Our Privacy Policy.

Last updated: 11 November 2026

1. About this Privacy Policy

This Privacy Policy explains how QuantumX Tech Sol LLP (“QuantumX”, “we”, “us” or “our”) collects, uses, stores, shares and otherwise processes personal data when you visit https://quantumx1.in, contact us, request information, subscribe to communications, create or use an account, engage us for services, or interact with our digital products and services.

QuantumX provides digital technology, design, software and application development, digital marketing, performance marketing, analytics, customer relationship management (CRM), AI-enabled solutions, workflow automation, technology consulting and related services. The precise data processed depends on the service and your relationship with us.

This Policy should be read together with any service agreement, statement of work, order form, data processing agreement, cookie notice or product-specific privacy notice that applies to you. If a separate notice or agreement applies to particular processing, that notice or agreement will govern to the extent of any inconsistency.

2. Who is responsible for your personal data?

The entity responsible for the relevant processing is:

3. Our role: Data Fiduciary and Data Processor

3.1 When QuantumX acts as a Data Fiduciary

For personal data that QuantumX collects and uses for its own business purposes, QuantumX generally determines the purpose and means of processing and acts as the Data Fiduciary (or the equivalent controller under other applicable privacy laws). This may include data relating to website visitors, people who contact us, prospective customers, newsletter subscribers, our own account users, suppliers and business contacts.

3.2 When QuantumX acts as a Data Processor

When a client engages QuantumX to build, host, configure, maintain or operate a website, application, CRM, analytics environment, marketing campaign, AI solution or automation that processes personal data on the client’s behalf, QuantumX may act as the client’s Data Processor. In that situation, the client will generally determine the purposes and essential means of processing and remains responsible for its notices, lawful basis, instructions and responses to individuals’ requests, as required by applicable law.

QuantumX will process such client data only on documented instructions and under the applicable client agreement or Data Processing Agreement, subject to applicable law. We may use authorised sub-processors (such as hosting, cloud, analytics, communications or AI service providers) where permitted by the client agreement and applicable law. The client’s privacy notice, terms and instructions may apply to that data.

Some engagements may involve QuantumX and a client each acting as an independent Data Fiduciary for separate processing activities. The applicable agreement and actual activities will determine the respective roles. This Policy does not replace a client-specific Data Processing Agreement.

4. Personal data we may collect

The categories of data we collect depend on how you interact with QuantumX. We aim to collect data that is reasonably relevant and necessary for the stated purpose.

4.1 Information you provide directly

• Identity and contact details, such as name, business email address, telephone number, job title, organisation and business address.
• Enquiry and project information, such as the services you are interested in, project briefs, requirements, budgets you choose to share, meeting details, feedback and correspondence.
• Account information, such as login identifiers, account profile details, preferences and support requests. Authentication credentials should be protected and should not be sent to us in plain text.
• Subscription and communication preferences, including newsletter registration, marketing choices and unsubscribe records.
• Commercial and transaction information, such as invoices, billing contacts, payment status and transaction references. Payment card or bank credentials should be handled by the relevant payment provider and not stored by QuantumX unless expressly stated in a separate notice.
• Content and files you choose to provide, including documents, images, creative assets, datasets, code, recordings or other materials required for a project.

4.2 Information collected automatically

• Technical and device information, such as IP address, browser type, operating system, device identifiers, language, approximate location derived from IP address and network information.
• Usage information, such as pages viewed, referring pages, clicks, session duration, navigation events, form interactions, crash reports and diagnostic logs.
• Cookie and similar technology information, including identifiers and preference signals, subject to applicable consent requirements and your browser or device settings.
• Advertising and campaign measurement information, such as campaign source, ad interactions, conversion events and attribution signals, where enabled.

4.3 Information from other sources

We may receive business contact information or professional details from publicly available sources, referrals, business partners, event organisers, lead-generation providers or platforms you use to interact with us. Where required, we will provide appropriate notices and respect applicable opt-out or objection rights. We do not knowingly obtain personal data through unlawful means.

4.4 Client-provided and end-user data

In delivering services, clients may provide or make available personal data about their customers, employees, students, patients, website visitors, leads or other individuals. The client is responsible for ensuring that it has the necessary rights, notices, instructions and permissions to provide that data to QuantumX. QuantumX handles such information according to the applicable contract and documented instructions.

5. How we use personal data

Depending on the context and applicable law, we may use personal data to:

• Respond to enquiries, prepare proposals, arrange meetings and communicate about prospective or existing engagements.
• Provide, configure, deliver, maintain, secure and support websites, applications, software, CRM systems, marketing services, analytics, AI solutions and automations.
• Create and manage accounts, authenticate users, provide customer support and administer subscriptions or service access.
• Plan, execute, measure and improve advertising, marketing, lead-generation and communications activities.
• Send newsletters, service announcements, updates and promotional communications in accordance with your choices and applicable law.
• Operate, troubleshoot, test, monitor and improve our website, services, systems and user experience.
• Detect, prevent and investigate fraud, abuse, security incidents, unauthorised access and other harmful or unlawful activity.
• Manage business operations, contracts, billing, accounting, audits, disputes and legal compliance.
• Exercise or defend legal claims and protect the rights, property, safety and legitimate business interests of QuantumX, our clients and others.

We will not use personal data for a materially different purpose without providing any notice or obtaining any consent required by applicable law.

6. AI tools, chatbots and automated workflows

Some QuantumX services and internal workflows may use AI systems, machine-learning tools, chatbots, language models, APIs or automated workflows to support activities such as responding to enquiries, summarising or classifying information, generating drafts, analysing data, producing reports, assisting customer support or automating business processes.

Where these tools process personal data, we seek to limit the information shared to what is appropriate for the task, configure tools and access controls appropriately, and use providers under applicable contractual and privacy terms. Depending on the service, an AI or automation provider may process data on our behalf or on a client’s behalf.

AI-generated content may be inaccurate, incomplete or unsuitable without human review. Unless a separate written agreement expressly says otherwise, AI outputs should not be treated as professional, legal, medical, financial or other regulated advice.

QuantumX does not use client personal data to train AI models. The AI provider’s handling of data is subject to that provider’s terms and settings.

Where required, we will provide additional information about significant automated decisions and the role of human review. Do not submit sensitive personal data or confidential information to a public AI tool unless the relevant service and agreement expressly permit it.

7. Cookies, analytics and advertising technologies

Our website uses Google Analytics 4 (GA4) and a pixel to measure website usage and marketing activity. Cookies, tags or similar technologies may be used for essential website functions, remembering preferences, measuring traffic and performance, understanding visitor behaviour and, where enabled, measuring advertising.

Depending on the tools configured on the website, these technologies may be provided by analytics, advertising, hosting or other technology partners. Such providers may collect information about your browser, device, interactions and visits to this and other websites or services.

Where consent is required, non-essential analytics, advertising or similar technologies should remain disabled until you make the relevant choice. You may manage your preferences through the cookie preference tool on our website, if available, and through your browser settings. Blocking certain cookies may affect website functionality.

The exact cookies, providers, purposes, durations and controls should be described in a separate Cookie Notice or cookie preference interface. [INSERT A CURRENT COOKIE INVENTORY AND LINK TO THE COOKIE NOTICE BEFORE PUBLICATION.]

8. How we share personal data

We may disclose personal data to the following categories of recipients, only as appropriate for the relevant purpose and subject to applicable safeguards:

• Technology and infrastructure providers, including website hosting, cloud computing, database, storage, security, backup and content delivery providers.
• Analytics, advertising and marketing providers that help us measure website usage, campaign performance, conversions and communications.
• CRM, project management, customer support, email, messaging and business communication providers.
• AI, automation and software providers used to deliver or support services.
• Professional advisers, including lawyers, accountants, auditors, insurers and consultants, where reasonably necessary.
• Clients, business partners, contractors and personnel who need access to perform an agreed service or business function.
• Government authorities, regulators, courts, law enforcement agencies or other parties where disclosure is required or permitted by law, legal process or a valid request.
• A successor, investor or acquiring entity in connection with a proposed or completed merger, restructuring, financing, sale or transfer of all or part of our business, subject to appropriate confidentiality and legal safeguards.

We do not authorise service providers to use personal data they process for us for their own unrelated purposes. Their ability to process data is governed by applicable contracts, their own privacy notices where they act independently, and applicable law.

9. Third-party platforms and integrations

Our website and services may integrate with or link to third-party services, which may include hosting and cloud platforms, analytics and tag-management tools, advertising platforms, CRM systems, communication tools, payment providers, databases, AI APIs and automation platforms. The providers actually used may change over time.

Third-party providers may process data under their own terms and privacy notices, or as our service providers under a contract. We encourage you to review their privacy information. QuantumX is not responsible for the independent privacy practices of third-party websites or services that we do not control.

QuantumX may use client-selected or client-owned infrastructure. In those cases, the client may directly control the provider account, data location, access permissions, retention settings and provider relationship. The relevant project agreement should identify the responsibilities of each party.

10. Data storage, hosting and international transfers

QuantumX may deliver services using client-owned infrastructure, client-selected hosting, or third-party cloud and technology platforms. The location of personal data will depend on the relevant provider, account configuration, client instructions and service agreement. We do not make a blanket representation that all data is stored in India.

Some providers or their support teams may process or access data from locations outside India. Where personal data is transferred internationally, we will take steps required by applicable law and the relevant contract, including considering any restrictions or conditions notified by the Government of India and any other applicable jurisdiction.

For client projects, the client should confirm the permitted hosting region, cross-border transfer requirements and provider configuration in the applicable statement of work or Data Processing Agreement.

11. Data retention and deletion

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing services, maintaining business and accounting records, resolving disputes, enforcing agreements, meeting legal obligations and maintaining security records. Retention periods vary by data category, service and legal requirement.

When data is no longer required, we will take reasonable steps to delete it, anonymise it or securely dispose of it, subject to legal retention requirements, backups, technical limitations and any applicable client instructions.

For client data processed as a Data Processor, retention and deletion will be governed by the client’s documented instructions and the applicable agreement. At the end of an engagement, QuantumX will return or delete client personal data as agreed, subject to any legal requirement to retain it and routine backup cycles.

The following schedule describes QuantumX’s retention periods:

These retention periods may be extended where required by applicable law, a documented client instruction, an active dispute, or a legitimate security or compliance need.

12. Information security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Depending on the service and risk, measures may include access controls, role-based permissions, authentication, encryption in transit or at rest where supported, secure configuration, backups, logging, monitoring, vulnerability management, confidentiality obligations and incident response procedures.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to maintain safeguards appropriate to the nature of the information and the risks involved. Clients remain responsible for the security of systems and accounts under their control and for configuring access in accordance with the applicable agreement.

13. Personal data breaches and incident response

If we become aware of a personal data breach involving data for which QuantumX is the Data Fiduciary, we will assess and respond to the incident and make notifications to affected individuals and authorities as required by applicable law and within applicable timelines.

If an incident involves personal data that QuantumX processes as a Data Processor for a client, we will notify the relevant client without undue delay in accordance with the applicable contract, provide reasonably available information to support the client’s investigation and response, and cooperate as agreed. The client will generally determine and make notifications for its processing unless the law or agreement requires otherwise.

14. Your choices and privacy rights

Depending on the law applicable to the processing and the date on which relevant provisions become effective, you may have rights to obtain information about processing, access information about personal data, request correction or completion, request erasure, withdraw consent, raise a grievance, nominate another individual to exercise rights in the event of death or incapacity, or exercise other rights available under applicable law.

You may also opt out of promotional emails by using the unsubscribe link in the message or by contacting growth@quantumx1.in. You may continue to receive transactional or service-related communications where necessary.

To make a privacy request, email growth@quantumx1.in with the subject line “Privacy Request”. Please describe your request and provide enough information for us to identify the relevant interaction or account. We may request reasonable information to verify your identity and protect against unauthorised disclosure. We will respond in accordance with applicable law and may explain if a request cannot be fulfilled because of a legal obligation, an exception or another lawful reason.

If QuantumX processes your information solely as a Data Processor for a client, please direct your request to that client. We will assist the client as required by our agreement and applicable law.

You may withdraw consent where consent is the basis for processing. Withdrawal does not affect processing carried out before withdrawal or processing that may lawfully continue on another basis. Some services may no longer be available if the information is necessary to provide them.

15. Marketing communications

We may send business updates, newsletters, invitations, product or service information and promotional communications where permitted by applicable law and consistent with your preferences. You can opt out at any time by using the unsubscribe mechanism or contacting growth@quantumx1.in. We may retain a limited record of your opt-out so that we do not send further promotional communications.

Opting out of marketing will not prevent us from sending essential service, security, legal, billing or account-related messages.

16. Children’s privacy

Our website and general business services are intended for businesses and individuals who are legally able to engage with us. We do not knowingly seek to collect personal data directly from children for our own marketing or general website purposes. If a service is designed for or used by children, the client and QuantumX must agree on the applicable roles, notices, parental consent or other safeguards required by law before processing begins.

If you believe a child has provided personal data to QuantumX in a context where it should not have been collected, contact growth@quantumx1.in so we can review the matter and take appropriate steps.

17. Third-party websites and links

Our website may contain links to third-party websites, applications or services. Those services are not operated by QuantumX and are governed by their own privacy policies and terms. We encourage you to review those documents before providing personal data.

18. Legal framework in India

QuantumX intends to handle personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025, to the extent and from the dates that their relevant provisions are in force and applicable to the processing.

The DPDP Act and Rules have a phased commencement schedule. As at the date of this Policy (11 November 2026), the provisions brought into force on 13 November 2025 are in force; certain further provisions are scheduled to commence on 13 November 2026 and the principal substantive processing obligations are scheduled to commence eighteen months after publication, on 13 May 2027. The exact commencement position must be checked again when this Policy is published or updated.

During the transition, other applicable laws and provisions may continue to apply, including relevant provisions of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent they remain in force and apply to the relevant processing. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 apply only where QuantumX’s activities fall within their scope; they are not assumed to apply to every activity described in this Policy.

This section is a summary, not a complete statement of law. Applicable sector-specific, contractual, consumer, advertising, cybersecurity, tax and other legal requirements may also apply depending on the service and data involved.

19. Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in our services, data practices, technology, legal requirements or business operations. The revised version will be posted on https://quantumx1.in with an updated “Last updated” date. Where required by law, we will provide additional notice or seek consent for material changes.

20. Contact us and grievance redressal

For questions about this Policy, to make a privacy request, withdraw consent or raise a privacy grievance, contact:

Please include sufficient detail for us to understand and verify your request. We will acknowledge and address grievances within the period required by applicable law and our published grievance process.

21. Governing language

This Policy is written in English. If we provide a translation, the English version will prevail to the extent permitted by applicable law, unless a mandatory legal requirement provides otherwise.