Privacy Notice - Quantum Lab

Effective from: August 25, 2025

1) Identity and contact of the person in charge

Responsible: [Quantum Lab S.A. de C.V.] ("Quantum Lab")
Address: Puerto Vallarta, Mexico
Privacy Mail (DPO): info@quantumlab.mx
Phone: +52 33 1798 2434
Sites covered: https://quantumlab.mx and related subdomains.

2) Scope and regulatory basis

This Notice applies to the processing of personal data of site visitors, physicians, distributors, suppliers y commercial contacts of Quantum Lab. It is governed by:

  • LFPDPPP (Mexico) and its Regulations.
  • GDPR (EU) and local regulations applicable in the EEA/UK.
  • CCPA/CPRA (California), where applicable.

Critical approach: This Notice does not provide additional safeguards beyond those required by law. Where there is a regulatory conflict, the most protective regulation for the holder shall apply, as appropriate.

3) Personal data we may process

  • Identification and contact: first name, last name, institution/company, position, specialty, professional license, country, mail, telephone, shipping/billing address.
  • Transactional and logistical data: products quoted and purchased, volumes, commercial conditions, cold chain requirementsshipping waybills, customs clearance.
  • Support/quality data: lot number, certificates (CoA), quality claims, warranties.
  • Technical and navigation data: IP, cookie identifiers, device/browser, pages visited, referral sources, campaigns.
  • Marketing preferences: areas of scientific interest, language, communication channels.

We do not knowingly collect clinical data from patients. If we mistakenly receive sensitive information, it will be removed or anonymized in accordance with the law.

4) Purposes of processing

Primary (necessary) purposes:
a) Responding to requests for information, quotations and professional contact.
b) Verify the professional suitability (e.g. physicians/distributors).
c) Formalize and execute commercial and supply relationships.
d) Comply with legal, tax, customs and other obligations of traceability by lot.
e) Operating logistics and cold chainhandling, risk or product recall notifications if applicable.
f) Provide technical-scientific and after-sales support.
g) Site security, fraud prevention and incident management.

Secondary purposes (opt-in):
h) Send technical content, updates, event invitations and marketing communications.
i) Elaborate non-intrusive segmentations to improve content relevance.

You can deny or revoke your consent for secondary purposes at any time (see section 10).

5) Basis and grounds for lawfulness (GDPR)

  • Execution of contract (Art. 6.1.b GDPR): order management, logistics, invoicing, support.
  • Legitimate interest (Art. 6.1.f): security, fraud prevention, improvement of B2B services, batch quality.
  • Legal obligation (Art. 6.1.c): prosecutors/customers, attention of authorities.
  • Consent (Art. 6.1.a): non-essential cookies, marketing.

6) Data origin

  • Directly from the owner (web forms [Elementor/GoHighLevel iFrame].telephone, telephone, mail).
  • Automated (cookies/tags, e.g. [Google Analytics 4, Google Tag Manager]).
  • Legitimate third parties: [distributors, B2B marketplaces, partners]..
  • Professional public sources (physician/college directories), where appropriate.

7) Transfers and processors (processors)

We share data with suppliers acting on behalf of Quantum Lab through DPA contracts and appropriate security measures and international transfers (e.g. Standard Contractual Clauses). Examples:

  • Infrastructure and hosting: [AWS/Azure/Google Cloud]..
  • CRM and communication: [Go High Level], [Google Workspace/Microsoft 365].
  • Analytics and marketing: [Google Analytics/Ads, Meta] (cookies/ID in your browser).
  • Payments and invoicing: [payment provider] [payment provider.
  • Logistics/customs: parcels and customs brokers.

No we sell your personal information. For California residents, we do not "sell or share" data for advertising. cross-context under the terms of the CPRA, unless we so indicate and provide opt-out mechanisms.

8) Conservation

We apply minimization and limitation of the term:

  • Leads and inquiries: 24-36 months since the last effective contact.
  • Contracts/invoices/customs: 5-10 years (legal obligations).
  • Batch support/quality: product shelf life + legal period applicable.
    Upon expiration of the deadlines, we suppress or anonymize the data.

9) Security

Measures administrative, physical and technical to protect confidentiality, integrity and availability; access management, encryption in transit and at rest when reasonable, segregation of environments, vendor control. If a security breachWe will notify you in accordance with applicable law.

10) Rights of the holder

Mexico (ARCO): Access, Rectification, Cancellation and Opposition; and revocation of consent.
EU/EEE/UK (GDPR): access, rectification, suppression, limitation, portability and opposition; revocation of consent.
California (CCPA/CPRA): know, correct, eliminate, limit use of sensitive personal information y opt-out of "sale/sharing".

How to exercise them: send request to info@quantumlab.mx with identification and details of your request. We will respond within legal deadlines. You can also opt-out marketing information in each mailing (unsubscribe) or by mail to the DPO.
Authorities: Mexico (INAI), EU (local data protection authority), California (CPPA).

11) Cookies and similar technologies

We use our own and third-party cookies for the following purposes technicians, analytics and, with your consent, advertising. You can set preferences in the cookie banner and in your browser settings. See the [Cookie Policy] for detail of types, purposes and retention.

12) Minors

Our sites and materials are directed to professionals and institutions. We do not knowingly collect information from minors. If you believe that a minor has provided us with information, please contact us to delete it.

13) International transfers

When we transfer data outside of Mexico/EEE/UK (e.g. to [United States/Canada/other].), we will apply appropriate safeguards (SCC, supplementary measures, impact assessments) or we will verify decisions of adequacy where they exist.

14) Notice Updates

We may update this Notice to reflect legal or operational changes. The current version will be posted on [https://quantumlab.mx/aviso-de-privacidad] with the date of update. Material changes will be communicated by reasonable means.

15) Contact

For questions about this Notice or the treatment of your data: info@quantumlab.mx