision of the Website's services

  • Creation and administration of the user account
    Legal basis: Performance of the contract (Article 6(1)(b) of the GDPR)
    Category of Personal Data processed: Personal identification and contact details
    Retention periods: 2 years from the end of the relationship, the last contact or the last activity on your account

  • Provision of technical and support services required for the operation of the Website (hosting, database and document storage, authentication, email delivery, website analytics, contact-form management, and accounting services)
    Legal basis: Performance of the contract (Article 6(1)(b) of the GDPR)
    Category of Personal Data processed: Personal identification and contact details; Business data; Data relating to the activity of the user's account
    Retention periods: 2 years from the end of the relationship, the last contact or the last activity on your account

  • Customisation/tailoring of the services to your needs and preferences, particularly with regard to content (e.g. report requested, documents uploaded)
    Legal basis: Performance of the contract (Article 6(1)(b) of the GDPR); Consent (Article 6(1)(a) of the GDPR)
    Category of Personal Data processed: Personal identification and contact details; Data relating to the activity of the user's account
    Retention periods: 2 years from the end of the relationship, the last contact or the last activity on your account

Marketing activities

  • by electronic means relating to services similar to those already provided
    The services covered by the term 'electronic marketing' are: standard email (SMTP), short message service (SMS), multimedia messaging service (MMS), automated calling systems and fax machines.
    Legal basis: Legitimate interest (Article 6(1)(f) of the GDPR). To send relevant updates and personalised communications, publicise our services, and promote our activities
    Category of Personal Data processed: Personal identification and contact details; Electronic identification data; Data relating to the activity of the user's account
    Retention periods: 2 years from the end of the relationship, the last contact or the last activity on your account

Non-marketing communication with users and handling their service requests and enquiries
On contractual and technical/security matters in particular

  • Via the Website (e.g. contact form, client portal Q&A)

  • By email
    Legal basis: Pre-contractual measures/Performance of the contract (Article 6(1)(b) of the GDPR); Legitimate interest (Article 6(1)(f) of the GDPR). Communication with users on non-contractual matters
    Category of Personal Data processed: Personal identification and contact details; Data relating to professional activities; Other data
    Retention periods: For the time required to process the request or for a maximum of 2 years from the end of the relationship, the last contact or the last activity on your account

Compilation of aggregated, pseudonymised or anonymised statistics to improve the Website and our services

Analysis of aggregated website traffic to improve the performance and quality of our content and services
Legal basis: Legitimate interest (Article 6(1)(f) of the GDPR). To improve the performance and quality of our content and services
Category of Personal Data processed: Electronic identification data
Retention periods: 18 months. Permanent retention of anonymised statistics

Complaints and dispute management

Legal basis: Performance of the contract (Article 6(1)(b) of the GDPR); Legitimate interest (Article 6(1)(f) of the GDPR). To manage any potential non-contractual disputes appropriately
Category of Personal Data processed: Other data; Any data that may enable the establishment, defence or exercise of legal rights
Retention periods: For the duration necessary to process the complaint or dispute. From the date the case is closed, the relevant data will be retained until the expiry of the applicable statutory limitation periods (in principle 10 years).

Handling requests to exercise GDPR rights

Legal basis: Legal obligation (Article 6(1)(c) of the GDPR). Provisions of the GDPR requiring the exercise and management of these rights (Articles 15 et seq., amongst others)
Category of Personal Data processed: Other data; All data necessary for processing the request
Retention periods: For the period necessary to process the request and to provide evidence thereof.

  1. RECIPIENTS OF YOUR PERSONAL DATA

Your Personal Data is processed internally for the purposes set out above by duly authorised persons, within the limits of their respective responsibilities and in accordance with the 'need-to-know' principle.

We may also disclose certain of your Personal Data, to the extent strictly necessary and for the purposes set out above, to the following categories of recipients:

  • to our partners, suppliers and service providers (e.g. web hosting providers, developers and any other IT service providers, providers of email, cloud-based collaboration and document storage services, secure document destruction companies, solicitors in the event of litigation or pre-litigation, accountants, auditors, bailiffs);

  • to various official bodies such as courts, administrative authorities or public services;

  • to any other third parties to whom we are required to disclose such data by law or by a court order.

  1. TRANSFERS OUTSIDE THE EU

It is specified that, as a general rule, we do not transfer your Personal Data outside the European Union or to countries that do not have a regulatory framework deemed adequate by the European Commission. Such transfers will only take place if required by law or if we engage service providers located outside the European Union to provide you with the services you have requested. In such case, the present Notice will be amended to reflect such transfer outside the EU.

  1. YOUR RIGHTS REGARDING YOUR DATA

Because your data belongs to you.

  • Access: obtain details of how your data is processed. View your data, understand how it is used, and request a copy.

  • Rectification: correcting incorrect data. Amend incorrect data, add missing information.

  • Portability: retrieve your data. Download your data to transfer it elsewhere.

  • Deletion: delete your data. Have your data deleted if it is no longer needed or was collected in error.

  • Restriction: temporarily suspend processing. Temporarily suspend processing in the event of a dispute or verification.

  • Objection: say 'no' to certain processing. Refuse the use of your data for legitimate interests or for marketing purposes.

  • Withdrawal of consent: change your mind. Withdraw any consent you have given, at any time.

  • Unsubscribe: block marketing messages. Easily unsubscribe via the link in marketing emails.

These rights may, in accordance with the Applicable Legislation and within the limits set out therein, be exercised at any time and free of charge, except in the case of manifestly unfounded or excessive requests.

  1. QUESTIONS, COMPLAINTS, EXERCISING YOUR RIGHTS

You have a question, a comment or a complaint: contact our team.
By email: contact@tpquants.com
By post: L-8048 Strassen (Luxembourg), 37, rue du X Septembre

If you wish to exercise your rights (access, rectification, etc.): submit a specific request. Please use the same channels (post or email), specifying your request.

If you are not satisfied with our response or if it has not been acted upon: lodge a complaint with the CNPD.
Address: CNPD - Complaints Department, 15 Boulevard du Jazz, L-4370 Belvaux
We recommend using the online form.

In cases of reasonable doubt, we may ask you to provide proof of identity (e.g. a copy of your ID) before processing your request.