Privacy Policy

This Privacy Policy applies to personal data collected through the Qontomcrypt website (qontomcrypt.com), specifically via the contact and enquiry form. It does not govern data processed within Qontomcrypt's enterprise software products, which are subject to separate data processing agreements with each customer organisation.

This policy is designed to meet the requirements of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the UAE National Electronic Security Authority (NESA) guidelines, and India's Digital Personal Data Protection Act 2023 (DPDP Act). Where these frameworks impose different obligations, we apply the higher standard.

The data controller for personal data collected through this website is Qontomcrypt, a product of TrustZenX. For all privacy-related enquiries, data subject requests, or concerns, please contact our designated security and privacy contact at the address listed in the Contact section below.

We collect only the personal data you voluntarily provide when submitting our contact or enquiry form. This comprises: your full name; your work email address; your organisation name; your role or job title; and the content of your message or enquiry.

We do not collect sensitive personal data (such as financial information, health data, or government-issued identification numbers) through this website. We do not use cookies for tracking or analytics, and we do not deploy third-party advertising or behavioural tracking technologies on this site.

We process your personal data solely to respond to your enquiry, evaluate whether Qontomcrypt's solutions are a fit for your organisation's requirements, and, where relevant, to schedule a technical briefing or product demonstration.

Under the UAE PDPL, our legal basis for processing is the performance of a contract or pre-contractual steps taken at your request, and our legitimate interest in responding to business enquiries. Under India's DPDP Act 2023, processing is based on your consent, which is given when you voluntarily submit the contact form.

We do not use your data for automated decision-making, profiling, or any purpose other than responding to your enquiry and conducting related business communications.

We retain contact form submissions for a maximum of 24 months from the date of receipt, unless a longer retention period is required to fulfil a contractual obligation or comply with applicable law. After this period, personal data is securely deleted or anonymised.

If you request deletion of your data before this period expires, we will action your request within 30 days, subject to any legal obligations that require us to retain certain records.

We do not sell, rent, or trade your personal data to third parties. Your data may be shared with TrustZenX group entities solely for the purpose of responding to your enquiry and managing the business relationship.

We may share data with trusted service providers who assist us in operating our website and managing communications, under strict contractual obligations that prohibit them from using your data for any other purpose.

If your data is transferred outside the UAE or India, we ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under the applicable data protection law.

Qontomcrypt applies the same rigorous security principles to the protection of website visitor data as we do to our enterprise encryption products. Contact form submissions are transmitted over TLS-encrypted connections and stored in access-controlled systems.

Access to personal data is restricted to authorised personnel on a need-to-know basis. We conduct regular security reviews of our data handling practices in line with ISO/IEC 27001 principles.

Under the UAE PDPL and India's DPDP Act 2023, you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request erasure of your data; withdraw consent at any time (where processing is consent-based); and lodge a complaint with the relevant supervisory authority.

To exercise any of these rights, please contact us using the details in the Contact section below. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing your request.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

For all privacy enquiries, data subject access requests, or concerns about how we handle your personal data, please contact our security and privacy team: