This Privacy Policy is issued jointly by QNTMEX LTD, a private company limited by shares incorporated and registered in England and Wales under company number 17078069, whose registered office is situate at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, and Quantum EX s.r.o., a limited liability company incorporated and registered in the Czech Republic under identification number (IČO) 21920460, whose registered office is situate at Cimburkova 916/8, Žižkov, 130 00 Prague 3, Czech Republic (each a "Group Company" and together the "QNTMEX Group", "we", "us" or "our").
The Group Companies are under common ownership and control. As between them, QNTMEX LTD develops, publishes and maintains the wallet software and operates qntmex.com, and Quantum EX s.r.o. acts as controller in respect of personal data processed by means of the Services. The Group Companies are joint controllers within the meaning of Article 26 of the UK General Data Protection Regulation and Article 26 of Regulation (EU) 2016/679 in respect of that processing, and a data subject may exercise the rights conferred by Section 11 against either Group Company.
The Terms of Service governing use of the Services are published at https://qntmex.com/terms and are issued by the same two companies.
Quantum EX s.r.o. ("Company", "we", "us", or "our") is a limited liability company incorporated under the laws of the Czech Republic, with its registered office at Cimburkova 916/8, Žižkov, 130 00 Prague 3, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 408553. The Company was established on 13 August 2024 and is assigned Identification Number (IČO): 21920460.
We develop, publish and maintain non-custodial digital asset wallet software and related technology services (collectively, the "Services"). We do not operate a crypto-asset exchange, do not act as counterparty to any transaction, and do not hold, control or have access to user funds, digital assets or private keys at any time.
Neither Group Company holds authorisation as a crypto-asset service provider under Regulation (EU) 2023/1114 (MiCA), is registered as a cryptoasset business under the UK Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, or is authorised or regulated by the UK Financial Conduct Authority or any EU financial supervisory authority. We maintain an internal AML/CFT policy proportionate to our activities as a supplier of non-custodial software, and we comply with such obligations under Act No. 253/2008 Coll. as apply to us.
Please note: Fiat currency services (bank transfers, card payments, and fiat on/off ramp) are not currently available on our Platform. This Policy will be updated prior to the launch of any fiat-related services.
Quantum EX s.r.o. is the data controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 (GDPR) for all personal data processed in connection with our services.
This Privacy Policy applies to all personal data we collect and process when you:
This Policy does not apply to third-party websites, wallets, blockchain networks, or services accessible via links from our Platform. We encourage you to review the privacy policies of any third-party services you use.
Non-custodial wallet software allowing users to hold, send and receive supported cryptocurrencies and digital tokens. Private keys are generated and stored locally on the user's own device. They are never transmitted to us, never held by us, and never held by any third party on our behalf. We cannot access, freeze, move or recover a user's digital assets, and we cannot restore access to a wallet if the user loses their recovery phrase.
An interface within the wallet by means of which a user may request an exchange (swap) of one digital asset for another. We do not operate an exchange, do not quote prices on our own account and do not execute swaps. Swaps are quoted and executed by independent third-party exchange providers, and the user's digital assets pass directly from the user's own wallet to that provider without being held or routed by us. Each swap is a separate contract between the user and that provider, subject to its own terms and its own AML/KYC policy.
We do not operate a peer-to-peer marketplace, do not match users with one another, do not provide escrow, and do not provide dispute resolution between traders. Any P2P activity conducted by a Group Company is carried out on its own account and with its own capital on third-party venues, in its own name and not as a service to users of the Services.
Not yet available: Fiat currency deposits, withdrawals, bank transfers, card payments, or any fiat on/off ramp services. This Policy will be revised before any such services are launched.
We process your personal data only where we have a valid legal basis under Article 6 GDPR:
| Purpose | Legal Basis |
|---|---|
| Account registration & wallet provisioning | Art. 6(1)(b) – Performance of a contract |
| Transmitting a swap request to a third-party exchange provider | Art. 6(1)(b) – Performance of a contract |
| AML/KYT wallet-address screening requested by the user | Art. 6(1)(b) – Performance of a contract |
| User identity verification | Art. 6(1)(c) – Legal obligation (Act No. 253/2008 Coll.; EU virtual asset services regulation) |
| Transaction monitoring & fraud prevention | Art. 6(1)(c) & (f) – Legal obligation & Legitimate interest |
| Dispute resolution (P2P) | Art. 6(1)(b) & (f) – Contract performance & Legitimate interest |
| Platform security & abuse prevention | Art. 6(1)(f) – Legitimate interest |
| Analytics & platform improvement | Art. 6(1)(f) – Legitimate interest |
| Marketing & personalisation (opt-in only) | Art. 6(1)(a) – Consent |
| Responding to regulatory or legal requests | Art. 6(1)(c) – Legal obligation |
Where we rely on legitimate interests, we have conducted a balancing test and concluded our interests do not override your fundamental rights and freedoms. You may request details by contacting exchange@qntmex.com.
