Please read this agreement carefully, as it contains important information regarding your legal rights.

Last Updated: 2020-01-11

Privacy Policy

Owner & Operator: Quality Group LTD

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM

Registered in UNITED KINGDOM, Number: 15127076

Contact Email: [email protected]

This policy explains how we collect, use, protect, and share your personal data when you use our website and services (hereinafter referred to as the “Platform” or “Services”). We are committed to protecting your privacy and complying with applicable data protection legislation, including the UK Data Protection Act and relevant regulations such as the General Data Protection Regulation (GDPR).

1. Scope of This Policy

This policy applies to the data of natural persons (customers, visitors, job applicants, and users of hosted customer websites) that we process as a Data Controller or as a Data Processor on behalf of our customers in accordance with service agreements.

2. Types of Data We Collect

We may collect the following categories of data:

  • Identity Data: Name, email address, billing address, and correspondence address.

  • Account Registration Data: Username, encrypted password, and account settings.

  • Payment & Billing Data: Order information and status, and the last 4 digits of credit cards (actual payments are processed via third-party payment providers).

  • Identification Data (When Required): Identity verification documents (such as passport or ID copies) when required by law or domain registries (WHOIS).

  • Usage & Technical Data: IP address, browser type, operating system, login logs, activity history within the services, and device identifiers.

  • Content Data: Content you upload or host within our services (e.g., website files, databases).

  • Job Applicant Data: CVs, contact details, and professional qualifications.

3. Legal Basis for Processing

We process personal data based on one or more of the following grounds:

  • Performance of a Contract: To provide services, manage your account, and handle subscription renewals.

  • Compliance with Legal Obligations: Such as ICANN requirements, domain registries, or requests from official authorities.

  • Legitimate Interest: For security purposes, fraud prevention, infrastructure management, and service improvement, while balancing your rights.

  • Consent: In cases such as marketing communications or tracking non-essential cookies.

4. How We Use Your Data

We use your data to provide and manage services, offer customer support, process payments and billing, ensure legal compliance, improve our services, and for security purposes (such as detecting and preventing fraud). We may use anonymized, aggregated data for statistical and marketing purposes.

5. Data Sharing & Third-Party Processors

We may share your data with:

  • Payment Service Providers: To settle payments (we do not store full card details on our servers).

  • Infrastructure & Data Center Providers: Utilized to host our services.

  • Support & Analytics Vendors: Including email and marketing services (governed by data processing agreements ensuring appropriate protection levels).

  • Law Enforcement or Government Bodies: When required by law or to protect our rights.

We ensure that appropriate contracts are signed with all Data Processors, including security obligations and a commitment not to transfer data outside the territory except under appropriate legal terms.

6. International Data Transfers

Your data may be hosted or processed in countries outside the UK/EU. We will ensure that legal data transfer mechanisms are in place (such as Standard Contractual Clauses or approved alternative mechanisms) or process data according to legal exceptions where necessary.

7. Data Retention Period

We retain data as long as necessary for service delivery, legal compliance, or to protect our legitimate interests (such as fraud prevention), and in all cases, within our established internal retention policies. When no longer needed, we securely delete or anonymize the data.

8. Your Rights as a User

Under applicable law, you have the following rights regarding your personal data:

  • The right to access your data.

  • The right to rectify inaccurate data.

  • The right to request erasure (“The Right to be Forgotten”) under specific circumstances.

  • The right to restrict or object to processing.

  • The right to data portability where applicable.

  • The right to withdraw consent at any time without affecting the lawfulness of prior processing.

  • The right to lodge a complaint with a supervisory authority (such as the Information Commissioner’s Office – ICO in the UK).

To exercise these rights, contact us at [email protected]. We will respond within the applicable legal timeframes.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance user experience, for performance, analytics, and marketing. Some essential cookies are necessary for service operation, while others are optional and require your consent via our Cookie Banner.

10. Data Security

We implement reasonable technical and organizational measures to protect data (encryption in transit, access policies, periodic security reviews, backups, and vulnerability management). However, absolute security cannot be guaranteed; we work to mitigate risks and respond to incidents via an incident response plan.

11. Hosted User Data (Controller/Processor Relationship)

Regarding third-party data hosted by our customers on our platform (customer websites, databases), the customer is typically the “Data Controller,” and Quality Group LTD acts as a “Data Processor” on their behalf. Our relationship and responsibilities are defined in the Data Processing Agreement (DPA) and relevant Terms of Service.

12. Recruitment & Job Applications

We use job applicant data for recruitment purposes only and retain it according to recruitment-specific retention policies or based on applicant consent.

13. Children

Our services are not directed to children under the legal age of majority. If we become aware that we have collected personal information from a minor in violation of the law, we will take immediate steps to delete it unless there is another legal basis for retention.

14. Policy Changes

We may update this policy from time to time. We will display the update date at the top of the page and provide a clear notice when changes are material.

15. How to Contact Us

For all inquiries regarding this policy or to exercise your rights, contact: [email protected].

If you do not receive a satisfactory response, you may lodge a complaint with the Information Commissioner’s Office (ICO) or your local regulatory authority.