PRIVACY

Privacy notice

This notice explains how Qubictry collects, uses, shares, and protects personal data for Guild members, partners, and visitors. It stays aligned with the ecosystem-wide commitments published on Qubicweb and Qlutterbox.

Version 1.0. Effective 27 August 2026.

Who we are

  • Qubictry is a services product operated by Qubicbox Limited, which also operates Qubicweb, Qlutterbox, Qubicbox Trust Badge, and E-Fraud Watch. Qubicbox Limited generally acts as controller for direct customer and platform processing, and may act as processor only under a verified agreement with another controller.
  • Registered office: 61 Ondo Street, Irawo, Mile 12, Kosofe, Lagos State, Nigeria.

Information we collect

  • Identity & profile: names, pronouns, business registrations, guild membership history, references, verification artefacts (photo/video, certificates).
  • Contact details: email, phone, WhatsApp handles, preferred messaging channels for referrals and bookings.
  • Portfolio & inspection media: project descriptions, photos, videos, diagnostic logs, testimonials, dispute evidence, restitution outcomes.
  • Payments & referrals: referral IDs, invoice references, protected payment IDs when work transitions into Qlutterbox, guild payouts, leaderboard analytics.
  • Technical telemetry: device fingerprints, IP addresses, session IDs, MFA events, TrustOps audit logs, rate-limiting fingerprints.

Purposes & lawful bases

  • Contract: onboarding, publishing profiles, routing referrals, powering Qlutterbox protected payment, handling disputes, issuing guild scorecards.
  • Legal obligation: meeting a specific applicable legal, tax, payment, consumer-protection, or preservation requirement where it applies.
  • Legitimate interest: preventing fraud, protecting the directory, sharing trust telemetry with Qubicweb/Qlutterbox, and improving moderation accuracy. Assessments are reviewed annually.
  • Consent: optional marketing spotlights, testimonials, saved searches, or sharing anonymised insights with partners.

Retention

  • Guild dossiers: duration of membership plus 5 years for audit and restitution.
  • Portfolio assets & testimonials: retained while the Guild member is active or until removed by request.
  • Dispute & complaint records: 5 years after resolution.
  • Evidence uploads: 24 months unless legal holds apply, then securely deleted from primary and backup storage.
  • Analytics & telemetry: 24 months, aggregated thereafter.

International transfers

  • Some approved providers may process data outside Nigeria. We assess applicable transfer requirements and safeguards before relying on a cross-border transfer, and do not represent an unverified country or transfer mechanism as current fact.

Security controls

  • AppShell-backed access control with MFA for guild admins, TrustOps, and reviewers.
  • Attributable audit records and reviewable exceptions protect material referrals, rights requests, payouts, and listing changes.
  • Evidence access is restricted and material evidence actions are recorded. Additional sanitisation applies where the relevant workflow supports it.
  • Rate limiting, abuse prevention, and incident procedures are applied according to the affected workflow and risk.

Sharing & processors

  • Approved hosting, database, storage, communications, monitoring, and security providers receive only the data needed for their service. Provider and region details are verified before being represented as current.
  • Ecosystem partners: Qlutterbox (protected payment), Qubicweb (trust overlays), and the Qubicbox Trust Badge service when necessary to fulfil your request.
  • Lawful disclosures: only when legally compelled or necessary to prevent imminent harm. Every disclosure is logged in immutable TrustOps AuditLog stores.

Your rights

  • Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent without affecting prior lawful processing.
  • Right to complain to the Nigeria Data Protection Commission (NDPC) or your local EU supervisory authority.
  • We do not run solely automated decisions with legal effects; human review remains part of every decision ladder.

How to exercise your rights

  • Email privacy@qubicbox.com with the subject “Data Subject Request” and include your registered email or referral reference. We acknowledge within one working day and fulfil within 30 days (extendable by 15 days for complex cases).
  • Registered office: Qubicbox Limited, 61 Ondo Street, Irawo, Mile 12, Kosofe, Lagos State, Nigeria. Telephone: +234 1 700 2100.

Updates

  • We review this notice whenever regulations, processors, or product scope change. Updated versions appear here with a new revision date.
  • Latest revision: 27 August 2026.