Privacy Policy

RIB Quantum Design is operated by RIB QUANTUM DESIGN LTD, a company registered in England and Wales with company number 16894423.

For the purposes of UK data protection law, RIB QUANTUM DESIGN LTD is the controller of personal data processed through this website and our services, unless stated otherwise.

You can contact us about privacy matters at info@ribquantumdesign.com.

Depending on how you use RIB Quantum Design, we may collect and process the following categories of personal data:

• identity and contact data, such as your name, email address, and contact details submitted during checkout or support communication;
• order and transaction data, such as package selection, payment status, receipt number, project ID, amount paid, currency, delivery records, and order timestamps;
• project data, such as bathroom measurements, layout choices, style selections, prompts, design preferences, variation choices, and generation mode information;
• uploaded content, such as bathroom photos, reference images, and other files you choose to provide;
• subscription data, such as email address, subscription source, date submitted, and subscription status;
• technical and usage data, such as IP address, device information, browser type, logs, approximate location from technical data, page interactions, and security events;
• cookie and consent preference data, including cookie choices and settings saved through our cookie banner or preferences tools;
• support and communication data, such as messages, issue reports, and related correspondence.

We use personal data only where we have a valid purpose and lawful basis. The main ways we use data are set out below.

Payments are processed by Stripe or another payment provider we may use in the future. We do not store full card details on our own servers.

Stripe may process payment-related personal data as an independent controller or processor depending on the circumstances. Your use of Stripe payment services may also be subject to Stripe’s own privacy and security practices.

When you submit bathroom details, measurements, prompts, preferences, and optional images, those materials may be processed as part of the design generation workflow.

You should avoid uploading unnecessary personal information. Do not upload confidential documents, images containing unrelated people, sensitive personal information, or anything that is not needed for your bathroom design request.

AI-generated outputs are created from your submitted information and may be stored so we can deliver your results, support your order, investigate issues, and maintain service records.

We use trusted third-party providers to operate, secure, process, and deliver the service. These providers may process personal data on our behalf where necessary.

These may include:

• Amazon Web Services for hosting, file storage, infrastructure, and email delivery systems;
• Stripe for payment processing and payment-related fraud prevention;
• database and hosting services used to store project, order, and delivery records;
• email delivery providers used for transactional messages, receipts, and deliverable notifications;
• analytics, logging, monitoring, or security tools used to maintain and improve the service.

We require service providers to process personal data only where appropriate and with suitable technical, organisational, and contractual safeguards.

Some of our service providers may process personal data outside the UK. Where this happens, we take steps intended to ensure that your personal data receives an appropriate level of protection.

These safeguards may include using providers with appropriate data protection commitments, recognised transfer mechanisms, contractual safeguards, or other measures required by applicable data protection law.

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including service delivery, support, security, accounting, tax, legal compliance, and dispute handling.

• order and payment records may be kept for accounting, tax, and legal record-keeping purposes;
• project and delivery records may be kept for support, order history, fraud prevention, and service improvement;
• uploaded images and generated outputs may be kept for delivery, support, troubleshooting, and service operation;
• subscription records may be kept until you unsubscribe, request deletion, or we no longer need them;
• technical logs may be kept for a shorter period unless needed for security, fraud prevention, or investigation.

Where we no longer need personal data, we may delete, anonymise, or aggregate it.

Subject to applicable law and certain conditions, you may have the right to:

• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete personal data in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to certain types of processing;
• request data portability where applicable;
• withdraw consent where we rely on consent.

To exercise your rights, contact us at info@ribquantumdesign.com. We may need to verify your identity before responding.

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office if you believe your personal data has been handled unlawfully.

We use cookies and similar technologies to run the website, remember your preferences, manage consent, improve performance, analyse usage, and support security.

Our Cookie Policy explains the types of cookies we use and how you can manage your preferences.

You can also update your cookie choices through the cookie settings option available on the website.

If you subscribe for updates, we may store your email address and related subscription information so we can manage your subscription.

We will only send marketing or promotional communications where permitted by law. Where consent is required, we will ask for it. You can unsubscribe or request removal from our subscription records.

We use technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include secure hosting, access controls, database security, payment provider security, encrypted transmission where appropriate, logging, monitoring, and operational controls.

However, no website, network, or digital system can be guaranteed to be completely secure.

The service is intended for adults. You must be at least 18 years old to place an order.

We do not knowingly collect personal data from children for independent use of the service.

Our website, emails, or deliverables may contain links to third-party websites or services. We are not responsible for the privacy practices, content, security, or policies of those third parties.

You should review the privacy information provided by any third-party website or service before submitting personal data to them.

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the revised “Last updated” date.

If we make significant changes, we may provide additional notice where appropriate.

For privacy questions, support requests, legal notices, or to exercise your rights, contact: