Privacy Policy

1. Scope

This policy applies to (a) visitors and users of our website and (b) customers and their end users who use the QualiPeak platform. Where we process data on behalf of a customer (e.g. form submissions collected by that customer), we act as a processor; the customer is the controller and is responsible for their own privacy notices and lawful basis.

2. Data we collect

• Account and usage: Name, email, organization name, role, login and usage data (e.g. IP, timestamps, feature usage) to provide the service, secure access, and improve the product.
• Form and submission data: Data that you or your end users submit through forms you create (e.g. survey responses, NPS scores). We process this only as instructed by you and in line with our Terms of Service.
• Website and marketing: When you contact us or request a demo, we collect contact details and communication content. We may use cookies and similar technologies on our marketing site as described in our cookie notice.

3. How we use data

We use the data to (a) provide, operate, and improve the QualiPeak platform; (b) enforce our terms and protect security; (c) communicate with you about the service and support; (d) comply with law; and (e) with your consent where required, for marketing. We do not sell your personal information or form data to third parties.

4. Legal basis (GDPR)

Where GDPR applies: we rely on (a) contract performance for providing the service; (b) legitimate interests for security, analytics, and product improvement; (c) consent where we ask for it (e.g. optional marketing). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Retention

We retain account and usage data for as long as your account is active and as needed to satisfy legal, regulatory, or contractual obligations. Submission and form data retention can be configured by you; we delete or anonymize in line with your settings and our data processing terms.

6. Security

We use industry-standard measures to protect data, including encryption in transit and at rest, access controls, and regular assessments. See our Security page for more.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, or to object to processing. To exercise these rights, contact privacy@qualipeak.com. You may also have the right to lodge a complaint with a supervisory authority. For CCPA: we do not sell personal information; you may request disclosure or deletion as set out in our CCPA supplement (available on request).

8. International transfers

Data may be processed in jurisdictions where we or our subprocessors operate. We ensure appropriate safeguards (e.g. standard contractual clauses) where required by law.

9. Changes

We may update this policy from time to time. We will post the revised policy on this page and, for material changes, notify you as required by law.

10. Contact

For privacy questions or to exercise your rights: privacy@qualipeak.com. For general contact, see our Contact page.