Skip to content

We use analytics cookies (Google Analytics) and error telemetry (Sentry) to improve the experience. You can accept or decline them. Cookie policy

QuO Strategy

Legal and privacy

Privacy policy

Last updated: November 6, 2026

Privacy is not a formality; it is our operational foundation. At QuO Strategy, client and partner data is guarded with the same rigorous protocols and engineering standards we build into our AI systems.

1. Data controller

In compliance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that the controller of the personal data collected on this website is:

  • Identity: QuO Strategy (hereinafter, "QuO")
  • Tax ID (NIF): [pending update]
  • Address: Madrid, Spain
  • Email: hub@quostrategy.com

2. Purpose of data collection

At QuO Strategy we do not collect data for its own sake. We process the information that interested people give us for the following purposes only:

  • Audits and consulting: Handling requests for information, operational audits and project feasibility assessments.
  • Service delivery: Providing the contracted automation, AI agent, digital growth and business consulting services.
  • Strategic communications: Sending commercial information and B2B industry news (only if you have given your explicit consent).

We will never build automated commercial profiles without human involvement that produce legal effects on you.

3. Legal basis

The legal basis for processing your data is:

  • Your consent: For contact through forms and the use of analytics cookies and error telemetry.
  • Performance of a contract: For providing the contracted consulting services.
  • Legitimate interest: For fraud prevention and the improvement of our website.

4. Retention periods

We apply the principle of data minimisation. The personal data you provide will be kept:

  • For as long as the business or commercial relationship continues.
  • Until you ask for it to be deleted.
  • For the years needed to meet legal obligations (tax, accounting).

Analytics data (Google Analytics) is kept for a maximum of 14 months.

5. Recipients and providers

We do not sell or transfer your data to third parties, except where required by law. For the website to work, some providers process data on behalf of QuO Strategy, as data processors:

  • Supabase: the database where contact form messages are stored.
  • Hostinger: website hosting and the email notice of each message received.
  • Google Analytics: website usage statistics, only if you accept cookies.
  • Sentry: technical error reports from the website, only if you accept cookies.

Some of these providers may process data outside the European Economic Area. When they do, they apply the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. Your rights

As a user and the owner of your data, you are in full control of it. You can exercise the following rights at any time:

  • Access: Know which of your data we process.
  • Rectification: Correct inaccurate data.
  • Erasure ("right to be forgotten"): Ask for your data to be deleted when it is no longer needed.
  • Objection and restriction: Object to the processing or ask for it to be restricted in certain circumstances.
  • Portability: Receive your data in a structured format.

To exercise these rights, just send an email to hub@quostrategy.com with a copy of your ID card or an equivalent document. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es).