Pursuant to the Digital Personal Data Protection Act, 2023 (DPDP Act) and Rules thereunder, QuantumOS X3 (operated by HyperBridge Digital Pvt. Ltd.) provides this notice to inform you of your rights and our obligations as a Data Fiduciary.
Last updated: April 2026 · Effective: January 2025
We collect and process your personal data for the following purposes, each grounded in a lawful basis under the DPDP Act:
| Category | Examples |
|---|---|
| Identity Data | Name, email address, phone number, date of birth |
| Contact Data | Billing address, delivery address, email, phone number |
| Transaction Data | Order history, payment records, refund details |
| Technical Data | IP address, browser type, device identifiers, cookies |
| Usage Data | Browsing history on our platform, search queries, clickstream |
| Communications | Customer support chats, emails, WhatsApp interactions |
Under the DPDP Act 2023, you have the following rights with respect to your personal data:
You have the right to know what personal data we collect, how it is used, and with whom it is shared.
You may request correction of inaccurate or incomplete personal data held by us at any time.
You may request deletion of your personal data when it is no longer necessary for the purpose it was collected.
You have the right to raise grievances with our Data Protection Officer and receive a response within 30 days.
You may nominate another individual to exercise your data rights on your behalf in the event of death or incapacity.
To exercise any of the above rights, write to us at dpo@quantumos.in. We will respond within 30 days of receipt.
We retain personal data only for as long as necessary to fulfil the stated purpose or as required by applicable law (e.g., GST records for 7 years, order data for 5 years). Upon account deletion, personal data is anonymised or erased within 90 days, except where retention is mandated by law.
We primarily process data within India. Where data is transferred outside India (e.g., cloud infrastructure, payment processors), we ensure such transfers comply with the DPDP Act and any applicable government-notified rules on cross-border transfers. We use standard contractual clauses and data processing agreements with all international processors.
Where processing is based on your consent, you may withdraw it at any time through your account settings or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Withdrawal may affect your ability to use certain features of the platform.
If you believe your personal data has been processed in violation of the DPDP Act, or your rights have not been respected, please contact our Grievance Officer.