Privacy Policy
Privacy Policy
What personal data this site collects, why, how long it is kept, and what you can do about it. It is written to the GDPR standard, which also satisfies Moroccan Law 09-08 — one policy, both markets.
The short version
This site runs no advertising, no analytics and no third-party tracking. Data is collected only where you deliberately give it: a contact message, a download request, or a staff sign-in. Everything below is a description of what the systems actually do, not a generic template.
When you send a contact message
The contact form collects your name, email address and message. They are used to answer you, are emailed to QENTRA and stored on the server. Basis: our legitimate interest in responding to enquiries. Kept for up to 24 months, then deleted.
When you request a download code
The downloads area asks for an email address and sends a six-digit code to it. Once verified, the address is recorded together with the time, the IP address the request came from, and the browser’s user-agent string. This is how QENTRA knows who is taking its software. Basis: legitimate interest in knowing who obtains our builds, and consent given by completing the verification. Kept for up to 24 months from your last download, then deleted.
When you register interest in a product
Some product pages accept an email address to register interest. Only the address and the time are stored. Basis: your consent. Kept until you ask for it to be removed, or for 24 months without contact.
Staff and client accounts
Restricted areas require a username and password. Passwords are never stored — only a bcrypt hash, from which the password cannot be recovered. Failed sign-in attempts are counted against a hashed form of the IP address for fifteen minutes to slow down guessing. Basis: performance of the contract or agreement under which the account exists.
Server logs
The hosting provider keeps standard web-server logs, including IP addresses, for security and troubleshooting. These are held by the host under their own retention.
No third-party requests at all
Pages on this site make no request to any third party. Typefaces are served from QENTRA’s own servers rather than from Google Fonts, which is the usual way to load them and which would have revealed every visitor’s IP address to Google on every page view. That transfer does not happen here. There is no analytics provider, no advertising network, no social-media widget and no content delivery network involved in serving these pages.
Who else sees your data
Nobody, except the hosting provider, who processes it on our instructions in order to run the servers. Your data is not sold, rented, or shared for marketing.
Where your data is
On servers in Amsterdam, the Netherlands, operated by Namecheap, Inc. Where data reaches the United States through the host, it is covered by the host’s own transfer safeguards.
Your rights
You can ask for a copy of the data held about you, ask for it to be corrected or deleted, object to processing based on legitimate interest, ask for processing to be restricted, and withdraw consent at any time. Write to contact@qentratech.com and expect a reply within thirty days. If you are not satisfied you may complain to a supervisory authority — the CNDP in Morocco, or the Autoriteit Persoonsgegevens in the Netherlands.
Children
This site is not directed at children and does not knowingly collect their data. QLP is a product used by children on a parent’s device; it works entirely offline and sends nothing anywhere.