Legal
Privacy Policy
Plain English summary: We only collect information you choose to give us. We use it to contact you about your enquiry. We never sell your data. You can ask us to delete it at any time.
1. Who we are
Quantum Leaps is a specialist recruitment agency based in Mumbai, India. We hire for marketing, creative, design and technology teams across India.
For the purposes of data protection law, Quantum Leaps is the data controller of your personal information.
- Email: contact@qleaps.in
- Phone: +91 99308 22894
- Address: Mumbai, India
2. What data we collect
We collect the following personal data when you submit the contact form on our website:
- Name — to address you correctly
- Email address — to respond to your enquiry
- Message content — to understand your request
- Consent record — that you agreed to be contacted
- Submission timestamp and IP address — for security and fraud prevention
We also use Cloudflare Turnstile on our form to prevent spam. Cloudflare processes minimal signals to verify you are human. No user data is stored or shared beyond this verification. See Cloudflare's privacy policy.
3. Why we collect it
We process your personal data for the following purposes:
- To respond to your enquiry — legal basis: legitimate interest / contract
- To send you relevant opportunities or updates — legal basis: your explicit consent (the checkbox on our form)
- To prevent fraud and spam — legal basis: legitimate interest
4. How we use your data
We will use your name and email to:
- Respond to your message, typically within 2 business days
- Contact you about relevant roles or hiring opportunities (if you consented)
- Send an automated confirmation email of your submission
We will never:
- Sell your data to third parties
- Share it with other recruiters or job platforms without your consent
- Use it for any purpose unrelated to your original enquiry
5. Who we share data with
To operate our website and send you emails, we use the following third-party services:
- Resend — email delivery (privacy policy)
- Netlify — website hosting and serverless functions (privacy policy)
- Cloudflare — spam protection (privacy policy)
All processors are instructed to handle data only on our behalf and in accordance with this policy.
6. How long we keep your data
We retain enquiry data for a maximum of 2 years, after which it is deleted. If you ask us to delete your data, we will do so within 30 days.
7. Your rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data
- Withdraw consent — opt out of marketing at any time
- Object — to processing based on legitimate interest
- Portability — receive your data in a structured format
To exercise any right, email us at contact@qleaps.in. We will respond within 30 days.
8. Marketing and unsubscribing
If you consented to marketing communications, you can withdraw consent at any time by:
- Clicking the unsubscribe link in any email we send you
- Emailing us at contact@qleaps.in with the subject "Unsubscribe"
Withdrawal of consent does not affect the lawfulness of processing before withdrawal.
9. Cookies
Our website does not use analytics cookies or tracking cookies. The only cookie set is by Cloudflare Turnstile for security purposes (essential, short-lived).
10. Security
We use HTTPS (TLS) on all pages. Our serverless function validates and sanitises all inputs before processing. API keys are stored as environment variables and never exposed client-side.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect when changes were made. Significant changes will be communicated by email if we have your contact details.
12. Contact
Questions about this policy? Email contact@qleaps.in or call +91 99308 22894.