Privacy policy

This policy explains what personal data is collected through qubitli.com, how it is used, who it is shared with and what you can do about it. It is written to be understood: if anything is unclear, write to us and we will explain.

1. Who processes your data

The data controller is Consulting Everest LLC, based in Albuquerque, New Mexico (United States), a company providing software consultancy, audit and development services in Europe and the United States.

Contact channel for any matter concerning your data: [email protected]. This is also the address for exercising the rights described below, and requests received there are handled.

2. What data we collect

Only what you provide and the minimum generated by the visit itself. There is no user registration, profiling or purchasing.

Contact form: your name and either an email address or phone number —one is enough— together with your message.
WhatsApp form: the phone number and message you wish to send, before opening the conversation.
Technical submission data: the IP address used to submit the form, the page it was sent from and the date. These are recorded to limit automated submissions and prevent spam.
Usage analytics: page views, approximate origin and aggregate behaviour, only if you accept analytics cookies.
Advertising measurement: if you arrived from an ad and accept cookies, the click identifier and whether the visit ended in a quote request.

We do not request or want special-category data —health, ideology, trade union membership and similar information— so please do not include it in your message. You do not need to send confidential business documents for an initial conversation either.

3. How we use data and the legal basis

Answering your enquiry and preparing a quote. Legal basis: taking pre-contractual steps at your request (Article 6(1)(b) of the GDPR).
Maintaining contact during the business relationship and responding to matters arising afterwards. Legal basis: performance of a contract, if one is entered into (Article 6(1)(b)).
Protecting the form against automated abuse. Legal basis: the legitimate interest in keeping an open contact channel usable (Article 6(1)(f)).
Measuring how the website is used to improve it. Legal basis: your consent, given through the cookie notice and withdrawable at any time (Article 6(1)(a)).
Knowing which advertisements work and avoiding further spend on those that do not. Legal basis: your consent, the same as in the cookie notice (Article 6(1)(a)).

We do not make automated decisions affecting you and will not send commercial communications you have not requested. If you accept cookies, Google may link your visit to the advertisement you arrived through and show you other ads of ours on its platforms; if you reject them, it will not. In neither case is your contact record or message content shared from this website.

4. How long data is kept

Enquiries that do not lead to a contract: for as long as needed to handle them, then up to one year in case you resume the conversation. After that, they are deleted.
Contractual relationships: for the duration of the relationship and afterwards for the applicable legal limitation periods and tax and accounting retention periods.
Technical submission logs: for the time strictly necessary to control abuse.
Analytics and advertising data: according to the retention periods configured in each tool, listed in the cookie policy for each cookie.

5. Who else sees data

We do not sell, rent or disclose personal data to third parties for their own purposes. We do work with suppliers who process it on our behalf and under our instructions, under data processing agreements:

The website and email hosting provider.
Google, as an audience measurement and advertising provider, only if you accept cookies.
Where relevant, professional advisers and administrative service providers subject to confidentiality obligations.

Data may also be disclosed to public authorities where legally required.

6. International transfers

The owner operates in Europe and the United States, and some providers mentioned may process data outside the European Economic Area. In those cases, transfers rely on a safeguard under Chapter V of the GDPR: a European Commission adequacy decision, standard contractual clauses or the adequacy framework applicable to the destination country.

You can request information about the specific safeguards used by writing to the email address above.

7. Your rights

You may exercise, at any time and free of charge, your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw any consent given, without affecting the lawfulness of earlier processing.

To do so, write to [email protected] stating which right you wish to exercise. We may ask you to verify your identity solely to prevent a third party accessing your data by impersonating you.

If you believe we have not handled your request properly, you have the right to complain to the competent supervisory authority in your country of residence.

8. If you live in the United States

Regardless of your state of residence, and within the terms of the law applicable to you, you may ask what personal data we hold about you, request its correction or deletion and object to its sharing.

We do not sell personal data. Nobody pays us for it, and we do not disclose it in exchange for anything.

There is sharing for cross-context advertising as defined by state laws: if you accept cookies, Google may use your visit to show our advertisements on other websites. That is why it is disabled by default for everyone, wherever you live: nothing happens until you expressly authorise it, and the disables it again whenever you wish. That is the opt-out mechanism.

If your browser sends the Global Privacy Controlsignal, we respect it without any further action from you: advertising remains disabled even if the cookie notice is accepted. We do not discriminate against anyone for exercising their rights.

9. Security

The website is served over an encrypted connection, access to data is limited to those who need it to handle your enquiry, and reasonable technical and organisational safeguards are applied. No system is infallible: if a breach poses a risk to your rights, notification will be made as required by law.

10. Children

The website is intended for businesses and professionals. It is not designed for children, and we do not knowingly collect their data. If you believe we have received a child's data, write to us and we will delete it.

11. Changes to this policy

This policy may be updated if processing activities or legislation change. The current version is always the one published on this page, with its update date. If a substantial change affects you, notice will be given prominently on the website.