Scope of this section. Use of the non-custodial wallet requires no account and no identity verification, and the categories at 5.1 and 5.2 are not collected from wallet users. They are processed only where you deal with us in a capacity that requires verification — for example as a corporate counterparty, supplier or contractor — or where a third-party exchange provider or platform operator collects them from you directly under its own policy, in which case that party, and not we, is the controller of that data.
We use your identity and contact data to create and manage your account, provision your cryptocurrency wallet, authenticate your identity on login, and enable you to send, receive, and store digital assets.
We use your account data and transaction data to match buy and sell orders, execute cryptocurrency swaps, maintain accurate trading records, and provide you with transaction confirmations and history.
Where you contact us, we use your communication logs to answer your enquiry, to investigate a reported issue and to maintain the security and integrity of the Services. We do not operate a marketplace, an escrow mechanism or a dispute-resolution process between traders.
We do not require users of the non-custodial wallet to open an account or to verify their identity, and in the ordinary course we do not carry out customer due diligence on them. Where an obligation under Act No. 253/2008 Coll. applies to us, we discharge it, including screening our own business relationships and counterparties against sanctions lists and reporting to the Czech Financial Analytical Office (FAÚ) where legally required. Identity verification, transaction monitoring and Travel Rule obligations in respect of a swap are matters for the third-party exchange provider executing it.
We analyse transaction patterns, login behaviour, and device data to detect and prevent fraudulent activity, unauthorised account access, wash trading, and other abusive conduct on our Platform.
In the event of a P2P trade dispute, we may access and review communications, transaction records, and trade data to investigate and resolve the matter fairly.
We may process your data to comply with court orders, regulatory inquiries, and obligations under applicable Czech and EU law, including reporting obligations to the Czech National Bank (ČNB) and FAÚ.
Only with your prior, freely given, and specific consent will we send you product updates, market news, or promotional offers. You may withdraw consent at any time by clicking "Unsubscribe" in any communication or contacting exchange@qntmex.com.
We use aggregated and pseudonymised usage data to understand how our Platform is used, identify technical issues, and improve our services. This processing is based on our legitimate interests and does not involve profiling that produces legal or significant effects on you.
We do not sell, rent, or trade your personal data to third parties. We may disclose your data only in the following circumstances:
Third-party providers used to conduct identity verification, liveness checks, sanctions screening, and PEP checks, operating under data processing agreements compliant with Art. 28 GDPR.
We use blockchain analytics tools to monitor on-chain activity associated with your wallet addresses for regulatory compliance purposes.
Transfers you initiate from your own wallet are made by you directly on a public blockchain, and we transmit no originator or beneficiary information in respect of them. Where you request a swap, the third-party exchange provider that executes it is the party subject to Regulation (EU) 2023/1113 (the Travel Rule) in respect of that transfer, and it discharges any such obligation under its own policies. It may require identity information from you directly as a condition of processing your transaction.
Hosting, cloud storage, cybersecurity, and infrastructure providers supporting the operation of our Platform, all bound by data processing agreements.
Professional advisors bound by statutory or contractual confidentiality obligations.
Where legally required, we will disclose data to the FAÚ, ČNB, Czech Police, courts, or other competent authorities. We will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of our business, your personal data may be transferred to a successor entity. We will notify you in advance and ensure appropriate protections remain in place.
Our primary operations and data storage are located within the European Economic Area (EEA). Where data is transferred to countries outside the EEA, we ensure adequate safeguards are in place, including:
You may request details of the safeguards applicable to any specific transfer by contacting exchange@qntmex.com.
| Data Category | Retention Period |
|---|---|
| Verification records (identity documents, screening results) | 10 years from end of business relationship (Act No. 253/2008 Coll.) |
| Wallet & transaction records | 10 years (AML Act); 5 years (Accounting Act No. 563/1991 Coll.) |
| P2P trade records (including communications) | 5 years from trade completion |
| Account & contractual data | Duration of relationship + 5 years |
| Dispute records | 5 years from resolution |
| Support communications | 3 years from resolution |
| Marketing data (consent-based) | Until consent is withdrawn |
| Technical & access logs | 12 months |
| Analytics data (pseudonymised) | 24 months |
| Cookie data (analytics) | 13 months |
Upon expiry of the applicable retention period, data is securely and irreversibly deleted or anonymised in accordance with our internal Data Lifecycle Policy.
Our website and Platform use cookies and similar tracking technologies. We categorise these as follows:
You can review and manage your cookie preferences at any time via our Cookie Preference Centre accessible in the footer of our website. We do not use cookies to build profiles for sale to third-party advertisers. Our cookie practices comply with Act No. 127/2005 Coll. on Electronic Communications and the GDPR.
As a data subject residing in the EU/EEA, you have the following rights under Chapter III of the GDPR:
To exercise any of these rights, please submit a written request to exchange@qntmex.com. We will respond within 30 calendar days.
