Website forms
Contact, design-partner and investor data-room forms collect the information shown on each form so QVATRICS can respond, evaluate a potential business relationship and manage due-diligence requests. The legal basis is our legitimate interest in responding to business enquiries or taking steps at your request before a contract. Consent wording on the forms confirms that you have seen this notice; it is not used as the legal basis for ordinary business correspondence.
Form submissions are stored in Google Cloud Firestore with an expiry set for about 90 days after submission; Firestore TTL cleanup may occur after the expiry time rather than at the exact moment. If Firestore point-in-time recovery or scheduled backups are enabled, an expired submission may remain in protected backup copies until the configured backup or recovery retention period expires; those copies are not used for ordinary business correspondence. Website notification emails are retained in the designated Microsoft 365 mailbox for up to 90 days and then deleted, unless the enquiry becomes an active commercial, investment or legal relationship and relevant records are transferred to a separately governed business record with its own retention period. Website form contents are not intentionally written into Cloud Logging. Do not submit confidential customer data through a public website form.
Saved solution configurations
If you tick the consent box and choose Save, we store the use cases you select, any additional requirements you type, the required organisation or project reference, the catalogue version and the time of each change. While sharing is on, later changes in the same browser tab update the saved copy; you can pause sharing at any time. Only authorised QVATRICS staff signed in with Microsoft Entra can see saved configurations, and we use them to prepare a proposal and answer your enquiry. If you send an enquiry from a saved configuration, the two are linked. Saved configurations are stored in Google Cloud Firestore and expire about 90 days after the last change. To have one deleted sooner, email info@qvatrics.com with its reference.
The technical demonstration
The PoC uses synthetic records. Do not enter confidential, personal or customer data. Sandbox sessions and their technical action records expire after one hour; routine database cleanup may happen later. Hosting systems also process technical request logs for security and service operation.
Cookies and browser storage
No advertising or third-party analytics are included in this release. The protected commercial workspace uses an essential session cookie. The public PoC uses session storage for its sandbox token; the configurator uses session storage for your selections and, once you save, for the private reference that lets this browser tab update your saved configuration.
Service providers and international processing
Google Cloud provides website hosting and application data services. Microsoft 365 provides QVATRICS business email and identity services. Processing locations depend on the service and configured region. QVATRICS assesses customer-specific residency requirements separately from this public website.
Your rights
Under applicable data-protection law, including the UK GDPR and Qatar’s Personal Data Privacy Protection Law where relevant, you may have rights to request access, correction or deletion and to object to certain processing. Contact info@qvatrics.com. UK concerns may also be raised with the Information Commissioner’s Office.
Contact
QVATRICS Technologies Limited, company 17476301. Elizabeth Suite, 3rd Floor, 207 Regent Street, London, W1B 3HH.
Published version: October 2026. Review this notice when changing forms, analytics, providers, retention or data handling.