1. Who we are and what this policy covers
QUANTUMCX PRIVATE LIMITED ("Quantum CX", "we", "us") is a private limited company incorporated in India, in the State of West Bengal. This policy explains how we handle personal data collected through the corporate website at quantumcx.net.
It covers this corporate website only. It does not cover the PSEO Engine application, which runs on its own deployment at pseo.quantumcx.net and publishes its own privacy policy. It also does not cover client engagements, which are governed by the data-processing and confidentiality terms in the relevant contract.
2. What we collect
Information you provide
If you submit the project enquiry form, we receive the information you choose to enter. The form asks for:
- Your name
- Your work email address
- Your company name
- A description of the project or business problem
- The outcome you expect
- An indicative budget range, if you choose to provide one
- Your desired timeline, if you choose to provide one
Only your name, email address and a description of the enquiry are required. Every other field is optional, and the form does not function differently if you leave them blank.
Information collected automatically
- Where analytics are enabled, they are aggregate and cookieless: page views, referrer, approximate country and general device category. These are not used to identify you and are not linked to any individual.
- Standard server and security logs generated by our hosting provider, which may include your IP address and user agent. These exist to serve the site, protect it against abuse and diagnose faults.
- If abuse protection on the enquiry form is triggered, a technical challenge token is processed solely to distinguish a person from an automated submission.
What we do not collect
- We do not set advertising or tracking cookies.
- We do not build a profile of your browsing across other websites.
- We do not sell, rent or trade personal data to anyone.
- We do not knowingly collect data from anyone under the age of 18.
3. How we use it
We use the information you submit for a small number of specific purposes:
- To read and respond to your enquiry, and to discuss whether we are a suitable fit for the work.
- To prepare a proposal, scope or estimate if you ask us to.
- To keep a record of correspondence so that we do not ask you the same questions twice.
- To maintain the security and availability of the website and prevent abuse.
- To improve this website in aggregate — for example, understanding which pages visitors find useful.
We do not use your details for unrelated marketing, and we do not add you to a mailing list because you submitted an enquiry. If we ever send you something promotional, you will have asked us to.
4. Legal basis and consent
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: your consent and our legitimate interests in responding to a business enquiry you initiated; our legitimate interests in maintaining a secure and functioning website; and, where an engagement follows, the performance of a contract.
Under India's Digital Personal Data Protection Act, 2023, we process personal data on the basis of your consent, which you give by choosing to submit the enquiry form and acknowledging the notice displayed alongside it. You may withdraw consent at any time by contacting us, which will stop any further processing of that enquiry.
We process personal data only for the purpose for which it was collected, and we do not process it beyond what is necessary for that purpose.
7. International transfers
We operate from India and work with clients internationally, and our service providers may store or process data in countries other than your own, including the United States and the European Union. Where personal data protected by the GDPR is transferred outside the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as standard contractual clauses, or on the provider's own approved transfer mechanism.
8. How long we keep it
- Enquiries that do not lead to an engagement are retained for up to 24 months from the last correspondence, so that a later follow-up does not start from nothing, and then deleted.
- Enquiries that lead to an engagement become part of the client record and are retained for the period required by the contract and by applicable tax, accounting and corporate record-keeping obligations.
- Where analytics are enabled, aggregate analytics data is retained by the provider in accordance with its own retention settings and contains no personally identifying information.
- Security and server logs are retained for a short period sufficient for troubleshooting and abuse investigation, then rotated.
Where you ask us to delete data and we are not required by law to retain it, we will delete it and confirm that we have done so.
9. Security
We apply access controls, encrypted transport, secrets management and least-privilege access to the systems that handle personal data. We keep the number of people able to access enquiry data as small as the work allows. No system is perfect, and we do not claim otherwise; if a breach affecting your personal data occurs, we will notify you and the relevant authority where the applicable law requires it.
10. Your rights
Depending on where you are located, you may have some or all of the following rights over your personal data:
- Access: to be told whether we hold data about you and to receive a copy.
- Correction: to have inaccurate or incomplete data corrected.
- Erasure: to have data deleted where there is no overriding legal reason for us to keep it.
- Restriction and objection: to limit or object to certain processing, including processing based on legitimate interests.
- Portability: to receive data you provided in a structured, commonly used format.
- Withdrawal of consent: to withdraw consent at any time, without affecting processing carried out before withdrawal.
- Complaint: to lodge a complaint with your local supervisory authority, and under India's Digital Personal Data Protection Act to make a complaint to the Data Protection Board of India.
Requests relating to these documents can be sent through the contact page at quantumcx.net/contact, addressed to the company's grievance contact as published in the footer of this website.
We aim to respond to rights requests within 30 days. We may need to verify your identity before acting on a request, and we may need to ask for enough detail to locate the data concerned.
11. What this policy does not cover
This policy does not cover the PSEO Engine application at pseo.quantumcx.net, which publishes its own privacy policy, nor any third-party website you reach through a link from this site. It does not govern the processing of data under a client engagement — that is dealt with in the relevant contract, which also sets out confidentiality and data-processing obligations.
12. Changes to this policy
If we change how this website handles personal data, we will update this page and revise the date shown at the top. Material changes affecting individuals whose data we already hold will be communicated directly where we are able to do so.
This document describes our actual practices and is reviewed alongside any change to how this website handles data or provides its services. It is not legal advice, and it does not govern client engagements or use of the PSEO Engine product, which have their own terms.