Personal information: what, why, who and for how long

1. Definitions

Individual: the person the information describes. Personal information: data identifying a person. APP entity: the platform operated under the Quantum Yellow brand. Processor: a provider handling data on our instructions. Usage data: the traces your visits leave.

2. Personal information collected

At registration: given name, surname, phone and email. At verification: details from your identity document and declared address. In support: the content of your message and our reply. The site serves people aged 18 and over only.

3. Usage data

Recorded per visit: pages viewed, time, device and browser type, IP address. Uses: security, fault diagnosis and aggregated statistics that identify no one.

4. Cookies

Essential cookies keep sessions and preferences alive; analytics cookies run only with your consent. Blocking or deleting cookies breaks nothing except some convenience.

5. Privacy contact

The APP entity is the platform operated under the Quantum Yellow brand, London Circuit 44, Level 2, Canberra City ACT 2601, reachable at [email protected] with the subject "Privacy".

6. Purposes

Account operation and access; KYC/AML verification; support replies; fraud and prohibited-use prevention; legal obligations; and, consent permitting, commercial messages about the platform itself.

7. Legal bases

Service contract performance for account operation; legal obligation for verification and prevention; legitimate interest for security and fraud defence; explicit consent for marketing, revocable anytime via the unsubscribe in every send.

8. Retention

Account data lives while the account does and, after closure, for the legally required period. KYC documents follow AML retention rules. Usage statistics de-identify early. Closing an account cancels no retention duty already born.

9. Disclosure

Recipients: cloud infrastructure, email delivery, analytics and KYC providers (all processors under contract); payment providers; operationally related group companies; and authorities such as AUSTRAC on a valid legal basis. Personal information is never sold for advertising, and international transfers ride the Privacy Act's safeguards.

10. Security

Encryption in transit and at rest, role-based access, audit logging, periodic permission review. If an incident touches your information, notification follows without undue delay with the corrective measures attached.

11. Your rights

Access, correction of inaccurate or incomplete records, and information about disclosures. Written requests to [email protected] are answered within the statutory periods after identity confirmation; access and correction typically inside five business days, and where we miss a date you receive the reason and a new one, never silence. Identity checks before

On the rhythm of requests: access and correction typically complete within five business days, portability within ten, and exclusions follow each category's legal retention clock rather than a single blanket rule, with every extension carrying a reason and a fresh date, because silence is the one response this process is never allowed to give.

release use minimum data already on file, never more than KYC collected.

12. Providers

Cloud, email, analytics and KYC providers operate under processor contracts limiting use to

The provider list stays deliberately short and purpose-bound: cloud infrastructure, email delivery, usage analytics, KYC checks and payment processing, each under a processor contract that forbids own-use of the data, a boundary audited annually rather than merely promised.

On how long each category lives: account basics persist while the account is open plus the statutory tail, KYC documents follow AML retention, support correspondence is kept for two years, and usage statistics de-identify within weeks, a schedule reviewed annually alongside the provider audits so retention never drifts from its stated purpose.

the commissioned purpose, with security standards equal to ours and annual independent verification.

13. Analytics and retargeting

Aggregate measurement only today. Any future retargeting would need prior, clearly notified consent and one-click opt-out; no third-party ad network runs on this site now.

14. Third-party links

Convenience links out, payment providers for instance, land on pages governed by their own policies. This policy covers the Quantum Yellow site and platform.

15. Minors

Service restricted to over-18s. Information about a minor, once identified, is deleted immediately and the account closed; guardians can start that procedure through the privacy contact.

16. Changes and contact

Updates publish here with the current date and material changes notify registered users. Questions: [email protected].

Last updated: 10/2026.