Privacy Policy

1. Who we are (data controller)

Qmunitas is a UK business (UK Registered VAT number 477213972). For privacy purposes, Qmunitas is the data controller of personal data you send us (for example by email) and of limited hosting logs generated to operate this site.

Contact: inquiry@qmunitas.org

2. What this notice covers

This notice explains how we handle personal data when you visit our website, email us, or use the contact form. It sits alongside our Privacy Promise above. The Promise states our principles; this notice sets out the practical detail required under the UK GDPR and the Data Protection Act 2018.

3. What we collect

This website does not store contact-form fields on a server. The form opens a draft email on your device addressed to us. We only receive what you choose to send from your own mailbox.

Depending on how you interact with us, we may process:

• Identity and contact data — name, email address, and any organisation details you include in an email to us.

• Enquiry data — the content of your message and the service area you mention.

• Technical data — limited server and security logs that may include IP address, browser type, date/time, and pages requested (generated by hosting infrastructure for security and reliability).

We do not deliberately collect special category data through this site. Please do not send sensitive personal information in an enquiry unless it is necessary and you are content for us to process it to respond.

4. Why we process data and our lawful bases

Responding to enquiries — so we can reply to emails you send us and arrange conversations. Lawful bases: your consent (you choose to send the email) and/or steps prior to entering a contract (UK GDPR Art. 6(1)(a) and 6(1)(b)).

Operating and securing the website — to keep the site available, diagnose faults, and protect against abuse. Lawful basis: legitimate interests (Art. 6(1)(f)) in running a secure service, balanced against your rights.

Legal and regulatory obligations — where we must keep certain records (for example tax or accounting if we later work together). Lawful basis: legal obligation (Art. 6(1)(c)).

You may withdraw consent at any time by emailing us. Withdrawal does not affect processing already lawfully carried out.

5. What we never do

We do not sell, rent, or trade your personal data.

We do not share your personal data with third parties for their marketing or profiling.

We do not use your enquiry content to train public AI models.

“Never share for their own purposes” does not mean we operate without infrastructure. Like any modern site, processing happens on systems we use under contract. Those providers act as processors (or sub-processors) on our instructions — they are not free to use your data as their own product.

6. Who processes data on our behalf

We use carefully chosen service providers to host this website, deliver email, and (if applicable) support domain/DNS services. Typical categories include:

• Website hosting and application delivery (so the site can be served securely over the internet).

• Email and mailbox services (so we can receive and reply to enquiries at our contact address).

• Domain and DNS providers (to resolve our domain names).

These providers process data only as needed to provide their service to us, under contractual terms that restrict use of personal data. If you need the current named processors for a specific purpose, email us and we will provide them.

7. International transfers

Some infrastructure providers may process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law (for example the UK International Data Transfer Agreement / Addendum, or an adequacy decision), or we will explain the basis if you ask.

8. How long we keep data

Emails you send to us — kept only as long as needed to respond and follow up, then deleted or anonymised, unless we enter a longer relationship (in which case retention follows that engagement and any legal requirements). As a default, routine enquiry correspondence is reviewed for deletion within 24 months if no ongoing work has begun. The website contact form itself does not create a stored submission.

Server and security logs — retained for a short operational period (typically days to a few months) unless needed to investigate an incident.

We do not keep personal data “just in case”.

9. Your rights

Under UK GDPR you may have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase data (in certain circumstances)

• Restrict or object to processing

• Data portability (where applicable)

• Withdraw consent at any time

• Lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/

To exercise any right, email inquiry@qmunitas.org. We will respond without undue delay and within one month, subject to identity verification where appropriate.

10. Cookies and similar technologies

This marketing site is designed to be light. Typefaces are self-hosted on this domain; we do not load fonts from Google or other third-party font CDNs, and we do not run third-party advertising trackers. Hosting and delivery infrastructure may set strictly necessary technical cookies or similar storage for security, load balancing, or session integrity.

A small platform credit on the site may contact the hosting platform to check whether remixing is available. That request does not include the content of any enquiry you write.

If we introduce non-essential cookies (for example analytics), we will update this notice and provide a clear choice before any non-essential cookies are set.

11. Children

Our services are aimed at organisations and professionals. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

12. Court orders and government demands

We will not volunteer your data for fishing expeditions. If we are compelled by a valid court order, we will disclose only what the law strictly requires, seek to narrow the demand, and notify you unless legally prohibited. That is a legal duty, not a marketing guarantee.

13. Changes to this notice

We may update this page to reflect legal or operational changes. The date below shows the latest revision. Material changes will be reflected here; continued use of the site after updates constitutes notice of the revised text for website visitors. Ongoing clients will be informed of material changes that affect them where required.

14. How to contact us

Privacy enquiries: inquiry@qmunitas.org

Qmunitas — Human First. Private means never shared for others’ purposes. Ever.

15. Accounts and unused sign-in

This brochure site does not offer visitor accounts or public sign-in. We do not invite Google, X, or any other identity provider. Any leftover technical route from the publishing platform redirects home and is not indexed. If an account is created in error, email us and we will delete any data we hold.