Your data.Handled with care.

Quantumverse Studios is the controller for the personal data described in this policy.

Legal business details are provided prior to entering into an agreement. For privacy questions, requests or the exercise of your privacy rights, contact us at info@quantumversestudios.com.

This policy applies to our website, enquiries, proposals, client relationships and related business communications. When we process personal data solely on a client’s documented instructions as part of a service, the client is generally the controller and Quantumverse Studios acts as processor under the applicable agreement.

We collect only data that is relevant to operating our business, responding to enquiries, delivering services and protecting our systems.

• Contact and identity data: name, company, email address, telephone number and professional role.
• Enquiry data: selected service, investment range, project description and anything else you choose to include in a message.
• Client and project data: proposals, agreements, instructions, feedback, account contacts, meeting notes, deliverables and project correspondence.
• Financial and administrative data: billing details, invoices, payment status, tax information and transaction references.
• Technical and security data: IP address, device and browser information, timestamps, request data and security logs that our hosting or infrastructure providers may generate.
• Communication data: email, telephone and other business communications with us.

We normally receive data directly from you. We may also receive professional contact or project data from your employer, colleague, authorised representative, referral partner, public business source or a service provider used for the project.

Where we rely on legitimate interests, those interests are efficient business communication, service improvement, security, administration and the protection of legal rights. We consider necessity and balance these interests against your rights.

Fields marked as required in our contact form are needed to understand the enquiry, assess fit and respond meaningfully. If you do not provide them, the form cannot be submitted. You may instead contact us directly by email.

Some information is required to enter into or perform an agreement, issue a valid invoice, verify authority or meet a legal duty. We will explain this when it is not obvious. You are not required to provide unrelated personal data, special-category data or confidential credentials in a general enquiry.

We do not sell personal data. We share it only where necessary for a defined purpose, under an appropriate legal and contractual basis.

• OpenAI Sites: website hosting, delivery, infrastructure and security.
• Resend: secure transmission of contact-form submissions to our business inbox.
• Hostinger: hosting of our business email account and related mail services.
• Project providers: software, hosting, cloud, design, development, automation or collaboration services used for a specific client assignment.
• Professional advisers: accountants, legal advisers, insurers and other confidential advisers where needed.
• Authorities or counterparties: when disclosure is legally required or necessary to establish, exercise or defend legal rights.

Authorised team members and subcontractors receive access only where their role requires it and are subject to confidentiality and data-protection obligations. When a provider processes data for us, we require appropriate processing terms.

Some technology providers or their subprocessors may process data outside the European Economic Area. When personal data is transferred internationally, we use a lawful transfer mechanism and appropriate safeguards.

Depending on the destination and provider, these may include an adequacy decision, the European Commission’s Standard Contractual Clauses, contractual and technical safeguards, and an assessment of the transfer. You may ask us for more information about the safeguard relevant to your data, subject to necessary confidentiality restrictions.

We keep personal data no longer than necessary for the purpose for which it was collected, taking account of legal duties, contractual needs, security, disputes and limitation periods. Our usual periods are:

• Enquiries that do not become a project: up to 24 months after the last meaningful contact.
• Project and contract records: for the agreement and normally up to 5 years after it ends, unless a dispute or legal duty requires longer.
• Financial and core business administration: at least 7 years where required by Dutch tax law.
• Technical and security logs: normally no more than 12 months, unless needed to investigate an incident or protect legal rights.
• Consent and opt-out records: for as long as necessary to demonstrate and respect your choice.

Backups may retain deleted data for a limited additional period and are protected and overwritten in the ordinary backup cycle.

We use appropriate technical and organisational safeguards proportionate to the nature of the data and risks. These include access controls, secure account practices, encrypted transport where supported, data minimisation, provider due diligence, confidentiality duties, backups where appropriate and procedures for security incidents.

No online service can promise absolute security. If a personal-data breach occurs, we will investigate, limit its effects and notify the Dutch Data Protection Authority and affected individuals when the GDPR requires it.

Subject to the conditions and exceptions in the GDPR, you may:

• request access to your personal data and information about its use;
• ask us to correct inaccurate or incomplete data;
• ask us to erase data or restrict its processing;
• object to processing based on legitimate interests or to direct marketing;
• receive data you provided in a structured, commonly used, machine-readable format where portability applies;
• withdraw consent at any time, without affecting earlier lawful processing; and
• lodge a complaint with a competent supervisory authority.

Send a request to info@quantumversestudios.com. We normally respond within one month. Complex or multiple requests may lawfully take longer; if so, we will explain. We may ask for proportionate information to verify your identity and protect your data.

We would like the opportunity to resolve a concern directly. Contact us at info@quantumversestudios.com and describe the issue or right you wish to exercise.

You also have the right to complain to the Autoriteit Persoonsgegevens, the Dutch supervisory authority, or to the supervisory authority in the EU member state where you live, work or believe an infringement occurred.

This website does not currently use analytics or advertising cookies. Our hosting and security infrastructure may use strictly necessary storage or process technical request data to deliver the website, prevent abuse and maintain security.

If we introduce analytics, personalisation or marketing technologies, we will first provide the required information and request consent where the law requires it. A separate cookie policy and preference interface will then explain the technologies, providers, purposes and retention periods.

We do not use website or enquiry data to make decisions based solely on automated processing that produce legal or similarly significant effects.

AI-assisted tools may support our creative or operational services. When personal data is involved, we assess the purpose, minimise the data and apply appropriate contractual and technical safeguards. Client project data is handled according to the applicable agreement and, where required, a data processing agreement.

Our services are intended for businesses and adults and are not directed to children under 16. We do not knowingly collect children’s data through this website. If you believe a child has provided data, contact us so we can assess and remove it where appropriate.

Our website may link to third-party websites or platforms. Their operators independently determine how they use personal data. Review their privacy information before providing data to them.

We may update this policy when our services, providers or legal duties change. The current version is published on this page with its revision date. If a change materially affects how we use data already collected, we will take additional steps where required, such as giving direct notice or obtaining consent.

This policy is available in English, Dutch and German. If you notice a difference between the versions, contact us for clarification. Mandatory rights under applicable law remain unaffected.