1. Introduction

Qualitest Group (“Qualitest”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use and share your personal data, your rights under data-protection law, and how you can contact us about privacy matters.

2. Data Controller

The data controller is Qualitest Group (all subsidiaries worldwide). If you wish to contact us about data protection, you may write to: Level 2, Equitable House, 47 King William Street, London, EC4R 9AF, email: [email protected].

3. What personal data we collect

We may collect personal data such as:

  • Contact details (name, address, telephone number, email address)
  • Job title, professional affiliation or company name and related professional information
  • Website and browser data (e.g. IP address, browser type, referring website, pages visited, click behaviour)
  • Any other information you provide when contacting us, registering for events/webinars, applying for jobs, requesting information, or using our website/services.

We may obtain data directly from you (e.g. via forms), or — where you have consented or where permitted under applicable law — from third-party sources such as publicly available databases, our corporate group companies or from third-party partners.

4. Purpose and lawful basis for processing

We process your personal data for the following purposes:

  • Responding to information requests, enquiries, support requests, event or webinar registrations.
  • Fulfilling our contractual obligations to you (e.g. services provision, employment applications).
  • Sending communications you have requested (e.g. newsletters, event invitations), or — where you have consented or where we have a legitimate interest — marketing and promotional materials.
  • Improving our website, services, business development, analysis and market research.
  • Administrative, HR or recruitment-related purposes.

Lawful bases: we rely on one or more of the following lawful bases under UK GDPR depending on the activity — (a) performance of contract, (b) legitimate interests, (c) consent, or (d) compliance with legal obligations. Where you give consent (e.g. for marketing), you may withdraw it at any time (see section 11).

5. Disclosure of your data / third-party sharing

We will not sell or rent your personal data to third parties. We may share your data with third-party service providers, subcontractors or affiliated organisations who act on our behalf for the purposes described above (e.g. mailing services, event-management, data-hosting). Where we share data with third parties, we require them to protect your data in accordance with applicable law.

If we transfer your data outside the UK (or EEA), we will only do so in compliance with UK data-transfer law and safeguards (e.g. standard contractual clauses).

6. Data retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, including to comply with our legal obligations. Typical retention periods are:

  • For enquiries, communications, event registrations, newsletter subscriptions: until you unsubscribe, plus a short period (e.g. up to 3 years) to ensure compliance with your request and prevent further communications.
  • For clients or contract-related data: for the duration of the contract and thereafter as required by law.
  • For recruitment applications: for a reasonable period after recruitment decisions (unless otherwise required by law).

Specific retention periods may vary depending on data type and purpose; contact us if you wish to know how long we retain your data.

7. Your rights

The rights available to you depend on the laws of your location. These may include rights of access, correction, deletion, objection, portability, and other rights described in regional notices.

Under UK GDPR (DPA) you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Request correction (rectification) of inaccurate or incomplete data.
  • Request erasure (to be forgotten) in certain circumstances.
  • Request restriction of processing.
  • Object to processing (including for marketing).
  • Data portability (where applicable).
  • Withdraw consent at any time (if we rely on consent).
  • Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we are mis-handling your data.

To exercise any of these rights, contact us at [email protected].

8. Cookies and tracking technologies

We may use cookies or similar technologies when you use our website (e.g. for analytics, functionality, marketing). For non-essential cookies, we will either:

  • obtain your consent before placing them; or
  • if required, provide a cookie-banner/consent mechanism in accordance with relevant regulations (for example under the upcoming Data (Use and Access) Act 2025)

You may disable cookies via your browser settings, but this may affect functionality of the website.

9. Automated decision-making and profiling

We do not currently use automated decision-making or profiling for services offered via our website. If this changes, we will update the privacy policy and notify you accordingly.

10. Changes to this policy

We reserve the right to update this policy. When substantial changes are made, we will publish the updated version on this page, and — where appropriate — notify our users by email or via a notice on our website. Your continued use of our website following changes constitutes acceptance of the updated policy.

11. Contact and complaints

If you have any questions about this policy or want to exercise your data-protection rights, please contact us at: [email protected], Level 2, Equitable House, 47 King William Street, London, EC4R 9AF.

If you believe we have breached data protection law, you also have the right to lodge a complaint with the UK supervisory authority, the ICO (www.ico.org.uk).

12. Regional Privacy Rights

Privacy laws in certain jurisdictions (such as California, Brazil, South Africa, India, Canada and Australia) give individuals additional rights relating to their personal data.

If you are located in one of these regions, you may have the right to:

  • access your personal data;
  • correct or update inaccurate data;
  • request deletion of your data;
  • object to certain types of processing;
  • withdraw consent (where applicable);
  • receive information about how your data is shared;
  • exercise data portability (where required by law); and
  • submit a complaint to your local data protection authority.

To exercise any regional rights available to you, or to request information relevant to your jurisdiction, please contact us at: [email protected].

We will respond in accordance with the laws that apply to your location.