Data & Privacy Policy
Last Updated: October 24, 2025
1. Introduction
That Is A Q ("we," "our," or "us") is committed to protecting your privacy and handling your data with transparency and care. This policy explains how we collect, use, store, and share information when you visit our website, engage with our services, or communicate with us as a client, partner, or visitor.
Note: This policy applies to all digital properties operated by That Is A Q, including thatisaq.com, its subdomains, and related client portals. By using our services, you consent to the practices described herein.
2. Information We Collect
We only collect information that is necessary to deliver our services, maintain security, and improve your experience. This includes:
- Personal Information: Name, email, phone number, and company details provided during inquiries, onboarding, or contract signing.
- Usage Data: IP address, browser type, device information, pages visited, and interaction metrics collected via analytics tools.
- Project Data: Files, specifications, credentials, and content shared with us for design, development, or consulting engagements.
- Communication Records: Emails, chat logs, meeting recordings, and feedback exchanged during our professional relationship.
3. How We Use Your Information
Your data enables us to function securely and deliver high-quality digital solutions. We use information to:
- Fulfill service agreements, deliverables, and client support
- Communicate regarding project updates, invoices, and security notices
- Improve website performance, accessibility, and user experience
- Comply with legal obligations, industry standards, and contractual requirements
- Analyze aggregate, anonymized trends to inform product and service development
5. Data Security
We implement industry-standard technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure. These include:
- End-to-end encryption for data in transit and at rest
- Role-based access controls and multi-factor authentication
- Regular security audits, penetration testing, and employee training
- Automated backups and disaster recovery protocols
While no system is completely immune to risk, we continuously monitor and update our defenses to maintain a secure environment.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Restrict or object to specific processing activities
- Request data portability in a structured format
- Withdraw consent for marketing or analytics tracking at any time
To exercise these rights, contact us using the information in Section 12. We will respond within 30 days and verify your identity before processing requests.
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Project-related data is archived securely for 3 years post-engagement unless otherwise agreed. Upon request or contract termination, we will securely delete or return your data.
9. International Data Transfers
As a globally connected agency, data may be processed across borders. We ensure all international transfers comply with applicable data protection laws, utilizing Standard Contractual Clauses (SCCs) and adequate safeguards to maintain protection standards equivalent to your jurisdiction.
10. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect data from minors. If we discover such data, we will take immediate steps to delete it. Parents or guardians who believe we have inadvertently collected a child's information should contact us immediately.
11. Policy Updates
We may revise this policy to reflect changes in technology, legal requirements, or business practices. Material updates will be posted on this page with a revised "Last Updated" date. For significant changes, we will notify active clients via email or secure dashboard alerts.
12. Contact Us
If you have questions about this policy, wish to exercise your data rights, or need clarification on how we handle your information, please reach out:
- Email: privacy@thatisaq.com
- Address: That Is A Q, Digital Operations Division, Innovation Campus
- Response Time: Within 3 business days for general inquiries; within 30 days for data requests
We take your privacy seriously and are committed to answering your questions transparently.