Privacy
Privacy notice
Last updated: 3 November 2026
Who we are
Quorant Security is a security, risk and compliance practice operated by Nicolás Guillén. For any privacy question or request, write to contact@quorantsecurity.com.
What we collect
- Contact form: your name, work email, company, team size, what you need and anything you choose to write.
- Free domain scan: the domain you type. If you ask for the report, we also receive your work email, the domain and its scan result, plus your name and company if you choose to add them.
- Booking a call: the details you enter in our Google Calendar booking page.
- Email: whatever you send us.
We don't use cookies, analytics or advertising trackers on this site.
How the free scan works
The scan runs in your browser. It sends your domain to public DNS resolvers operated by Google (dns.google) and, as a fallback, Cloudflare, to read records that are already public. Nothing is sent to your servers, and we don't receive or store the domain unless you ask for the report.
Why we use your data
Only to reply to you, prepare a proposal, send the report you asked for and run the engagement you agree to. We don't send newsletters, and we never sell or share your data for marketing.
Legal basis
We process your data because you asked us to reply or to send you something, and, once we work together, to perform our agreement with you.
Who processes it for us
- Netlify: hosts the site and stores form submissions. Like any web host, it keeps technical logs such as IP addresses.
- Google Workspace: our email and calendar.
- Google Fonts: serves one of the typefaces on this site, so your browser connects to Google to load it.
These providers may process data outside your country, including in the United States.
How we protect it
Access to form submissions, email and client files is limited to the people working on your request, with two-factor authentication on every account. Data is encrypted in transit, and our own domain is protected with SPF, DKIM, DMARC and DNSSEC.
How long we keep it
We keep contact details for as long as we're in conversation and for up to 24 months after our last exchange, then delete them, unless we work together and need records for contractual or legal reasons. Client data shared during an engagement is kept only for that engagement and deleted at the end.
Your rights
You can ask us to access, correct or delete your data, or to stop contacting you, at any time. Write to contact@quorantsecurity.com and we'll reply within 30 days.
Complaints
If you're not happy with how we handled your data, tell us first and we'll try to fix it. You can also contact the data protection authority in your country.
Changes
If we change this notice, we'll update the date at the top.