Last updated November 25, 2025
Quantiles (“Quantiles,” “we,” “our,” or “us”) recognizes the importance of protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you interact with our website, platform, applications, and online services that reference this Privacy Policy (collectively, the “Services”).
Our Services are intended for use only in the United States. We do not offer or market the Services to individuals located outside the United States, including in the European Economic Area (EEA) or United Kingdom.
By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy.
We collect information that identifies, relates to, or is reasonably capable of being associated with an individual or organization.
We may collect personal information directly from you when you interact with the Services, including when you:
Categories of data you may provide include:
Important: You must not upload or transmit PHI unless a valid HIPAA Business Associate Agreement (BAA) is in place. Quantiles is not responsible for PHI submitted outside a BAA.
When you access or use the Services, we automatically collect:
We may receive information from:
We use information for the following purposes:
For any additional purpose disclosed to you at the time of collection.
We may share personal information as follows:
With third-party vendors performing services on our behalf, including:
Service providers are contractually required to protect the information and use it only for the services provided.
We may share data with our wholly or majority-owned affiliates to support operations consistent with this Privacy Policy.
We may disclose information to:
If Quantiles undergoes a merger, acquisition, financing, asset sale, or bankruptcy, information may be transferred to the successor. The recipient must process the data consistent with this Privacy Policy.
We may share anonymized, aggregated, or de-identified data for:
This information does not personally identify individuals.
We use cookies, pixels, and similar technologies to:
You can manage cookie preferences in your browser settings. Disabling cookies may affect site functionality.
We do not respond to “Do Not Track” signals at this time. Third parties may collect information through our Services consistent with their own privacy policies.
The Services may contain links or integrations operated by third parties. We are not responsible for their privacy practices. Review their policies before interacting with them.
Quantiles may act as a Business Associate under HIPAA only when providing services to HIPAA-covered entities or their Business Associates under a valid BAA.
Users must not upload or transmit PHI unless a BAA is executed. Quantiles is not responsible for PHI provided outside a BAA.
Synthetic data used or generated in the Services:
We maintain administrative, technical, and physical safeguards appropriate to our role under HIPAA and U.S. privacy law.
We collect personal information as described in this Privacy Policy. The categories of information collected and purposes for collection are outlined in Sections 1 and 2 of this Privacy Policy, which serve as our Notice at Collection. We do not sell or share personal information as those terms are defined under CCPA/CPRA. If you are a California resident, you may exercise the rights described below.
In the last 12 months, we may have collected:
To exercise these rights, email [email protected].
Identity verification may be required.
We retain information only as long as necessary to:
We retain personal information for the periods described below unless a longer retention period is required or permitted by law.
We securely delete or de-identify data once retention periods expire unless law requires otherwise.
We employ administrative, technical, and physical security measures, including:
However, no system is completely secure. We cannot guarantee absolute security of data transmitted or stored.
In the event of a breach affecting personal information, we will provide notifications as required by applicable U.S. law.
The Services are not intended for children under 13. We do not knowingly collect personal information from children without verifiable parental consent. If such information is discovered, it will be deleted promptly.
You may:
Our Services are intended for users located in the United States. We do not purposefully collect or process data from individuals located outside the U.S.
We may update this Privacy Policy from time to time. Changes become effective upon posting. We encourage you to review this Privacy Policy periodically.
If you have questions about this Privacy Policy or our practices, contact us at:
Email: [email protected]
Subject Line: Privacy Inquiry – Quantiles