PRIVACY POLICY

Last Updated: 9th October 2026

Version: 3.0

Table of Contents

  1. Introduction
  2. Who We Are
  3. The Laws that Apply
  4. Types of Personal Data Collected
  5. How We Collect Your Personal Data
  6. Legal Bases for Processing
  7. How We Use Your Personal Data
  8. Retention Periods
  9. Third-Party Data Sharing
  10. International Data Transfers
  11. Categories of Data Processors
  12. Children’s Privacy
  13. Security Measures
  14. Your Rights
  15. Cookie Policy Reference
  16. Updates to This Policy
  17. Contact Information

1. Introduction

Quantum Switch Group Services Limited (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we handle your personal data, including the types of data collected, its usage, and your rights under applicable data protection laws.

By interacting with us, you agree to the terms of this Privacy Policy. Updates to the policy will be posted on this page.

2. Who We Are

Quantum Switch Group Services Limited acts as the data controller for the personal data processed in accordance with this policy.

3. The Laws that Apply

We operate internationally, and more than one data protection regime may apply to your personal data depending on where you are located and the context in which we process it:

  1. United Kingdom. The UK General Data Protection Regulation and the Data Protection Act 2018 (“UK GDPR”). The Information Commissioner’s Office (“ICO”) is the supervisory authority.
  2. European Union. Regulation (EU) 2016/679 (“EU GDPR”), where it applies to individuals located in the European Economic Area, including in connection with our European operations. Where Article 27 EU GDPR requires it, we will designate a representative in the European Economic Area and publish their details here once appointed.
  3. Kingdom of Saudi Arabia. The Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations (“KSA PDPL”), in connection with our Dammam facility and individuals located in the Kingdom. The Saudi Data and Artificial Intelligence Authority is the competent authority.
  4. Law No. 13 of 2016 on Personal Data Privacy Protection (“Qatar PDPPL”), in connection with our Doha facility and individuals located in Qatar. The Compliance and Data Protection Department at the Ministry of Communications and Information Technology is the competent authority.
  5. United States. Applicable US state privacy laws, where they apply to residents of those states. Depending on your state of residence, you may have rights to access, delete or correct your personal data and to opt out of certain uses.

Where more than one regime applies to the same processing, we comply with the stricter requirement.

Types of Personal Data Collected

We may collect the following categories of personal data:

​a. Information You Provide:

  • Full name
  • Job title and company information
  • Contact details (email, phone number, address)
  • Inquiry and correspondence details
  • Survey responses

b. Information Collected Automatically:

  • IP address
  • Browser type and version
  • Operating system and platform
  • Device and traffic data
  • Location data

c. Information from Third Parties:

  • Publicly available data from social media platforms
  • Data from partners, suppliers, or group companies

5. How We Collect Your Personal Data

We collect data:

  • Directly from you via forms, emails, or calls.
  • Automatically through cookies and website interactions.
  • From third parties, such as social media platforms or commercial partners.

Refer to our Cookie Policy for more details on automated data collection.

​

6. Legal Bases for Processing

We process your personal data in accordance with the data protection regime applicable to you, as set out in Section 3. Depending on that regime, we rely on one or more of the following legal bases:

  • Consent: For marketing communications and surveys.
  • Contractual Obligation: To deliver services or respond to inquiries.
  • Legal Obligation: For compliance with legal or regulatory requirements.
  • Legitimate Interests: For improving services, ensuring security, and business operations.

7. How We Use Your Personal Data

Your data is used for:

  • Providing and improving our services.
  • Responding to inquiries.
  • Ensuring website security and functionality.
  • Complying with legal obligations.
  • Conducting marketing, where consent is provided.

8. Retention Periods

We retain your personal data as follows:

  • Contact information: 2 years from last interaction.
  • Transaction records: 6 years for compliance with tax and legal requirements.
  • Cookies and tracking data: As specified in our Cookie Policy.
  • Marketing preferences: Until you withdraw your consent.

Data may be retained longer where required for legal claims or regulatory purposes.

​

9. Third-Party Data Sharing

We share your data only with:

  • Service providers (e.g., IT services, analytics platforms).
  • Group companies for operational purposes.
  • Legal or regulatory authorities, where required.

We ensure third parties comply with applicable data protection laws. We do not sell your personal data.

​

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including outside the UK, EEA, KSA, and the USA. Not all such countries have data protection laws considered equivalent to those of your country. Where this occurs, we ensure appropriate safeguards, such as:

  • An adequacy decision or recognition in respect of the destination country, issued by the relevant authority;
  • Standard Contractual Clauses approved by the European Commission, or the equivalent UK International Data Transfer Agreement or Addendum; or
  • Such other transfer mechanism as is recognised and permitted under the applicable regime.

11. Categories of Data Processors

We use data processors for:

  • IT and cloud storage services
  • Marketing and analytics tools
  • Customer support services

Each processor is contractually required to protect your personal data.

​

12. Children’s Privacy

Our services are not intended for individuals under 16 years old. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, please contact us to ensure its deletion.

​

13. Security Measures

We employ technical and organizational measures to safeguard your data, including:

  • Encryption of sensitive data
  • Regular vulnerability assessments
  • Access controls and monitoring
  • Secure data storage facilities

While we strive to protect your data, no transmission over the Internet is entirely secure.

​

14. Your Rights

Depending on the law applicable to you, you may have some or all of the following rights:

  • Access: Request details of your personal data.
  • Correction: Ask us to rectify inaccurate data.
  • Deletion: Request deletion of data when no longer required.
  • Restriction: Limit the processing of your data.
  • Objection: Object to data processing for specific purposes.
  • Data Portability: Request transfer of your data to another controller.
  • Withdraw Consent: For consent-based processing.

To exercise your rights, contact us at qsecurity@quantumswitch.com.

We will respond within the statutory periods applicable under the relevant regimes referred to in this Policy. In some cases we may need to verify your identity before we respond.

If you are dissatisfied with our response, you can file a complaint with the relevant supervisory authority: in the United Kingdom, the Information Commissioner’s Office (https://ico.org.uk/); in the European Union or wider EEA, the supervisory authority of your habitual residence, place of work or the place of the alleged breach,a list is maintained by the European Data Protection Board at (https://www.edpb.europa.eu/about-edpb/about-edpb/members_en); in the Kingdom of Saudi Arabia, the Saudi Data and Artificial Intelligence Authority at (https://sdaia.gov.sa/en/default.aspx); in Qatar, the National Cyber Security Agency, which administers and enforces the PDPPL, with the Compliance and Data Protection Department at the Ministry of Communications and Information Technology as the policy regulator (https://ncsa.gov.qa/en/pages/cyber-assurance); and in the United States, the Federal Trade Commission at (https://www.ftc.gov/) or the attorney general of your state of residence.

​

15. Cookie Policy Reference

For information on how we use cookies, please refer to our Cookie Policy:

​

16. Updates to This Policy

We may revise this policy periodically. Changes will be communicated on this page and, where appropriate, directly to you.

​

17. Contact Information

For questions about this Privacy Policy or to exercise your rights:

Email: qsecurity@quantumswitch.com
Address:  7th Floor, Eagle Tower, Montpellier Drive, Cheltenham, Gloucestershire, GL50 1TA, UK