Privacy Policy / Last updated 23 October 2026
Privacy Policy
We collect very little. This site sets no cookies, runs no analytics and has no advertising trackers.
PRST LLC. FZE., a free zone establishment registered in the Emirate of Dubai, United Arab Emirates (licence 2531165.01), is the data controller for the personal data described in this policy. PRST is the company's quantum computing research project. This policy covers this website and the messages you send us through it.
It is written to meet UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and, where they apply to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1.Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Messages | Your name, email address, organisation and the text of your message, when you write to us through the contact form or directly | You |
| Newsletter | Your email address, when you ask to join the newsletter | You |
| Job applications | Your CV and the details you include when you apply for a role | You |
| Technical data | IP address, browser type, time and page requested, in the web server's logs | Automatically, by our hosting provider |
The contact and newsletter forms do not send anything to us by themselves. They open your own email app with a message ready, and you decide whether to send it.
2.What we deliberately do not collect
- No cookies and no analytics or visitor counting on this site.
- No advertising trackers and no cross-site tracking pixels.
- No special category data. We do not seek health, biometric, religious, political or similar data. Please leave it out of your messages and applications.
- No sale of personal data.
3.Why we process it, and our legal basis
| Purpose | Basis (PDPL / GDPR) |
|---|---|
| Replying to enquiries about research, partnerships, investment or press | Legitimate interests; steps taken at your request before entering a contract |
| Sending the newsletter you asked for | Consent, which you can withdraw at any time |
| Assessing job applications | Consent, and steps taken at your request before entering a contract |
| Keeping the website secure and working | Legitimate interests: protecting the site and its visitors |
Where we rely on consent you may withdraw it at any time, without affecting processing already carried out. Where we rely on legitimate interests we have assessed that our interest is not overridden by your rights, and you may object as described below.
5.International transfers
We are established in the UAE and may process data in, or transfer it to, countries other than your own, including where our providers operate. Under the PDPL, transfers outside the UAE are made to jurisdictions recognised as providing adequate protection, or under appropriate safeguards. For data protected by the GDPR or UK GDPR, transfers are made under the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism. A copy of the relevant safeguards is available on request.
6.How long we keep it
| Data | Retention |
|---|---|
| Messages and correspondence | 2 years from last contact |
| Newsletter address | Until you unsubscribe, then kept only on a do-not-email list |
| Job applications | 12 months from receipt, then deleted |
| Web server logs | Up to 12 months, kept by our hosting provider |
Where a longer period is required by law or to establish, exercise or defend legal claims, we keep the minimum necessary for that purpose.
7.Your rights
Subject to the conditions in the applicable law, you have the right to:
- Access the personal data we hold about you, and receive a copy;
- Rectify inaccurate or incomplete data;
- Erase data where it is no longer necessary or was processed unlawfully;
- Restrict processing while a concern is investigated;
- Object to processing based on legitimate interests, and to direct marketing at any time;
- Portability: receive data you provided in a structured, machine-readable format;
- Withdraw consent where consent is the basis.
To exercise any right, email privacy@outerproof.com. We respond within 30 days and may ask for information to verify your identity. There is no charge unless a request is manifestly unfounded or excessive.
8.Cookies and browser storage
This site sets no cookies. If you switch between light and dark mode, your choice is saved in your browser's local storage so the site remembers it. It stays on your device and is never sent to us. Clearing site data removes it.
9.Security and breaches
We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS) and least-privilege access to our mailboxes. If a breach is likely to result in a risk to your rights, we will notify the UAE Data Office and affected individuals without undue delay. Where the GDPR or UK GDPR applies, we will notify the competent supervisory authority within 72 hours.
10.Children
This site is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us data, contact us and we will delete it.
11.Changes to this policy
We may update this policy. The "last updated" date at the top always shows the current version.
12.Contact and complaints
PRST LLC. FZE.
Registered office: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Free zone / licence no.: Meydan Free Zone, 2531165.01
Privacy enquiries: privacy@outerproof.com
Data protection officer: Mark Priest (privacy@outerproof.com)
If you are not satisfied with our response, you may complain to the UAE Data Office. If you are in the EEA or the UK, you may also complain to your local supervisory authority (in the UK, the Information Commissioner's Office). We would prefer the chance to put things right first.