Privacy Policy

Last updated: February 2026

Who we are

This website, www.riskquilt.com, is operated by RiskQuilt ("we", "us", "our"). We are the maker of RiskQuilt, a risk management platform.

Contact: privacy@riskquilt.com

What this policy covers

This policy covers the riskquilt.com marketing website only. If you use the RiskQuilt platform, a separate privacy policy applies.

What data we collect

Cookies

We use cookies — small text files stored on your device — for the following purposes:

Essential cookies

Required for the website to function correctly. These cannot be disabled.

Analytics cookies (Google Analytics)

We use Google Analytics to understand how visitors use our website. Google Analytics collects:

  • Pages visited and time spent
  • Referring website or search term
  • Browser type, device, and screen size
  • Approximate geographic location (city level, derived from IP address)
  • IP address (anonymised by Google Analytics)

Google Analytics sets cookies including _ga and _ga_* with a retention period of up to 14 months.

We do not use advertising or marketing cookies.

Cookie consent

When you first visit our website, we ask for your consent before setting analytics cookies. You can withdraw consent at any time by clearing your browser cookies or updating your preferences via our cookie banner.

Essential cookies do not require consent and are set automatically.

Legal basis for processing

Under UK and EU GDPR, we process personal data on the following basis:

  • Essential cookies: Legitimate interest — necessary for the website to function.
  • Analytics cookies: Consent — set only after you give explicit consent via our cookie banner.

How we use the data

We use analytics data solely to understand website usage patterns and improve our content. We do not sell, rent, or share personal data with third parties for their own purposes.

Third-party processors

Provider Purpose Location Privacy Policy
Google LLC Analytics (Google Analytics) USA policies.google.com/privacy
Cloudflare Inc Website hosting and delivery USA / Global cloudflare.com/privacypolicy

Both providers are certified under the EU–US Data Privacy Framework for lawful data transfers from the UK/EU.

Data retention

Analytics data is retained for 14 months, after which it is automatically deleted by Google Analytics.

We do not store any personal data on our own servers from the marketing website.

Your rights

Under UK and EU GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate data
  • Erasure of your data ("right to be forgotten")
  • Restrict processing of your data
  • Object to processing based on legitimate interest
  • Data portability — receive your data in a structured format
  • Withdraw consent at any time (for analytics cookies)

To exercise any of these rights, contact us at privacy@riskquilt.com. We will respond within one month.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with:

  • UK: Information Commissioner's Office (ICO) — ico.org.uk
  • EU: Your local data protection authority

Changes to this policy

We may update this policy from time to time. Material changes will be noted with an updated "Last updated" date at the top of this page.

Contact

For any privacy-related queries: privacy@riskquilt.com