Quadlux UK Ltd. Is committed to preserving data privacy and security for our partners, clients and their staff assigned abroad using our services.  We adhere to the data privacy standards mandated by data protection and privacy statutes such as the EU GDPR (General Data Protection Regulation) and similar statutes.   

This Data Privacy Policy shall serve as a privacy notice to individuals who fall within the scope of statutory privacy laws, and explains your rights as a data subject, and how we collect and process your personal data.  Whenever you give us personal information and data, you are consenting to its collection and use in accordance with this data privacy policy. 

Types of Data, How We Use It and Methods of Collection 

Quadlux by definition is both a data processor and data controller, as we may share data with sub-processors (our partners).  Those who submit data to Quadlux are data subjects, who have certain rights under data privacy statutes. 

By using our web submission forms or contacting us by email, text, social media or phone, you understand that we are collecting and retaining personal data while communicating with and contacting you, your company or agent for the purpose of extending our services to you and processing your account.  That personal data may include but is not limited to:  names, emails, addresses, phone numbers, industry, employment history, employers, nationality, and work roles.   

How We Share Your Data 

This same data at some point may be shared with our global partners, often located in ‘third countries’(outside the EU under GDPR), for the purpose of establishing employment relationships abroad.  Quadlux’s partners have entered into a contractual agreement with us that includes complying with data protection statutes and standards, and how they act as sub-processors of your data. 

How We Store Your Data 

Quadlux and its partners will maintain statutory mandated and commercially reasonable security for its own systems, servers, and communications links as necessary to protect your data and related networks.  This includes encryption, access controls, and regular security assessments to identify and address potential vulnerabilities. 

Certain types of data may be stored under statutory data retention statutes, for designated periods of time.  A good example of this is data related to tax filing, which many countries require a six year retention period.  Constraints imposed on Quadlux and its partners by data retention statutes will supersede some of the data privacy rights described below. 

Data Subject Rights 

As a data subject you have rights under certain privacy statutes, including GDPR.  These rights are designed to give you, as an individual, some control over your personal data, and remedies in the event of a data breach.   

You have the right to: 

• Access the personal data that we have collected and stored 

• Rectification of data that you believe to be inaccurate or incomplete 

• Erasure of your personal data (right to be ‘forgotten) under certain circumstances and subject to data retention statutes in relevant jurisdictions 

• Restrict processing of data in certain circumstances 

• Object to processing 

• Request data portability 

• Statutory remedies in the event of a data breach or data loss 

Data Subject Consent 

You may contact our data protection officer at (support@quadlux.com) at any time to make a request related to exercising these rights.   

All data subjects that actually enter into negotiations and pre-contract discussions regarding employment, will be given an explicit, separate consent form related to the personal data they share with Quadlux, our partners and clients.   

Signing this consent form will be a pre-condition of continuing evaluation, to ensure that you are aware of how your data is being used and processed for this purpose.  By giving your consent to data storage, use and transfer, you do not waive any of your statutory or common law rights, and are simply stating that you have read this privacy policy and agree to its purpose of informed consent on data usage.