This Privacy Policy describes how Quantum Infoway (“Quantum Infoway”, “we”, “us”, or “our”), with its principal place of business in India, collects, uses, shares, and protects personal data when you visit this website (the “Site”) or contact us through it.
For visitors in India, Quantum Infoway acts as the data fiduciary for the processing described here. For visitors in the European Union, the United Kingdom, and similar jurisdictions, Quantum Infoway acts as the data controller.
This Privacy Policy applies only to personal data we collect as a controller or fiduciary through the Site. It does not cover personal data we process on behalf of our clients as a data processor under separate service agreements, including data inside the applications we build and operate for them, which is governed by those agreements and by the privacy policies of the respective clients.
1. Personal data we collect
We collect the following categories of personal data, depending on how you use the Site:
- Contact form data. When you submit our contact or inquiry form: your name, business email address, phone number, company or service interest, your message, and your optional answer to how you heard about us.
- Scheduling data. If you book a call through a scheduling link we share: the name, email address, and meeting details you provide to that scheduling provider.
- Visit attribution data. To understand how visitors find us, the Site may store in your browser (localStorage and cookies, for up to 90 days): the website that referred you to us, any campaign parameters in the link you used, the page you landed on, and a short history of pages you visit on the Site. If you submit a contact form, this attribution data may be attached to your enquiry.
- Analytics data. Through analytics tools we configure (for example Google Tag Manager and Google Analytics, where enabled): approximate location, device and browser type, pages viewed, and interaction events, associated with analytics identifiers stored in cookies.
- Technical log data. Our hosting provider records IP addresses and request data in server logs for security and operations.
- Bot protection signals. To protect our forms from spam and automated abuse, we and our security providers may process limited technical signals when you interact with a form, such as your IP address and browser type, solely to help distinguish human visitors from bots.
- Communication data. If you choose to contact us by email, phone, or messaging apps, we receive the messages and contact details you send us there. Use of those apps is also governed by their own terms and privacy policies.
We do not knowingly collect data from children. The Site is intended for business audiences and is not directed to persons under 18 years of age.
2. Why we process this data
| Purpose | Data used | Basis (EU and UK visitors) |
|---|---|---|
| Responding to your enquiry and providing a quote or consultation | Contact form data, scheduling data | Steps prior to entering a contract |
| Sales follow-up on a business enquiry | Contact form data, attribution data | Legitimate interest in B2B business development |
| Understanding which channels bring visitors and enquiries | Attribution data, analytics data | Consent |
| Improving Site content and performance | Analytics data | Consent |
| Site security, abuse prevention, and operations | Technical log data, bot protection signals | Legitimate interest in securing the Site |
| Complying with law and responding to lawful requests | Any of the above | Legal obligation |
For visitors in India, we process the data you give us when you submit a form on the basis of your voluntary provision of it for the stated purpose, and other data as permitted by applicable law.
3. Cookies and similar technologies
The Site may use the following:
| Technology | What it does | Duration |
|---|---|---|
| Analytics cookies (for example Google Tag Manager / Analytics, where enabled) | Analytics measurement of visits and interactions | Per provider cookie settings, typically up to 2 years |
| First-party attribution storage | Records the source that brought you to the Site and your page history on the Site | Up to 90 days for attribution; session scope for page history |
| Scheduling embed cookies | Operate any scheduling widget we embed or link to | Set by the scheduling provider |
| Security / bot protection | Helps detect and block automated bots on our forms (strictly necessary security) | Session or short-lived |
Visitors in the European Union, the European Economic Area, and the United Kingdom may be shown a consent mechanism before non-essential analytics and attribution technologies run, where we implement one. All visitors can manage or delete cookies and localStorage through their browser settings at any time. Disabling some cookies may affect site functionality.
4. Who receives your data
We share personal data only as described here, and we do not sell personal data or share it for cross-context behavioural advertising:
- Service providers (processors). Tools that help us manage enquiries, email, analytics, hosting, form security, and scheduling, each under its own contractual and security commitments.
- Within Quantum Infoway. Our sales and delivery teams, on a need-to-know basis.
- Authorities. Where required to comply with a legal obligation, court order, or lawful request, or to protect our rights, users, or the public.
- Business transfers. If Quantum Infoway is involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction under equivalent protections.
5. International transfers
Quantum Infoway operates from India and may work with team members and service providers in other countries, including the USA. Our providers may store data in data centres located in India, the USA, or elsewhere. Where data of EU or UK visitors is transferred outside the EU or UK, we rely on appropriate safeguards, including Standard Contractual Clauses and other mechanisms implemented by our providers in their data processing terms, where applicable. We do not transfer personal data to any country or territory restricted by a notification of the Central Government of India under the Digital Personal Data Protection Act, 2023.
6. How long we keep data
- Enquiry and CRM data: for as long as needed to handle your enquiry and maintain a business relationship, reviewed periodically, and no longer than 5 years after our last meaningful contact unless a longer period is required by law or an active engagement.
- Visit attribution data: up to 90 days in your browser; if attached to an enquiry, it is retained with the enquiry record.
- Analytics data: per the retention period configured in our analytics tools and provider policies.
- Server logs: for a short rolling period for security and operations.
When data is no longer needed for its stated purpose, we delete or anonymise it.
7. Your rights
If you are in India, you have the right under the Digital Personal Data Protection Act, 2023 to: access a summary of your personal data and the processing applied to it, correct or complete inaccurate data, request erasure of data that is no longer necessary, nominate a person to exercise your rights in case of death or incapacity, withdraw consent where processing is based on consent (withdrawal is as easy as giving consent), and raise a grievance with us. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
If you are in the EU or UK, you have the right to: access your personal data, rectify it, erase it, restrict or object to its processing (including an absolute right to object to direct marketing), receive it in a portable format, withdraw consent at any time without affecting prior processing, and lodge a complaint with your supervisory authority, such as your national data protection authority or the UK Information Commissioner.
If you are in the USA, most state privacy laws apply above visitor volume thresholds that this Site may not meet, and generally exempt data about individuals acting in a business capacity. We nonetheless honour reasonable access, correction, and deletion requests from any US visitor. We do not sell personal information.
Visitors in Canada, Australia, Singapore, the UAE, and elsewhere may exercise equivalent rights by contacting us as described below.
To exercise any right, email [email protected] with the subject line “Privacy Request”. We will verify your identity and respond within the time required by applicable law.
8. Grievance redressal
In accordance with Indian law, you may raise any grievance regarding the processing of your personal data with our Grievance Officer at Quantum Infoway, India. Email: [email protected] (subject line “Grievance”). Phone: +91 85111 08041.
We acknowledge grievances promptly and aim to resolve them within one month, and in any case within the period required by applicable law.
9. Security
We apply reasonable and appropriate technical and organisational measures to protect personal data, including encryption in transit where appropriate, access controls, and the security programmes of our providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach affecting you, we will notify you and the relevant authorities as required by applicable law.
10. Automated decisions and AI
We do not use personal data collected through this Site to train artificial intelligence models, and we do not make decisions producing legal or similarly significant effects about you by solely automated means.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new effective date. Please review this page periodically. Continued use of the Site after an update constitutes acknowledgement of the updated policy.
12. Contact
For any question about this Privacy Policy or our data practices, contact [email protected], call +91 85111 08041, or use our contact page.
Also see our Terms & Conditions.
