## Privacy Policy
_Last updated: 2025, September 4_
This Privacy Policy explains how **TheQ Project LP** (“we”, “us”, “our”) collects, uses and protects personal data in connection with the website **the-q-project.com**.
We are committed to complying with applicable data protection laws, including the UK GDPR and, where relevant, the EU GDPR.
—
### 1. Data controller
The data controller responsible for your personal data is:
**TheQ Project LP**
5 South Charlotte Street
EH2 4AN Edinburgh, United Kingdom
Email: contact@the-q-project.com
—
### 2. Personal data we may collect
We may collect and process the following categories of personal data:
– **Contact information**: name, email address, phone number, company, and any information you voluntarily provide when you contact us via email or form.
– **Technical and usage data**: IP address, browser type, device information, pages visited, time and date of visit, and other analytics data.
– **Cookies and similar technologies**: information stored or read on your device to enable site functionality and analytics (see “Cookies” section below).
We do not intentionally collect sensitive personal data through this website.
—
### 3. How we use your personal data
We use personal data for the following purposes:
– **To respond to your enquiries** and communicate with you when you contact us.
– **To manage and improve the website**, including security, performance and user experience.
– **To perform analytics and statistics**, such as understanding how visitors use the site (pages visited, time spent, etc.).
– **To prepare or enter into business relationships** (e.g. discussions with potential partners or clients).
– **To comply with legal obligations**, regulatory requirements or requests from public authorities.
—
### 4. Legal bases for processing
Depending on the situation, we process personal data on the following legal bases:
– **Consent**: when you freely provide data via contact forms or accept non-essential cookies.
– **Legitimate interest**: to ensure the security and proper functioning of the website, to perform basic analytics, and to communicate with you in a professional context.
– **Contractual necessity**: when processing is required to prepare or perform a contract with you or your organisation.
– **Legal obligation**: where we must retain certain data or disclose it to public authorities.
—
### 5. Data retention
We keep personal data only for as long as necessary for the purposes described above:
– Contact and enquiry data: generally kept for up to **3 years** after the last contact, unless a longer period is required for legal or contractual reasons.
– Technical and analytics data: kept for a limited period necessary for security and statistics, typically **12 to 24 months**.
Data may be stored longer if required by law or to establish, exercise or defend legal claims.
—
### 6. Data sharing and transfers
We do not sell your personal data.
We may share personal data with:
– **Service providers** (e.g. hosting, email, analytics) that act as processors under our instructions and are bound by confidentiality and security obligations.
– **Professional advisers** (lawyers, accountants) where necessary.
– **Public or regulatory authorities**, where required by law or legal process.
Because our hosting and tools may be located in different countries, your data may be transferred outside the UK or the EU. In such cases, we seek to ensure appropriate safeguards (for example, adequacy decisions or standard contractual clauses).
—
### 7. Cookies and analytics
Our website may use cookies and similar technologies to:
– ensure the basic functioning and security of the site,
– remember your preferences,
– perform audience measurement and statistics.
You can control cookies through your browser settings and, where implemented, via a cookie banner on the website. Disabling certain cookies may affect your browsing experience.
More information can be found in our **Cookies Policy**.
—
### 8. Your rights
Subject to applicable law, you may have the following rights regarding your personal data:
– **Right of access** – to know whether we process your data and obtain a copy.
– **Right to rectification** – to correct inaccurate or incomplete data.
– **Right to erasure** – to request deletion of your data in certain circumstances.
– **Right to restriction of processing** – to request that we limit the processing of your data.
– **Right to object** – to object to processing based on our legitimate interests, including direct marketing.
– **Right to data portability** – to receive your data in a structured, commonly used, machine-readable format, where legally applicable.
– **Right to withdraw consent** – where processing is based on consent, you can withdraw it at any time.
To exercise these rights, please contact: **contact@the-q-project.com**.
We may need to verify your identity before acting on your request.
If you are not satisfied with our response, you also have the right to lodge a complaint with a competent data protection authority (for example, the ICO in the UK or your local EU authority).
—
### 9. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. However, no system is completely secure and we cannot guarantee absolute security.
—
### 10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Updates will be posted on this page with a new “last updated” date.
For any questions regarding this Privacy Policy, please contact: **contact@the-q-project.com**