Privacy Policy
Last updated: 1 July 2025
Quillorum Ltd ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and your rights.
1. Information We Collect
We collect information you provide directly (name, email address, payment details, manuscript files, and review content), information collected automatically when you use the Platform (IP address, device identifiers, browser type, pages visited, and usage patterns), and information from third-party services where you authorise such sharing.
2. How We Use Your Information
We use your information to provide and improve the Platform, process payments, send transactional and service emails, authenticate your identity, enforce our Terms of Service, comply with legal obligations, and prevent fraud and abuse. We do not sell your personal information to third parties.
3. Manuscript and Review Data
Manuscripts uploaded to the Platform remain your intellectual property at all times. We access manuscript content only to the extent necessary to deliver the service (for example, rendering the secure PDF viewer). We do not use your manuscript content to train machine learning models or share it with any third party other than authorised readers you invite.
4. Sharing of Information
We share your information only with: service providers who assist in delivering the Platform (hosting, payment processing, email delivery) under strict data processing agreements; legal authorities when required by law; and other parties with your explicit consent. We require all sub-processors to maintain standards equivalent to those described in this Policy.
5. Cookies and Tracking
We use strictly necessary cookies to authenticate sessions and maintain platform functionality. We use analytical cookies (with your consent) to understand how the Platform is used. You can manage cookie preferences via your browser settings. We do not use third-party advertising cookies.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally obliged to retain it for longer. Signed NDAs are retained for 7 years to satisfy potential legal requirements.
7. Security
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security audits. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take all reasonable precautions.
8. Your Rights
Under applicable data protection law (including UK GDPR), you have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. To exercise any of these rights, contact us at privacy@quillorum.com. We will respond within 30 days.
9. Children
The Platform is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that a child has provided personal data without parental consent, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform. The updated policy will be effective as of the date stated at the top of this page.
11. Contact
For privacy enquiries, contact our Data Protection team at privacy@quillorum.com or by post at Quillorum Ltd, 1 Charlotte Square, Edinburgh EH2 4DR, United Kingdom.
Questions about this policy? Contact us.