Privacy Notice

Quantum Future Limited is a company incorporated in Gibraltar, Company No. 124020, with principal offices at Suite 4.3.2 Eurotowers, Gibraltar GX11 1AA. We use Quantum Future and QF as names for this website. ‘We’, ‘us’ and ‘our’ mean Quantum Future Limited.

We are the data controller for the processing described here. Contact info@quantum-future.io about privacy, to exercise your rights or to request this notice in another accessible format. Please use “Privacy request” in the subject line.

This notice covers www.quantum-future.io and website enquiries, including partnership, press and Post-Quantum Attestation Service enquiries. Separate notices or data processing agreements may apply to client engagements or recruitment.

Our enquiry form requires your name, company and email address. The message is optional. We also receive information you send by email and in subsequent correspondence. You are not legally required to make an enquiry, but without sufficient contact details we may be unable to respond.

Hosting and content delivery services receive technical information needed to deliver and protect the site: IP addresses, browser and device information, requested URLs, timestamps and diagnostic records. The contact endpoint checks an anti-spam field, elapsed submission time and IP-based request frequency. It sends enquiries by email instead of storing them in a website enquiry database.

Optional analytics, when enabled and accepted, involves browser identifiers, page views and technical information. Further details appear below.

Do not send passwords, private keys, seed phrases, payment card details, health or other special-category data, or sensitive client material through the form. Arrange an appropriate channel first. If you supply another person's details, ensure you are entitled to do so and give them this notice.

We process personal data under the Gibraltar General Data Protection Regulation (Gibraltar GDPR) and the Data Protection Act 2004. Other data protection laws may also apply to particular activities.

Enquiries and business relationships — legitimate interests. We use contact details and correspondence to answer questions, evaluate opportunities and communicate with prospective clients and their representatives. Our interest is in conducting our business and providing relevant responses. We consider the effect on your privacy and do not rely on this basis where your interests or rights override ours.

Steps towards a contract with you — contract. Where you personally ask us to take steps before entering a contract with you, or we must perform that contract, we use the information necessary for those steps. This basis does not automatically apply simply because you represent a corporate client.

Website operation and security — legitimate interests. We process technical and anti-spam information to deliver the website, investigate faults and prevent abuse.

Optional analytics — consent. Google Analytics is used only after an affirmative choice. Refusal does not prevent browsing or enquiries.

Legal obligations and claims. We process information where needed to comply with a legal obligation that applies to us. Establishing, exercising or defending legal claims can also be a legitimate interest.

An enquiry is not consent to newsletters, advertising or unrelated promotional emails. We respond to the interest you express. Any separate subscription would require its own information and applicable choice.

We use optional Google Analytics 4 only after you accept analytics through Cookie Settings. Before acceptance, this website does not load the Analytics tag or send analytics measurement requests, including cookieless measurement requests.

The integration measures page views and successful enquiry counts using page addresses without query strings or fragments. It records only the origin of an external referring website, without the referring page path, query string or fragment. It does not deliberately send enquiry fields, names or email addresses to Google. Advertising personalisation and Google signals are disabled in the tag. Google states that GA4 does not log or store individual IP addresses, although IP addresses are used when receiving data and deriving approximate location. Analytics identifiers can still be personal data.

You can withdraw your choice through Cookie Settings. Withdrawal stops future collection through this integration and removes its accessible analytics cookies. It does not retrospectively make earlier processing unlawful or automatically erase information already received by Google. Contact us about deletion requests.

See our Cookie Policy, Google's explanation of data use and Google's privacy policy.

Information is available to the people who need it to handle your enquiry, operate the website or fulfil the purposes above. Our website stack uses Vercel for hosting and delivery, Sanity for content and content delivery, and Resend to send contact-form emails when delivery is configured. Our business mailbox provider also processes correspondence. Google receives optional analytics information when analytics is enabled and accepted.

We use Cloudflare Turnstile on the enquiry form to detect automated abuse. Cloudflare processes technical signals such as IP address, browser information and the website origin. Our verification request sends the challenge token, not your name, company, email or message. This security check operates independently of optional analytics. See Cloudflare’s Turnstile Privacy Addendum.

The form does not write enquiries to Sanity. Visiting content and media endpoints can still disclose technical connection information to delivery providers. Providers may use authorised infrastructure and support subprocessors. Provider information is available from Vercel, Sanity, Resend and Google.

We may disclose information to professional advisers or competent authorities where necessary for advice, a legal obligation or a claim. A proposed business transfer may require limited disclosure with appropriate safeguards. We do not sell enquiry information.

Providers operate international infrastructure, so information may be processed outside Gibraltar, including in the United States and European jurisdictions. Locations and support access depend on provider and account configuration.

Transfers require an applicable lawful route: for example, Gibraltar adequacy arrangements or appropriate safeguards such as the Gibraltar International Data Transfer Agreement or Gibraltar Addendum to EU standard contractual clauses, with a transfer assessment and any necessary additional measures. EU standard contractual clauses alone are insufficient for a restricted transfer under Gibraltar GDPR. Cookie consent does not replace transfer safeguards.

Contact info@quantum-future.io for details and copies of safeguards relevant to your data, subject to necessary confidentiality redactions.

We retain data only for as long as needed for its purpose. For enquiry correspondence, the criteria are whether the enquiry is open, follow-up has been requested, an ongoing relationship has resulted, or particular records are needed for a legal obligation or claim. When these reasons no longer apply, the information should be deleted or anonymised. An enquiry does not justify indefinite retention.

Technical and security records support troubleshooting and abuse investigation under provider settings. The form rate limit uses a ten-minute request window; this does not mean all IP records are deleted after ten minutes, because the in-memory map and infrastructure logs have separate lifecycles.

Cookie choices are valid for 180 days in this browser. The analytics cookies have a maximum configured lifetime of 180 days from creation, subject to shorter browser limits. GA4 is configured for two-month user and event retention with reset on new activity disabled. This setting does not delete standard aggregated reports on the same schedule.

Records needed for an actual dispute or legal obligation may be kept longer, limited to what is necessary. Backups and provider systems have their own deletion cycles.

Subject to applicable conditions and exceptions, you can request access and a copy of your personal data, correction, erasure or restriction. For automated processing based on consent or a contract with you, you may have a right to receive data you supplied in a portable format.

You may object to legitimate-interest processing on grounds relating to your situation. You have an unconditional right to object to direct marketing. You can withdraw consent at any time where we rely on it.

Send requests to info@quantum-future.io. We may request proportionate identity verification. We normally respond within one month without a fee. If a lawful extension is needed for complexity or multiple requests, we will explain why within that month; the extension can be up to two further months. If an exception applies, we will explain it and your options.

This website does not make solely automated decisions producing legal or similarly significant effects. Anti-spam checks protect the enquiry service; email is an alternative if the form does not work.

You can contact us about any concern. You also have the right to complain to the Gibraltar Regulatory Authority, acting as Information Commissioner, without our permission. Its data protection complaints page explains how.

Gibraltar Regulatory Authority, 2nd Floor, Eurotowers 4, 1 Europort Road, Gibraltar. Telephone: +350 200 74636. Data protection enquiries: privacy@gra.gi. You may also complain to another supervisory authority where applicable law provides it, and seek a judicial remedy.

We are responsible for appropriate technical and organisational protection. No website or email service guarantees absolute security. Report concerns using the contact details above and agree an appropriate channel before sending sensitive evidence.

The site is intended for professional and business audiences, not directed at children. Contact us if you believe a child has supplied personal data so we can assess and address it.

External websites have their own privacy practices. Check their notices before supplying information.

We will keep this notice aligned with our processing and show its revision date. Where required, we will draw material changes to your attention and obtain a fresh choice before introducing new optional purposes. Continuing to browse is not consent to analytics.