Privacy Notice
This notice explains how QST Financial Limited (“we”, “us”, “our”) may process personal information in connection with this website and the activities described below.
This website is operated by QST Financial Limited, a company registered in Guernsey (company registration number 72214).
01Information you send to us
If you contact us by email, we may process information such as:
- your name;
- email address;
- telephone number, if provided;
- organisation or employer, if provided;
- job title, if provided;
- the content of your message;
- attachments or other information you choose to send us.
02Recruitment information
If you apply for a role or send us your CV, we may process information such as:
- your name and contact details;
- CV, résumé, cover letter, and employment history;
- education, qualifications, skills, and experience;
- interview notes and recruitment correspondence;
- references, where relevant at a later stage of the recruitment process.
Please do not send us sensitive personal information unless we specifically request it. This includes information about health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, sexual orientation, or criminal records.
03Charity, media, and general inquiries
If you contact us about charity proposals, media matters, or general inquiries, we may process your contact details, correspondence, proposal materials, and related records.
04Website technical information
When you visit our website, technical information may be generated automatically through our hosting, security, and logging systems. This may include:
- IP address;
- browser and device information;
- pages requested;
- date and time of access;
- server log information;
- security and diagnostic information.
We use Cloudflare and standard server logs to help deliver, secure, and monitor the website.
05How we use personal information
We use personal information for the following purposes:
- to respond to inquiries;
- to manage recruitment applications;
- to assess candidates for remote or Cyprus-based roles;
- to review charity proposals;
- to respond to media requests;
- to administer and protect our website, systems, and communications;
- to maintain appropriate business records;
- to comply with legal, regulatory, accounting, or administrative obligations;
- to establish, exercise, or defend legal rights.
06Legal bases for processing
Where data protection law requires us to identify a legal basis, we rely on one or more of the following:
- legitimate interests, including responding to inquiries, managing recruitment, operating our business, protecting our systems, and maintaining business records;
- steps prior to entering into a contract, where we consider candidates for possible employment or engagement;
- legal obligations, where we are required to keep or disclose information by law, regulation, court order, or competent authority;
- consent, where we specifically ask for consent, for example if we introduce optional non-essential cookies or ask to keep a candidate's details for a longer period.
07Recruitment
Recruitment information may be reviewed by HR, management, and relevant team leads. It may also be shared with relevant QST affiliated companies, including in Guernsey, Cyprus, and Malta, where necessary for recruitment or internal assessment.
We use internal recruitment processes and do not currently use an external recruitment platform through the website.
We may check references at a later stage of the recruitment process. We do not routinely request criminal record information, health information, or other sensitive personal information.
Unsuccessful candidate information is normally kept for up to 12 months after the end of the recruitment process, unless a shorter period is appropriate or a longer period is required for legal reasons. We do not retain unsuccessful CVs for future roles unless we have agreed this separately with the candidate.
Successful candidate information will be transferred to the relevant personnel or engagement records.
08Cookies and similar technologies
We do not currently use analytics cookies, advertising cookies, tracking pixels, or behavioural advertising technologies on this website.
We use Cloudflare and standard technical systems to help deliver and protect the website. Cloudflare or our systems may use strictly necessary technical cookies or similar technologies for security, load balancing, bot protection, or website integrity.
You can control cookies through your browser settings. Blocking strictly necessary technical cookies may affect website security or functionality.
If we introduce analytics, advertising, or other non-essential cookies in the future, we will update this Privacy Notice and, where required, request consent before using them.
09Who we share information with
We may share personal information with:
- QST affiliated companies, where relevant to the inquiry, recruitment process, proposal, or business matter;
- internal staff and authorised personnel;
- IT, hosting, email, cloud storage, DNS, and security providers;
- Google Workspace and Google Drive, which we use for email and file storage;
- Cloudflare, which we use for website delivery and security;
- professional advisers, including lawyers, accountants, auditors, and consultants;
- regulators, courts, law enforcement, or public authorities where required or appropriate.
We do not sell personal information.
10International processing
We are based in Guernsey and may process information in Guernsey and other locations where QST group companies, personnel, or service providers operate.
Personal information may be accessed or stored in Guernsey, Cyprus, Malta, and other countries where our service providers process data, including through Google Workspace, Google Drive, Cloudflare, and related IT services.
Where required, we take steps designed to ensure that personal information receives appropriate protection when transferred internationally.
11How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice, unless a longer period is required or permitted by law.
| Category | Normal retention period |
|---|---|
| General inquiries | Up to 2 years after last contact |
| Media inquiries | Up to 2 years after last contact |
| Charity proposals | Up to 3 years, or longer for funded or ongoing matters |
| Unsuccessful recruitment applications | Up to 12 months after the recruitment process ends |
| Successful candidate records | Transferred to personnel or engagement records |
| Website / server / security logs | Normally up to 180 days, unless needed for security, diagnostic, or legal reasons |
| Legal, regulatory, accounting, or formal business records | As required by applicable law or business need |
12Your rights
Depending on the law that applies to your personal information, you may have rights to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request deletion of your information;
- request restriction of processing;
- object to processing;
- request portability of certain information;
- withdraw consent where processing is based on consent.
These rights may be subject to legal limitations. To exercise them, write to [email protected]. We may need to verify your identity before we respond.
You may also have the right to complain to a data protection supervisory authority, including the Office of the Data Protection Authority in Guernsey or another relevant supervisory authority depending on where you are located and the circumstances of the processing.
13Security
We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. These include internal access controls, private hosting infrastructure, security logging, and reputable email, cloud, and website security providers.
No website, email system, or internet transmission is completely secure.
14Changes to this Privacy Notice
We may update this Privacy Notice from time to time. The latest version will be published on this website.