Privacy Policy

Quantum Consulting, Unipessoal Lda, tax ID (NIPC) 519640560, with registered office at Avenida Doutor Francisco Sá Carneiro, N.º 5, 2.º C, 2780-283 Oeiras, Portugal ("Qrecovr", a brand of Quantum Consulting), is the controller of the personal data collected through www.qrecovr.com. Privacy contact: qrecovr@gmail.com · +351 211 963 286.

• Data you provide in the contact form: name, company, job title, email, phone, country, subject, annual purchasing volume (optional) and the content of your message.
• Communications data: the content of emails and calls you exchange with us.
• Technical browsing data: IP address, browser and device type, pages visited and date and time of access, logged by our hosting provider for security and operational reasons.
• Website usage data: only if you consent to analytics cookies (see the Cookie Policy).

We do not ask for special categories of data (for example, health or ethnic origin). Please do not include them in your messages.

Purpose	Legal basis (GDPR)
Responding to contact, diagnostic or proposal requests	Steps taken at the data subject's request prior to entering a contract (Art. 6(1)(b)) and legitimate interest in responding to business enquiries (Art. 6(1)(f))
Managing the contractual relationship with clients	Performance of a contract (Art. 6(1)(b))
Complying with legal, accounting and tax obligations	Legal obligation (Art. 6(1)(c))
Sending communications about services and content	Consent (Art. 6(1)(a)), which you may withdraw at any time
Measuring website usage (analytics)	Consent (Art. 6(1)(a))
Measuring campaign results and showing advertising (Google Ads, Meta)	Consent (Art. 6(1)(a))
Keeping the website secure and working	Legitimate interest (Art. 6(1)(f))

• Contact requests that do not lead to a contract: 12 months after the last communication.
• Client data: for the duration of the contract and then for the applicable legal periods (including retention periods for accounting and tax records).
• Marketing communications: until you withdraw consent.
• Technical browsing logs: for the period set by the hosting provider (Vercel). After these periods, data is deleted or anonymized.

We do not sell personal data. We may share it only with:

• Service providers (processors) that process data on our behalf and on our instructions, under a contract complying with Art. 28 GDPR: website hosting (Vercel Inc.), email delivery (email service provider) and, if you consent, usage analytics (Google Analytics) and campaign measurement and advertising (Google Ads and Meta Pixel). Google (Google Ireland Limited) and Meta (Meta Platforms Ireland Limited) may also process this data as independent controllers, under their own privacy policies.
• Public authorities, where required by law.
• Professional advisers (for example, lawyers or accountants), bound by confidentiality, where necessary.

Some providers may process data outside the EEA, notably in the United States. In those cases, the transfer relies on appropriate safeguards under Chapter V GDPR, such as a European Commission adequacy decision (for example, the EU-US Data Privacy Framework, for certified organizations) or standard contractual clauses.

Under the GDPR, you have the right to:

• access your data and obtain a copy;
• rectify inaccurate or incomplete data;
• request erasure of your data;
• restrict processing;
• object to processing based on legitimate interest and, at any time, to processing for marketing;
• receive the data you provided to us in a structured format (portability);
• withdraw consent at any time, without affecting the lawfulness of processing already carried out.

To exercise your rights, contact qrecovr@gmail.com. We reply within one month, extendable in the cases provided for in the GDPR. We may ask for additional information to confirm your identity.

Yes. If you believe your data is not processed lawfully, you can lodge a complaint with the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD): Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal · +351 213 928 400 · geral@cnpd.pt · www.cnpd.pt, or with the supervisory authority of your EU country of residence. We would appreciate the chance to resolve the matter first.

We apply technical and organizational measures appropriate to the risk, such as encrypted connections (HTTPS), access control and confidentiality agreements with those who process data on our behalf.

Data we access during an audit for a client is processed on that client's behalf, under the contract and data processing agreement signed with them. This policy applies only to data collected through the website and business contacts.

The website is intended for businesses and professionals. We do not knowingly collect data from children under 16.

We may update this policy. The version in force is always the one published on this page, with the date of the last update.