Quantum Privacy Policy
Privacy Policy
QuantumSoft, Inc. and its affiliated companies (collectively referred to as “QuantumSoft”, “we”, “our”, or “us”) are committed to protecting your personal data and respecting your privacy in full compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), and other applicable data protection laws.
This Privacy Policy explains what personal data we collect, why we collect it, the legal basis for each processing activity, how long we retain it, and your rights.
1. Identity and Contact Details of the Data Controller
The data controller responsible for your personal data is:
QuantumSoft, Inc., incorporated under the laws of the State of Delaware, USA
16192 Coastal Highway, Lewes, DE 19958, USA
Email: dataprotection@quantumobile.com
Phone: +16467604085
For all data protection inquiries, please contact us at the email address above.
2. How We Collect Your Personal Data
We collect only data that is adequate, relevant, and limited to what is necessary for the stated purposes.
2.1 Data collected when you contact us
When you submit an inquiry via our website or contact us directly, we may collect your name, email address, phone number, company name, website, type of inquiry, and budget range.
Legal basis: Article 6(1)(b) GDPR – processing is necessary to take steps prior to entering into a contract, or to perform a contract with you.
2.2 Data collected for marketing communications
If you have provided your explicit, separate, opt-in consent, we may send you marketing communications such as newsletters, product updates, and information about our services or those of our partners. Consent for marketing is always collected via a distinct unticked checkbox and is never a condition of receiving our services or bundled with any other consent.
Legal basis: Article 6(1)(a) GDPR – your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment (see Section 9).
2.3 Technical and analytics data
We automatically collect limited technical data to ensure the proper functioning of our website. This includes IP address, browser type, operating system, pages visited, date and time of access, and referring URL.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in maintaining website security, diagnosing technical issues, and improving user experience. This interest does not override your fundamental rights and freedoms.
Where analytics tools rely on cookies that are not strictly necessary, we will obtain your prior consent in accordance with the ePrivacy Directive and applicable national law before any such tracking begins.
3. How Long Do We Save Your Personal Data
We do not retain your personal data for longer than is necessary for the specific purpose for which it was collected. Retention periods are as follows:
- Inquiry and contact data: 3 years from the date of last contact, after which it is securely deleted.
- Marketing communication data: Until you withdraw your consent or unsubscribe, whichever is earlier, then deleted within 30 days.
- Technical/analytics data: Up to 12 months in identifiable form, then anonymized or deleted.
- Legally required records (e.g., tax or accounting): Retained for the period required by applicable law.
Upon expiry of the relevant retention period, data is securely and irreversibly deleted or anonymized.
4. Sharing Your Personal Data
QuantumSoft does not sell your personal data. We do not share it with third parties for their own marketing purposes.
We may share your data only with the following categories of recipients, to the extent strictly necessary:
- IT and cloud hosting providers acting as data processors under written agreements compliant with Art. 28 GDPR.
- CRM and email marketing platforms are used to manage client communications, subject to equivalent data protection obligations.
- Legal or regulatory authorities, where required by applicable law or valid legal process.
- Professional advisors (lawyers, accountants), where necessary and subject to confidentiality obligations.
We do not engage sub-processors without ensuring that equivalent data protection safeguards are contractually in place.
5. International Data Transfers
QuantumSoft is headquartered in the United States. The US is not subject to a blanket adequacy decision under GDPR and is considered a third country under Art. 44 GDPR. All transfers of personal data from the EEA to the US are carried out in compliance with GDPR Chapter V using one or more of the following lawful mechanisms:
- EU-U.S. Data Privacy Framework (DPF): Where QuantumSoft or its processors are DPF-certified, transfers rely on the European Commission’s adequacy decision of July 2023.
- Standard Contractual Clauses (SCCs): Where DPF certification does not apply, transfers are governed by the European Commission-approved SCCs incorporated into our data processing agreements.
You may request a copy of the applicable transfer safeguards by contacting dataprotection@quantumobile.com.
6. Cookies and Tracking Technologies
Our website uses cookies. Strictly necessary cookies are used without consent. For all other cookies (analytics, preference, marketing), we request your prior, specific, opt-in consent via our cookie consent tool before activation.
You may manage or withdraw your cookie consent at any time through our cookie settings or your browser settings. Disabling certain cookies may affect your experience on our website.
7. Your Data Subject Rights
Under the GDPR (for individuals in the EEA), you have the right to:
- Access (Art. 15): Obtain confirmation of whether we process your data and receive a copy of it.
- Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Erasure (Art. 17): Request deletion of your data where it is no longer necessary, consent has been withdrawn, or processing is unlawful.
- Restriction of processing (Art. 18): Request that we restrict processing of your data in certain circumstances.
- Data portability (Art. 20): Where processing is based on consent or contract, receive your data in a structured, machine-readable format.
- Object to processing (Art. 21): Object at any time to processing based on legitimate interests, including direct marketing, with immediate effect.
- Withdraw consent (Art. 7(3)): Withdraw your consent at any time without affecting the lawfulness of prior processing.
Under the CCPA/CPRA (for California residents), you additionally have the right to:
- Know what personal information is collected, used, shared, or sold.
- Delete personal information we hold about you, subject to certain exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information.
- Non-discrimination for exercising your privacy rights.
To exercise any of these rights, contact us at dataprotection@quantumobile.com. We will respond within 30 days (GDPR) or 45 days (CCPA/CPRA). We may need to verify your identity before processing your request.
8. Withdrawing Consent and Objecting to Processing
You may withdraw consent or object to data processing at any time by:
- Emailing dataprotection@quantumobile.com
- Clicking the unsubscribe link in any marketing email
- Using our cookie consent management tool
Withdrawal of consent does not affect the lawfulness of processing that took place before its withdrawal.
9. Right to Lodge a Complaint with a Supervisory Authority
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
A full list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en
California residents may also contact the California Privacy Protection Agency (CPPA): https://cppa.ca.gov
We would appreciate the opportunity to address your concerns directly before you contact a supervisory authority. Please reach out to us first at dataprotection@quantumobile.com.
10. Security of Your Personal Data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction, in accordance with Art. 32 GDPR and applicable US law. These include encrypted data storage, access controls, and regular security reviews.
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours and, where required, inform you directly. We also comply with applicable US state breach notification requirements.
11. Third-Party Links
Our website may contain links to third-party websites. QuantumSoft is not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any third-party website you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. In the event of material changes, we will notify you directly (e.g., by email) and, where required by law, seek your renewed consent before changes take effect. The date of the most recent revision is shown at the top of this document.
Contact Information
For any questions, requests, or complaints:
Email: dataprotection@quantumobile.com
Phone: +16467604085
Address: QuantumSoft, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA