Privacy Policy

Who we are and how to contact us

"Quantum & AI Technologies" is the trading name of Quantum and AI Technologies Limited, a company registered in England and Wales (company number 04938175). Our registered office is at Unit 2.02 High Weald House, Glovers End, Bexhill, East Sussex, United Kingdom, TN39 5ES. We are a technology and AI consultancy. For the purposes of UK data protection law, we are the data controller responsible for the personal data we collect through this website. You can contact us at James.m@clickcontrol.org or at the registered office address above.

What personal data we collect

We collect the following categories of personal data through this website:

• Contact form submissions: your name, email address, company name (optional), and the message you provide, when you use our contact form.
• Booking data: if you use the Calendly link on our contact page to book a consultation, Calendly processes information you provide (such as your name, email, and selected time) on its own website under its own terms. We receive the booking details needed to hold the consultation.
• Hosting and security data: our website is hosted on third-party infrastructure (Base44). The hosting provider may maintain server logs (such as IP address, browser type, and request timestamps) for security and operational purposes, in accordance with its own practices.

How we use your data and our lawful basis

We process personal data for the following purposes:

• Responding to enquiries: we use your contact form submission to respond to your enquiry and assess whether we can provide the services you are asking about. Our lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR: we have a legitimate interest in responding to potential clients and assessing enquiries. Processing is limited to what is necessary for this purpose.
• Arranging consultations: where you book a consultation via Calendly, we use the booking details to hold the meeting. Our lawful basis for using the booking details we receive is legitimate interests under Article 6(1)(f) of the UK GDPR.
• Website operation and security: hosting and security data is processed by our hosting provider for the operation and security of the website. The lawful basis is our legitimate interests in keeping the website secure and operational.

We do not use your personal data for marketing or automated decision-making. We do not sell your personal data.

Your right to object

Because we rely on legitimate interests, you have the right to object to our processing of your personal data for this purpose. You can exercise this right at any time by contacting us at James.m@clickcontrol.org. We will then stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal reasons.

Who we share your data with

We do not sell your personal data. We share personal data with the following categories of recipients:

• Base44: our website and database are hosted on Base44, which acts as a processor for the data submitted through the contact form. You can read Base44's privacy and security information at docs.base44.com/Community-and-support/Privacy-and-security.
• Calendly: if you use the Calendly booking link, Calendly processes your booking data on its own website as a controller for its own purposes. We are the controller for the booking details we receive to hold the consultation. Calendly's privacy notice is available at calendly.com/legal/privacy-notice.

We may also disclose personal data where required by law or where necessary to protect our legal rights.

International transfers

Our hosting provider (Base44) and Calendly may process data outside the UK. We have not yet verified the specific transfer mechanisms, safeguards, or contractual terms in place for these transfers. This is an item we are actively reviewing. If you would like further information before this is published, please contact us at James.m@clickcontrol.org.

How long we keep your data

We retain personal data submitted through the contact form for 12 months from the date of your enquiry. This is our stated retention period. After that period, we aim to delete the data; however, we have not yet verified the specific deletion operations across our database, email systems, and backups, and deletion may not be fully automated. If you become a client, relevant personal data may be retained for the duration of the engagement and thereafter in accordance with our client engagement terms. If you would like your data deleted sooner, you can request this at any time (see Your rights below).

Your rights

Under the UK GDPR, you have the following rights:

• The right to be informed about how we use your data (this policy).
• The right of access to your personal data.
• The right to rectification of inaccurate personal data.
• The right to erasure of your personal data in certain circumstances.
• The right to restrict processing of your data.
• The right to data portability, where applicable.
• The right to object to processing based on legitimate interests.
• The right not to be subject to automated decision-making or profiling.

These rights are not absolute. For example, the right to erasure and the right to data portability apply in specific circumstances and may not apply where processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defence of legal claims. To exercise any of these rights, contact us at James.m@clickcontrol.org. We will respond within one month, as required by law.

Complaints

If you have a concern about how we handle your personal data, please contact us first at James.m@clickcontrol.org. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint.

Data security

We take steps to protect personal data against unauthorised access, loss, or destruction. Access to personal data is restricted to authorised personnel who require it to respond to enquiries. Our website is hosted on Base44 infrastructure. We have not independently verified specific security certifications or standards for our hosting provider; if you require further information, please contact us.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically. You may also wish to read our Cookie Information and Website Terms.