We apply technical and organisational security measures in accordance with Art. 32 GDPR, including:
Notwithstanding the above, no system is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and private keys.
Our Platform and services are not intended for, and may not be used by, individuals under the age of 18 years. We do not knowingly collect or process personal data from minors. If we discover that personal data from a person under the age of 18 has been collected, we will delete it promptly. If you have reason to believe a minor has submitted personal data to us, please contact exchange@qntmex.com immediately.
We may update this Privacy Policy periodically to reflect changes in our services, legal obligations, or data processing practices. When we make material changes, we will:
The "Last Revised" date at the top of this Policy indicates when it was most recently updated. Your continued use of our Platform after notification of changes constitutes your acknowledgement of the updated Policy.
Data Protection Officer (DPO)
Email: exchange@qntmex.com
Address: Cimburkova 916/8, Žižkov, 130 00 Prague 3, Czech Republic
Registered Company Details
Quantum EX s.r.o. · IČO: 21920460
File No. C 408553, Municipal Court in Prague
Cimburkova 916/8, Žižkov, 130 00 Prague 3, Czech Republic
Czech Supervisory Authority
Úřad pro ochranu osobních údajů (UOOU)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
Website: www.uoou.cz · Tel: +420 234 665 111
You have the right to lodge a complaint with UOOU at any time if you believe your personal data has been processed in a manner that does not comply with the GDPR.
PLEASE READ THIS RISK DISCLOSURE CAREFULLY. BY ACCESSING AND USING OUR PLATFORM, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND ACCEPTED THE RISKS SET OUT BELOW. THIS DISCLOSURE DOES NOT CONSTITUTE FINANCIAL, INVESTMENT, OR LEGAL ADVICE.
Cryptocurrency markets are highly speculative and extremely volatile. The value of any digital asset can increase or decrease significantly — including a total loss of value — within minutes or hours. Past performance is not indicative of future results. You should never trade or hold more than you can afford to lose entirely.
Exchanging digital assets involves the risk of financial loss. The amount you receive from a swap may differ from the amount estimated at the time of quotation, by reason of market slippage, thin liquidity, rapid price movements or delay in network confirmation. Swaps are executed by independent third-party exchange providers, and we cannot guarantee the availability, performance, pricing or solvency of any such provider.
We do not provide custodial wallet services and at no time hold your digital assets. Neither Group Company is a bank, and digital assets you hold in the wallet are not covered by the Czech Deposit Insurance Scheme, the UK Financial Services Compensation Scheme, or any equivalent deposit-guarantee or investor-compensation scheme. Loss, theft or disclosure of your private key or recovery phrase results in permanent and irrecoverable loss of access to your assets, which no person is able to remedy.
All confirmed cryptocurrency transactions on a blockchain are irreversible. Erroneous transfers cannot be reversed or recalled. Always verify recipient wallet addresses carefully before confirming any transaction.
Blockchain networks may experience congestion, forks, protocol upgrades, or outages. Smart contracts underlying certain tokens may contain bugs or vulnerabilities. Our Platform itself may be subject to technical failures, downtime, or cyberattacks.
The cryptocurrency sector is a frequent target for phishing attacks, SIM-swapping, social engineering, and malware. Quantum EX s.r.o. will never ask for your password or seed phrase. You are solely responsible for securing your account and devices.
The legal and regulatory status of cryptocurrencies continues to evolve in the Czech Republic and across the EU. Evolving EU regulations governing virtual asset services may impose new obligations or restrictions on our services. We cannot guarantee that any specific cryptocurrency will remain available on our Platform.
Certain digital assets listed on our Platform may have low trading volumes. You may be unable to execute a trade at your desired price or at all. In thin markets, large orders may significantly move the market price against you.
Cryptocurrency protocols may undergo hard forks or soft forks. Quantum EX s.r.o. reserves the sole discretion to determine which forked networks or assets we support. We cannot guarantee that forked assets will be credited to your account.
Cryptocurrency transactions may give rise to taxable events under Czech Act No. 586/1992 Coll. on Income Taxes and applicable EU tax reporting frameworks. You are solely responsible for assessing and meeting all applicable tax obligations. We strongly recommend consulting a qualified tax advisor.
Nothing on our Platform, in our communications, or in this document constitutes investment advice, financial advice, trading advice, or any recommendation to buy, hold, or sell any digital asset. Quantum EX s.r.o. is not a licensed investment firm under Czech Act No. 256/2004 Coll. on Capital Market Undertakings. All decisions to trade or hold digital assets are made entirely at your own risk and on your own initiative.
IMPORTANT NOTICE: Cryptocurrencies are not legal tender in the Czech Republic or the European Union. They are not issued or guaranteed by any government, central bank, or regulatory authority. The cryptocurrency market operates 24 hours a day, 7 days a week, without circuit breakers or the investor protections present in traditional financial markets. You should only use our services if you fully understand the nature of digital assets and the extent of your exposure to risk.