Privacy Policy

Last updated: March 2026

1. Who We Are

Quantum Security Defence ("QSECDEF", "we", "us") is a UK Limited Company operating as a non-profit membership association. We are the data controller for personal data collected through this website and our membership services.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, organisation, job title, and country when you register for membership or events.
  • Contact data: name, email address, and message content when you use our contact form.
  • Usage data: pages visited, time on site, referral source, and device type. Collected via privacy-respecting analytics (no cross-site tracking).
  • Newsletter data: email address when you subscribe to our newsletter.

3. How We Use Your Data

  • To provide and manage your membership, including access to lectures, events, and the member directory.
  • To respond to enquiries submitted through our contact form.
  • To send newsletters and event invitations you have opted into.
  • To improve our website and services based on aggregated, anonymised usage patterns.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process personal data under the following legal bases (GDPR Article 6):

  • Contract: processing necessary to deliver membership services you have purchased.
  • Legitimate interest: website analytics and service improvement.
  • Consent: newsletter subscriptions and optional marketing communications.

5. Data Retention

We retain personal data for as long as your membership is active, plus 12 months after cancellation. Contact form submissions are retained for 24 months. Analytics data is aggregated and anonymised within 26 months.

6. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Request erasure of your data.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time (for newsletter subscriptions).
  • Lodge a complaint with the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at our contact page.

7. Third-Party Services

We use the following third-party services that may process personal data on our behalf:

  • FormSpark: contact form submissions (EU-hosted).
  • Cloudflare: website hosting and CDN (global network, GDPR-compliant DPA).

8. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. We will not reduce your rights under this policy without your explicit consent.