Privacy Statement

Last Updated: December 1, 2025

Effective Date: October 22, 2025

UQUANTUM Ltd is committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal data. This Privacy Statement explains our practices in accordance with UK GDPR and Data Protection Act 2018.

1. Controller Information

Data Controller: UQUANTUM Ltd

Company Number: 15884513

Registered Address: London, United Kingdom

Contact Email: privacy@uquantum.uk

Website: https://uquantum.uk

2. Information We Collect

2.1 Personal Information

When you contact us or use our services, we may collect:

  • Contact Data: Name, email address, phone number, company name
  • Communication Data: Messages, inquiries, feedback
  • Professional Data: Job title, professional interests, research areas

2.2 Technical Data

Automatically collected when you visit our website:

  • Technical Data: IP address, browser type, device information
  • Usage Data: Pages visited, time spent, navigation patterns
  • Cookie Data: See our Cookie Policy for details

2.3 Information We Do NOT Collect

  • Special category data (health, race, religion)
  • Financial information (unless explicitly for payment processing)
  • Unnecessary personal information

3. Legal Basis for Processing

We process your personal data only where we have a lawful basis under UK GDPR Article 6:

Purpose Legal Basis
Responding to inquiries Legitimate interests (Article 6(1)(f))
Providing services Contract performance (Article 6(1)(b))
Marketing communications Consent (Article 6(1)(a))
Website analytics Legitimate interests (Article 6(1)(f))
Legal obligations Legal obligation (Article 6(1)(c))

4. How We Use Your Personal Data

We use your personal data for the following purposes:

Service Delivery: Providing heritage technology and quantum governance services

Communication: Responding to inquiries and providing support

Business Operations: Managing projects and client relationships

Website Functionality: Ensuring proper operation and security

Analytics: Understanding website usage (anonymized where possible)

Legal Compliance: Meeting regulatory requirements

Marketing: Sending relevant updates (with your consent only)

5. Data Minimization Principle

In accordance with UK GDPR Article 5(1)(c), we adhere to the data minimization principle:

  • We collect only data that is adequate, relevant, and necessary
  • We do not collect excessive or irrelevant information
  • We limit data collection to specific, explicit purposes
  • We regularly review data to ensure continued necessity
  • We delete data when no longer needed

Example: When you contact us, we ask for your name and email – NOT your full address, date of birth, or other unnecessary information.

6. Data Sharing and Transfers

6.1 Third-Party Service Providers

We may share your data with trusted service providers:

  • Website Hosting: Secure server infrastructure
  • Email Services: Communication platforms
  • Analytics: Google Analytics (anonymized where possible)

6.2 International Transfers

If we transfer data outside the UK, we ensure:

  • Adequate protection through UK GDPR Article 45 adequacy decisions
  • Standard contractual clauses where necessary
  • Your explicit consent for transfers to non-adequate countries

6.3 We Will NOT

  • Sell your personal data
  • Share your data for marketing without consent
  • Transfer data to unauthorized third parties

7. Data Retention

We retain your personal data only as long as necessary:

Data Type Retention Period
Contact form inquiries 2 years from last contact
Client project data 7 years (legal requirement)
Marketing consent Until consent withdrawn
Website analytics 26 months (anonymized)

8. Data Security

We implement appropriate technical and organizational measures:

  • Encryption: SSL/TLS encryption for data transmission
  • Access Control: Limited access to authorized personnel only
  • Secure Storage: Protected databases with regular backups
  • Regular Updates: Software and security patches
  • Staff Training: Data protection awareness

9. Cookies and Tracking

We use cookies to improve your browsing experience. For detailed information about the cookies we use, please see our Cookie Policy.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right Description
Right to Access
(Article 15)
Request a copy of your personal data we hold
Right to Rectification
(Article 16)
Correct inaccurate or incomplete data
Right to Erasure
(Article 17)
Request deletion of your data ("right to be forgotten")
Right to Restriction
(Article 18)
Limit how we use your data
Right to Portability
(Article 20)
Receive your data in a structured, machine-readable format
Right to Object
(Article 21)
Object to processing based on legitimate interests
Right to Withdraw Consent
(Article 7(3))
Withdraw consent at any time (where processing is based on consent)
Right to Complain
(Article 77)
Lodge a complaint with the Information Commissioner's Office (ICO)

How to Exercise Your Rights

Contact us at: privacy@uquantum.uk

We will respond within 30 days (may be extended by 60 days for complex requests)

Requests are generally free of charge

11. Changes to This Privacy Statement

We may update this Privacy Statement from time to time. Changes will be posted on this page with an updated "Last Updated" date. For significant changes, we will provide notice through email or prominent website notification.

12. Contact and Complaints

Contact Us

Email: privacy@uquantum.uk

Company: UQUANTUM Ltd

Company No: 15884513

Address: London, United Kingdom

Supervisory Authority

If you're unhappy with our response, you can contact:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

Helpline: 0303 123 1113