Privacy in plain English.

Quantum Flow Automation is a UK business based in Burnley, Lancashire. "We", "our", and "us" refer to Quantum Flow Automation throughout this policy. The data controller for this site is Quantum Flow Automation. You can reach us at info@quantumflowautomation.ai for any privacy question.

We only collect what's needed to run this site and respond when you reach out. · Contact details — name, email, company name, and the message you send via the contact form on /contact or the email link in the footer. · Booking details — when you book a call via the embedded Calendly widget on /contact, Calendly collects the information you provide (name, email, calendar slot). Calendly is the data controller for that interaction; their privacy policy applies. · Analytics & advertising — if you accept the cookie banner, we use Google Analytics 4 and Google Ads (loaded via Google Tag Manager) to measure site usage and advertising performance, alongside Vercel Analytics for aggregate page views. These may set cookies and share data with Google to measure conversions and, where relevant, show you ads for our services. We operate Google Consent Mode, so no analytics or advertising cookies are set before you accept. If you decline, none of these load. · Consent preference — your accept/decline choice is stored in your browser's localStorage under the key "qfa-consent". This stays on your device and is never sent to us.

· To reply to enquiries and book calls (legal basis: legitimate interest in operating the business and your explicit request). · To understand which pages help and which don't, so we can improve the site (legal basis: your consent, given via the cookie banner). · To meet legal and accounting obligations once we work together (legal basis: contract / legal obligation). We never sell your data. With your consent we use Google's analytics and advertising tools to measure and improve our marketing, which may include showing you ads for our services; you can withdraw consent at any time via the cookie banner.

· Contact form / email enquiries: up to 24 months after the last interaction, unless you ask us to delete sooner. · Active client records: for the duration of the engagement plus six years, to meet UK accounting requirements. · Anonymous analytics: aggregated and retained as long as our Vercel project exists; no individual records. · Consent preference: stays in your browser until you clear it.

· Email — Google Workspace. · Booking — Calendly. · Analytics & advertising — Google (Analytics, Ads, Tag Manager) and Vercel. · Hosting — Vercel. · AI inference (when a workflow runs against an installed AI OS) — Anthropic, via the Claude API. Anthropic does not train on data submitted through their API by default. All of these are GDPR-compliant providers with appropriate transfer mechanisms in place. Analytics and advertising tools load only with your consent.

Under UK GDPR you can ask us to: · Access the personal data we hold about you. · Correct anything inaccurate. · Delete your data. · Restrict or object to processing. · Receive a copy of your data in a portable format. · Withdraw consent at any time (clear localStorage to reset the cookie banner). Email info@quantumflowautomation.ai to exercise any of these. We'll respond within 30 days. If you're unhappy with our response you can complain to the ICO at ico.org.uk.

We update this policy when we add new tools or change how we handle data. Material changes get a fresh "last updated" date at the top of the page.