Privacy policy

This policy explains how QuantumNest Technologies Limited ("QuantumNest", "we", "us") handles personal data when you visit this website, contact us, or use our services. We process personal data in line with the Kenya Data Protection Act, 2019 and its regulations.

1. Who we are

QuantumNest Technologies Limited is a company registered in Kenya (Company No. PVT-XXXXXXX), based in Nairobi. For this website and our enquiries process, we are the data controller.

Contact for privacy questions: hello@quantumnest.co.ke.

2. What we collect

• Information you give us through the quote form: name, email, phone number, company, country, the services you're interested in, budget range, timeline, preferred contact method and your project description.
• Newsletter sign-ups: your email address.
• Messages and calls: what you share when you contact us by WhatsApp, phone or email.
• Technical data: a one-way, salted hash of your IP address (used only to stop spam and abuse, we never store the raw IP), your browser's user-agent, and basic server logs.
• Analytics: aggregated, cookieless page-view statistics (Vercel Web Analytics). These do not identify you personally.

3. How we use it, and our lawful basis

• To respond to your enquiry and prepare a quote, based on your consent and on steps you ask us to take before a contract.
• To deliver services you engage us for, based on our contract with you.
• To send our newsletter, based on your consent, which you can withdraw at any time.
• To keep the website secure and prevent spam and fraud, based on our legitimate interests.
• To meet legal obligations, such as tax and accounting record-keeping.

We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you.

4. Who we share it with

We use trusted service providers ("data processors") who process data on our behalf, under contract:

• Supabase: database where enquiries are stored.
• Resend: sending email notifications and replies.
• Vercel: website hosting and cookieless analytics.
• Meta (WhatsApp): if you choose to message us on WhatsApp, under WhatsApp's own terms.

We may also disclose data where required by Kenyan law or to protect our legal rights.

5. International transfers

Some of these providers store or process data outside Kenya. Where this happens, we rely on appropriate safeguards as required by the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021, such as contractual protections and providers' security commitments.

6. How long we keep it

• Enquiries that don't become projects: up to 24 months, then deleted.
• Client project and billing records: for the duration of the engagement and as long as tax and accounting laws require.
• Newsletter: until you unsubscribe.
• Security logs: for a short period, typically no longer than 90 days.

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be informed of how your personal data is used;
• access the personal data we hold about you;
• object to the processing of all or part of your personal data;
• have false or misleading data corrected or deleted;
• request deletion of data we no longer have a lawful reason to keep;
• request your data in a portable format, where applicable;
• withdraw consent at any time, without affecting earlier processing.

To exercise any of these rights, email hello@quantumnest.co.ke. We may need to verify your identity, and we will respond within the timelines set by the Act and its regulations.

If you're unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (ODPC) . We'd appreciate the chance to resolve it with you first.

8. Security

We use encryption in transit (HTTPS), access controls, least-privilege accounts and reputable providers. No system is perfectly secure, but we work to protect your data and will notify you and the ODPC of any breach as the law requires.

9. Cookies and local storage

We don't use advertising or tracking cookies, so you won't see a cookie banner. The site stores two small preferences in your browser (your colour theme and currency choice), and temporarily remembers campaign parameters (such as utm_source) for the length of your visit so we know how you found us.

10. Children

Our services are aimed at businesses and are not directed to anyone under 18.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.