Legal

Privacy Policy

Effective date: 13 October 2026 · Last updated: 13 October 2026

1. Who we are

LoopQ.si is a brand of [Company legal name], a company registered in [country] under company number [registration number], with its registered office at [registered address] ("LoopQ.si", "we", "us").

For the personal data described in this policy, we are the data controller (in Malaysia, the "data user"). You can reach us about privacy at hello@loopq.si.

2. What this policy covers

This policy explains how we handle personal data when you:

• visit loopq.si or loopquantum.si;
• contact us through the website form or by email to hello@loopq.si;
• send us sample documents or datasets at in@loopq.si to evaluate a pilot.

It does not cover data that our customers process using the LoopQ.si platform. That processing is governed by the customer's agreement with us, under which the customer is the controller and we act only on its instructions. Where the platform is installed on a customer's own infrastructure, that data stays with the customer.

3. What we collect

Information you give us

• Enquiries: your name, company, work email, country, the currency you selected, and anything you write in your message.
• Correspondence: emails you send us and our replies, including your signature details.
• Datasets: files you send to in@loopq.si (see section 4).

Information collected automatically

• Server logs: our hosting provider records technical data for each request, such as IP address, browser type, the page requested and the time. These logs are used for security and to keep the site running.
• Web fonts: pages load typefaces from Google Fonts, so your browser sends your IP address to Google when a page loads.
• Preference stored on your device: if you choose a currency, the site saves that choice in your browser's local storage (key loopq.currency). It stays on your device and is never sent to us. You can clear it in your browser settings.

We do not use analytics, advertising or tracking cookies, and we do not build profiles of visitors.

The contact form does not send anything to a server. It opens your own email app with a pre-filled message, and nothing reaches us until you press send.

4. Datasets you send us

Please send samples or anonymised extracts only. Do not email production data, customer records, health information or other sensitive personal data. If a pilot needs real data, we arrange a secure transfer straight into your isolated sandbox under a written agreement.

If a dataset you send does contain personal data:

• we use it only to assess and scope a pilot for you, and to run that pilot if you go ahead;
• we never use it to train models for anyone else, and never sell or publish it;
• only the people working on your evaluation can access it;
• we delete it within [30] days if no pilot goes ahead, or when the pilot ends unless we agree otherwise in writing.

By sending a dataset, you confirm that you are entitled to share it with us for this purpose, including any notices or consents your own law requires.

5. How and why we use it

Where the law relies on consent (for example under Malaysia's PDPA), you give it by sending us the information for the purposes described here, and you can withdraw it at any time.

6. Who we share it with

We do not sell personal data. We share it only with:

• Service providers who process it for us under contract: website hosting (Hostinger), email hosting ([email provider]) and, during a pilot, the infrastructure provider hosting your sandbox ([cloud / GPU provider]), unless the pilot runs on your own hardware.
• Google, which serves the web fonts and receives your IP address as described in section 3.
• Professional advisers, such as lawyers and auditors, under confidentiality duties.
• Authorities, where the law requires it.
• A successor business, if all or part of our business is sold or reorganised, under the same protections.

7. International transfers

We work with customers in several countries, and our service providers may process data outside your country. When we transfer personal data across borders, we use the safeguards your law requires. These include standard contractual clauses (or the UK's equivalent) for data from the EU or UK, and the conditions for transfers under Malaysia's PDPA and the other laws listed in section 11. Ask us for a copy of the relevant safeguard.

8. How long we keep it

• Enquiries and correspondence that don't lead to a contract: [24 months] after our last contact.
• Customer records, quotes and invoices: as long as accounting and tax law requires, typically [7 years].
• Datasets: as set out in section 4.
• Server logs: kept by our hosting provider for up to [30 days].

9. Security

The website is served only over HTTPS. Access to enquiries and datasets is limited to the people who need it, protected by strong authentication, and logged. Pilot sandboxes are isolated per customer and encrypted with per-tenant keys. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.

10. Your rights

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is inaccurate or incomplete;
• delete your data, or limit how we use it;
• stop using it for direct marketing, or where we rely on legitimate interests;
• send your data to you or another organisation in a portable format;
• withdraw consent you gave, without affecting earlier processing.

Email hello@loopq.si with the subject "Privacy request". We may need to verify your identity, and we reply within the time your law sets, typically within one month. You can also complain to your data protection authority (see section 11).

11. Regional information

EU and UK representatives. If the law requires us to appoint a representative in the EU or UK, their details will appear here: [representative, if any].

Malaysia. A Bahasa Malaysia version of this notice is available on request at hello@loopq.si [or link the Malay version here]. If there is any inconsistency, the [English] version prevails.

12. Children

This website and our services are for businesses. They are not directed at anyone under 18, and we do not knowingly collect children's personal data.

13. Changes to this policy

We may update this policy as our services or the law change. We will post the new version here with a new "last updated" date, and tell customers directly about significant changes.

14. Contact us

[Company legal name], [registered address]
Email: hello@loopq.si
Data protection officer: [name, or remove this line if not appointed]