Privacy Policy

Quantum Cyber Security Valley (“we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit or use quantumcybervalley.com (the “Website”), contact us, request information, or otherwise interact with us. It also explains rights that may apply to individuals in the European Economic Area, the United Kingdom, India, California and other jurisdictions.

1. Who we are

The entity responsible for personal data described in this policy is:

• Business name: Quantum Cyber Security Valley
• Location: Bengaluru, Karnataka, India
• Website: quantumcybervalley.com
• Privacy and general contact: info@quantumcybervalley.com
• Telephone: +91 95731 65899

2. Scope

This Privacy Policy applies to personal data collected through the Website, our contact form, email and telephone communications, and related business interactions. It does not apply to third-party websites, applications or services that we do not control; their privacy practices are governed by their own policies.

3. Personal data we collect

Information you provide directly

When you submit our contact form or otherwise reach out to us, we collect the information you provide. The contact form on this Website asks for:

• First name and last name;
• Work email address;
• Telephone number;
• Company name;
• Your message (optional); and
• How you heard about us.

Please do not submit passwords, authentication credentials, confidential security information or other sensitive data through the contact form. If an engagement requires exchanging such information, we will agree an appropriate secure process with you first.

Information collected automatically

Like most websites, our hosting infrastructure may automatically record basic technical information when you visit — such as IP address, browser type and version, device and operating system, pages requested, referring pages, and date and time of access — for the purposes of operating, securing and troubleshooting the Website. The contact form is additionally protected by Google reCAPTCHA, which collects device and interaction information to distinguish people from automated abuse (see section 4).

We do not currently run third-party advertising, remarketing, session-recording or heatmap tools on the Website. If we add analytics or similar tools in the future, we will update this policy and request consent where required.

4. Cookies and similar technologies

When you first visit the Website we ask whether you accept optional cookies. Nothing optional is loaded until you choose “Accept”, and you can change your choice at any time through the “Cookie settings” link at the bottom of every page.

• Strictly necessary — your cookie choice: a first-party cookie named cookie-consent records whether you accepted or rejected optional cookies, so we do not ask on every visit. It holds no other information and expires after six months. It is set whichever option you choose.
• Optional — Google reCAPTCHA: only if you accept cookies, the contact page loads Google reCAPTCHA to protect the form from spam and abuse. Google may set cookies and collect device and usage information as part of providing this service, subject to the Google Privacy Policy and Terms of Service. If you reject these cookies, the contact form cannot be sent, but you can reach us at info@quantumcybervalley.com.

We do not use advertising, analytics or targeting cookies. If you withdraw consent, we stop loading reCAPTCHA; cookies Google has already set belong to Google’s domain, so you can remove them through your browser settings.

5. How we use personal data

We use personal data to:

• Respond to enquiries and provide requested information;
• Schedule consultations and meetings;
• Prepare proposals, statements of work or services requested by a customer;
• Communicate about our services and our business relationship;
• Operate, maintain, secure and improve the Website;
• Detect, investigate and prevent fraud, abuse, security incidents and unlawful activity;
• Maintain business, legal, accounting and compliance records;
• Establish, exercise or defend legal claims; and
• Carry out any other purpose disclosed at the time of collection or permitted by applicable law.

We will not use personal data for materially incompatible purposes without providing appropriate notice or obtaining consent where required.

6. Legal bases for processing (EEA and United Kingdom)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract or pre-contractual steps: responding to your enquiry, scoping and providing services you request;
• Legitimate interests: operating, securing, improving and promoting our business, provided those interests do not override your rights;
• Consent: where you have given it, such as for marketing communications; and
• Legal obligation: where processing is required by law.

7. India notice

Where India’s Digital Personal Data Protection Act, 2023 and its rules apply, we process digital personal data for lawful purposes, relying on consent or another lawful basis recognized under the Act. You may contact us using the details in this policy to exercise applicable rights — including access, correction and erasure — or to raise a grievance. We will handle requests and grievances within the timelines and through the procedures required by applicable law.

8. California and other United States privacy rights

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Subject to applicable exceptions and verification requirements, California residents may have the right to know or access the personal information we hold about them, correct inaccurate information, request deletion, receive equal treatment for exercising privacy rights, and appeal a denied request where applicable. To submit a request, contact info@quantumcybervalley.com. We may need to verify your identity before completing a request, and you may use an authorized agent where permitted by law.

9. How we disclose personal data

We do not disclose personal data to third parties for their independent marketing purposes. We may disclose personal data to:

• Website hosting, infrastructure and email providers that deliver contact-form enquiries to our team;
• Google, as the provider of the reCAPTCHA service protecting our contact form;
• Professional advisers such as lawyers, accountants, auditors and insurers;
• Government authorities, regulators, courts or law-enforcement bodies where required or permitted by law;
• Parties involved in a merger, acquisition, financing, restructuring or sale of assets; and
• Other parties with your direction or consent.

10. International transfers

We are headquartered in India and serve clients globally, so personal data may be processed outside your country, including by the service providers listed above. Where required by applicable law, we use legally recognized transfer mechanisms and appropriate safeguards, such as standard contractual clauses or another recognized mechanism.

11. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy — including to respond to and follow up on enquiries, provide services, maintain business records, comply with legal obligations, resolve disputes and enforce agreements. When data is no longer needed, we delete, anonymize or securely isolate it unless a longer period is legally required.

12. Data security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure — consistent with the standards we advise our own clients to meet. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data incident, we will respond and provide notifications as required by applicable law.

13. Your privacy rights

Depending on your location and applicable law, you may have rights to:

• Request access to your personal data;
• Correct inaccurate or incomplete data;
• Request deletion or erasure;
• Restrict or object to certain processing;
• Withdraw consent where processing is based on consent;
• Receive data in a portable format;
• Opt out of marketing communications; and
• Lodge a complaint with a relevant supervisory or regulatory authority.

To exercise a right, contact info@quantumcybervalley.com. We will respond within the time required by applicable law, and we may ask for information needed to verify your identity and protect against fraudulent requests. Any marketing email we send will include an unsubscribe option; service and transactional communications may still be sent where necessary.

14. Children’s privacy

The Website is a business-to-business service and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us at info@quantumcybervalley.com and we will delete it.

15. Third-party websites and links

The Website may contain links to third-party websites or services. We are not responsible for their privacy, security or content. Review the privacy policies of those third parties before providing personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Website and revise the “Last updated” date above. Where required by law, we will provide additional notice or obtain consent for material changes.

17. Contact us and complaints

For privacy questions, requests or complaints, contact us at info@quantumcybervalley.com or +91 95731 65899, or write to our office in Bengaluru, Karnataka, India. If you are in the EEA or United Kingdom, you may also complain to your local data-protection authority. If you are in India, you may use the grievance process required by applicable law. If you are in California, you may have the additional rights described above.