Privacy Policy

1. Who We Are and How to Contact Us

Qevanta Technologies Ltd is an IT consultancy registered in England and Wales under company number 17480518. We operate the website qevantatechnologies.co.uk.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Qevanta Technologies Ltd is the “data controller” for personal data collected through our website and direct communications.

If you have any questions about this policy or how your data is handled, you can email us directly at hello@qevantatechnologies.co.uk or write to our registered office:

Qevanta Technologies Ltd
Office 1906, 85 Dunstall Hill
Wolverhampton, WV6 0SR
United Kingdom

2. What Personal Data We Collect

We believe in data minimization and only collect the personal data that is strictly necessary for our business interactions. We collect:

• Contact Form & Email Submissions: When you contact us or request a consultation, we collect your name, business email address, company name (if provided), and the details of your project message.
• Communication Records: Any ongoing messages, scope discussions, or project requirements you send us by email or during video calls.
• Basic Technical Logs: Standard web server logs (such as IP address, browser type, and page access timestamps) automatically generated when you browse our site, used solely for site security and diagnosing technical errors.

We do not collect sensitive personal data (special category data), financial card numbers, or unnecessary personal identifiers through this website.

3. Why We Collect It

We use your personal data to:

• Respond directly to your project enquiries and technical questions
• Evaluate project feasibility and prepare written proposals covering scope, timeline, and pricing
• Communicate with you throughout project builds and advisory work
• Maintain the security, performance, and stability of our website
• Comply with our statutory accounting and legal obligations under UK law

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interests: To review and respond to business enquiries, communicate with potential and existing clients, and manage our consultancy operations effectively.
• Contractual Steps / Performance of a Contract: To prepare written proposals at your request, agree on scope and pricing, and deliver agreed technical services.
• Legal Obligations: Where UK statutory regulations require us to retain records (such as financial or corporate records).

5. How Long We Retain Your Data

We retain personal data only for as long as needed to fulfill the purpose for which it was collected:

• General Enquiries: Information submitted via our contact form or initial email inquiries that do not proceed to a formal contract is retained for a maximum of 12 months from our last contact, after which it is deleted.
• Contracted Clients: If we enter into a commercial agreement, project records, written scopes, invoices, and payment details are retained for up to 6 years following project completion to comply with UK statutory tax and corporate accounting laws.

6. Sharing Your Data

We never sell, rent, or trade your personal data.

We only share personal data with trusted third-party service providers who act as data processors to help us deliver our services:

• Email & Communication Providers: We use secure business email hosting services to receive, send, and manage client communications.
• Hosting & Infrastructure: Our website is hosted on secure cloud infrastructure providers that process web traffic and server logs.

All our processors are legally bound to protect your data, maintain strict confidentiality, and only process data in accordance with our instructions and applicable UK data protection regulations.

7. International Data Transfers

As an international remote IT consultancy, personal data and project communications may be accessed, stored, or processed by our company personnel and director outside the United Kingdom, including in Pakistan, to deliver our consultancy and engineering services.

Where personal data is transferred or accessed outside the UK, we implement appropriate safeguards in compliance with the UK GDPR and the Data Protection Act 2018 (such as UK International Data Transfer Agreements, standard contractual clauses, and strict technical access controls) to ensure your personal data receives an equivalent level of protection as required under UK data protection law.

8. Your Data Subject Rights

Under the UK GDPR, you have the following rights regarding personal data we hold about you:

• Right of Access: You can request confirmation of whether we hold your personal data and obtain a copy of it.
• Right to Rectification: You can ask us to correct or update any inaccurate or incomplete personal data.
• Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Object: You can object to our processing of your personal data where we rely on legitimate interests.
• Right to Restriction: You can request that we pause the processing of your data while a dispute or accuracy check is resolved.

To exercise any of these rights, simply email us at hello@qevantatechnologies.co.uk. We respond to all requests within one calendar month and free of charge.

9. Right to Complain to the ICO

If you have any questions, concerns, or complaints about how we process your personal data, we encourage you to contact us first at hello@qevantatechnologies.co.uk so that we can resolve your concern promptly.

You also have the right to lodge a complaint at any time with the UK supervisory authority for data protection:

10. Cookies & Tracking

We respect your privacy by default:

• No Advertising or Tracking Cookies: We do not use third-party marketing, advertising, or profiling cookies on our website.
• No Third-Party Analytics Trackers: We do not track you across other websites or sell your browsing data.
• Strictly Functional Storage: Any client-side cookies or storage used are strictly necessary for basic technical functions (such as remembering UI preferences or session state).

You can configure your browser to block or alert you about cookies; however, some parts of the site may not function properly without functional cookies.