Website Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how Beyond Quantum Technologies Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at A-23 Niralanagar, Lucknow, Uttar Pradesh 226020, India ("Beyond Quantum Technologies," "we," "us," "our"), collects, uses, discloses, and protects personal data when you visit or interact with our website at https://qkyun.co.in ("Website"). Q Kyun is a product operated by Beyond Quantum Technologies. This Policy applies exclusively to the Website; a separate privacy policy governs the Q Kyun mobile application.

We are committed to complying with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and all other applicable Indian laws and regulations regarding data protection.

By accessing or using our Website, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue your use of the Website immediately.

2. Definitions

• Data Principal: The individual to whom the personal data relates (i.e., you, the user).
• Data Fiduciary: Beyond Quantum Technologies Private Limited, operating Q Kyun, which determines the purpose and means of processing personal data.
• Personal Data: Any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, and erasure.
• Consent Manager: A registered entity that manages consent on behalf of a Data Principal, as envisaged under the DPDP Act.

3. Data We Collect

3.1 Information You Provide Voluntarily

• Contact Form Submissions: Name, email address, phone number, business name, and message content when you contact us.
• Demo/Waitlist Requests: Business name, city, venue type, phone number, and email when you request a demo or join the waitlist.
• Newsletter Subscription: Email address if you subscribe to updates.

3.2 Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URL, pages visited, date/time stamps, and time spent on pages.
• Device Information: Screen resolution, device type (mobile/desktop), and language preference.
• Cookies and Similar Technologies: We use cookies, local storage, and similar tracking technologies as described in our separate Cookie Policy.

3.3 Information from Third Parties

We do not purchase or acquire personal data from third-party data brokers. We may receive analytics data from Google Analytics (if implemented) in aggregated, anonymized form.

3.4 Information We Do NOT Collect via the Website

• Financial information (credit/debit card numbers, bank account details)
• Government-issued identification numbers (Aadhaar, PAN, passport)
• Biometric data
• Health or medical records
• Caste, tribe, religious, or political affiliation data
• Sexual orientation or gender identity data

4. Purpose and Legal Basis for Processing

We process your personal data only for the purposes listed below, and only with a valid legal basis under the DPDP Act:

• Responding to Enquiries (Consent): To reply to your contact form submissions, demo requests, and support queries.
• Service Improvement (Legitimate Use): To analyse aggregated Website usage patterns and improve user experience.
• Communication (Consent): To send you product updates, newsletters, or promotional material, only if you have opted in.
• Legal Compliance (Legal Obligation): To comply with applicable laws, regulations, court orders, or lawful government requests.
• Security and Fraud Prevention (Legitimate Use): To detect, prevent, and respond to security incidents, fraud, or technical issues.

5. Consent

Where processing is based on consent, we will obtain your clear, informed, and specific consent before collecting your personal data. You may withdraw consent at any time by contacting us at the details provided in Section 14. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

We will provide a consent notice in clear, plain language at the point of data collection, specifying the purpose, categories of data, and your rights.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please refer to our separate Cookie Policy available at https://qkyun.co.in/cookie-policy.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• Service Providers: With trusted service providers who assist in website hosting, analytics, or email delivery, bound by contractual data protection obligations equivalent to this Policy.
• Legal Requirements: When required by law, regulation, legal process, or enforceable governmental request under Indian jurisdiction.
• Protection of Rights: To enforce our terms, protect our rights, privacy, safety, or property, or that of our users or the public.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, with equivalent privacy protections and prior notice to affected users.

We do not transfer personal data outside India unless compliant with the cross-border transfer provisions of the DPDP Act and rules notified thereunder.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact Form Data: Retained for 12 months from submission, then deleted unless an ongoing business relationship exists.
• Newsletter Subscriptions: Retained until you unsubscribe.
• Log and Analytics Data: Retained in anonymized/aggregated form for up to 24 months.

Upon expiration of the retention period, data is securely erased using industry-standard deletion methods.

9. Data Security

We implement reasonable security practices and procedures as required under Section 43A of the IT Act and the SPDI Rules, 2011, including:

• HTTPS/TLS encryption for all data in transit
• Access controls limiting data access to authorized personnel only
• Regular security assessments and vulnerability testing
• Secure server infrastructure with firewall protection
• Incident response procedures for prompt breach detection and containment

Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any breach.

10. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India as soon as practicable upon becoming aware of the breach, as required under Section 8(6) of the DPDP Act.
• Notify affected Data Principals within 72 hours of notifying the Board, with a plain-language description of the breach, categories of data affected, likely consequences, and remedial measures taken.
• Maintain a record of all breaches, including facts, effects, and remedial actions.

11. Your Rights as a Data Principal

Under the DPDP Act, 2023 and applicable regulations, you have the following rights:

• Right to Access: Request confirmation of whether we process your personal data, and obtain a summary of the data and processing activities.
• Right to Correction: Request correction of inaccurate or misleading personal data, and completion of incomplete data.
• Right to Erasure: Request erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Withdraw Consent: Withdraw consent at any time; processing based on consent will cease upon withdrawal.
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details below) or with the Data Protection Board of India.
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, contact us at legal@qkyun.co.in. We will respond within 30 days.

12. Children's Data

The Website is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately. Under the DPDP Act, processing of a child's data requires verifiable parental consent; we do not process children's data.

13. Third-Party Links

The Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal data.

14. Grievance Officer

In accordance with the IT Act, 2000 and SPDI Rules, 2011, we have appointed a Grievance Officer:

The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 30 days from receipt.

15. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be notified via a prominent notice on the Website or by email (if you have provided one). The "Effective Date" at the top indicates the latest revision. Continued use after changes constitutes acceptance.

16. Governing Law and Jurisdiction

This Policy is governed by the laws of India, including the DPDP Act, 2023, the IT Act, 2000, and all rules and regulations thereunder. Any disputes shall be subject to the exclusive jurisdiction of the courts in Lucknow, Uttar Pradesh, India.

17. Contact Us

For any privacy question, request, or complaint, reach us at:

CIN: ____________________ (to be updated post-incorporation)

Entity: Beyond Quantum Technologies Private Limited (operating Q Kyun)

© 2026 Q Kyun. Operated by Beyond Quantum Technologies Private Limited. All rights reserved.