Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data on this website is:

Quantum Masters Email: [email protected] Website: quantummasters.rafaelcardoso.co.uk

If you have any questions about how we handle your data, please contact us at the email address above.

2. What Data We Collect

We collect and process the following personal data:

Contact Form: When you use our contact form, we collect your name, email address, and message content. This data is used solely to respond to your enquiry.

Newsletter: If you subscribe to our newsletter, we collect your email address. You can unsubscribe at any time using the link provided in every email.

Booking & Purchases: When you book a session or purchase a product, we collect your name, email address, and payment-related information necessary to process your transaction.

Technical Data: When you visit our website, our servers automatically collect technical information such as your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit. This data is used for security, performance, and statistical purposes.

3. How We Use Your Data

We process your personal data for the following purposes:

To respond to your enquiries submitted via the contact form (legal basis: legitimate interest, Art. 6(1)(f) GDPR).

To send you our newsletter, provided you have given your explicit consent (legal basis: consent, Art. 6(1)(a) GDPR). You may withdraw your consent at any time.

To process bookings and payments for our services and products (legal basis: performance of a contract, Art. 6(1)(b) GDPR).

To ensure the security and proper functioning of our website (legal basis: legitimate interest, Art. 6(1)(f) GDPR).

4. Stripe Payments

We use Stripe, Inc. as our payment processor. When you make a purchase, your payment information (such as credit card details) is transmitted directly to Stripe and is never stored on our servers.

Stripe processes your payment data in accordance with PCI DSS (Payment Card Industry Data Security Standard) requirements. Stripe may transfer data to servers in the United States. Stripe is certified under the EU-US Data Privacy Framework.

For more information, please refer to Stripe's Privacy Policy: https://stripe.com/privacy

5. Cookies

Our website uses cookies to ensure its proper functionality. Cookies are small text files stored on your device by your browser.

Essential Cookies: These are necessary for the website to function correctly, including session management and locale preferences. They do not require your consent.

Payment Cookies: Stripe may set cookies necessary for secure payment processing.

We do not use advertising or tracking cookies. We do not use Google Analytics or similar third-party analytics tools.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact form enquiries: Deleted after 12 months unless a continued business relationship exists.

Newsletter subscriptions: Retained until you unsubscribe.

Payment and booking records: Retained for the duration required by applicable tax and commercial law (typically 6-10 years in Germany).

Server logs: Automatically deleted after 30 days.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of Access (Art. 15 GDPR): You have the right to obtain information about whether and which personal data we process about you.

Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate personal data.

Right to Erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided there are no legal obligations requiring us to retain it.

Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict the processing of your data under certain circumstances.

Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object (Art. 21 GDPR): You may object to the processing of your data based on legitimate interests at any time.

Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.

To exercise any of these rights, please contact us at [email protected].

8. Third Parties

We share your personal data with third parties only when necessary to provide our services:

Stripe, Inc. — Payment processing. Stripe acts as an independent data controller for payment data. See Stripe's privacy policy for details.

Email Service Provider — We use a third-party email service to send newsletters and transactional emails. Your email address is shared with this provider solely for the purpose of delivering emails.

Cloudflare, Inc. — Our website is served through Cloudflare's network for security and performance. Cloudflare may process technical data such as IP addresses.

We do not sell, rent, or trade your personal data to any third party.

9. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Quantum Masters Email: [email protected]

We will respond to your request within 30 days.