Privacy Policy

1. Introduction

This policy explains how Quantum 2x Ltd ("we", "us", "our"), trading as Q2X Labs, collects, uses, and protects your personal data when you visit q2xlabs.com (the "Site") or submit an enquiry through it. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

Q2X Labs is a trading name of Quantum 2x Ltd, a company registered in England and Wales under company number 16269887. Our registered office is 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, England. For the purposes of data protection law, Quantum 2x Ltd is the "data controller" of the personal data described in this policy.

3. Information we collect

Information you give us. When you submit an enquiry through our contact form, we collect the name, email address, and message you provide, along with which type of enquiry you selected (investor, developer, or general) and the page you submitted it from.

Information collected automatically. We use Vercel Web Analytics to understand how the Site is used. It is cookieless and does not track you across other websites — it only records aggregated, anonymised metrics such as page views and referrers, which cannot be used to identify you personally.

4. How we use your information

• To respond to enquiries submitted through our contact form.
• To keep an internal record of correspondence with investors, candidates, and other contacts.
• To understand, in aggregate, how visitors use the Site, so we can improve it.
• To detect and prevent spam or abuse of our contact form.

5. Our legal basis for processing

We process the personal data you submit through our contact form on the basis of our legitimate interests (UK GDPR Article 6(1)(f)) in responding to business, investment, and recruitment enquiries, and in maintaining a record of that correspondence. Where we rely on legitimate interests, we have considered that this processing is proportionate and does not override your rights and freedoms.

6. Who we share your information with

We do not sell your personal data. We share it only with the following third-party processors, who handle it on our behalf and under contract:

• Supabase — stores enquiry form submissions in our database.
• Resend — sends the confirmation email you receive after submitting the form, and notifies our team of your enquiry.
• Vercel — hosts the Site and provides cookieless analytics.

[PLACEHOLDER — confirm the hosting region(s) used by Supabase and Resend for this project, and whether any data is transferred outside the UK/EEA. If so, add a paragraph here on the safeguards used, e.g. Standard Contractual Clauses.]

7. How long we keep your information

[PLACEHOLDER — confirm retention period. Suggested default: we retain enquiry form submissions for as long as necessary to respond to you and for a reasonable period afterward for record-keeping, and no longer than 24 months from your last contact with us, unless we are required to keep it longer by law or you become an investor, employee, or contractor, in which case a longer retention period applies under a separate agreement.]

8. Cookies

The Site does not use cookies for advertising or cross-site tracking. Our analytics provider, Vercel Web Analytics, operates without cookies. If this changes in the future, we will update this policy and, where required, ask for your consent.

9. Your rights

Under UK GDPR, you have the right to:

• request access to the personal data we hold about you;
• request that we correct inaccurate or incomplete data;
• request that we delete your data, in certain circumstances;
• request that we restrict or object to our processing of your data;
• request that we transfer your data to another organisation; and
• withdraw consent, where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 12. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

10. Children's privacy

The Site is intended for a business audience and is not directed at, or knowingly used to collect data from, children under 16.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

12. Contact us

For any questions about this policy or to exercise your data protection rights, contact us at hello@q2xlabs.com or by post at: Quantum 2x Ltd, 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, England.

[PLACEHOLDER — confirm this is the correct contact address; the codebase currently references both hello@q2xlabs.com and hello@quantum2x.com in different places, and only one should be used consistently.]