Privacy policy

1. Who is responsible for your data

The controller of your personal data is:

For any question about your data, or to use any of your rights, write to that address.

2. What we collect and why

When you buy

On our own checkout page we ask for your first and last name, email address, country, address, postcode, town or city and region, and optionally a company name and a tax reference. We use these to create the payment with our payment provider, to send your access details, to identify your order and to keep the business records the law requires. We pass this data to our payment provider so it can create and process the payment.

Each order is saved as a file on our server: the items, amounts, the details above, the order status and the dates of payment and of access being sent.

Lawful basis: performance of the contract with you, and our legal obligation to keep accounting records.

When you use the chat

If you write to us in the chat, we store your messages, any files you send in the chat, and your email address if you choose to give it. We use them only to answer you and to deal with your enquiry or order. Chat conversations and files are deleted 12 months after the last message.

Lawful basis: our legitimate interest in answering questions, or steps you ask for before entering into a contract.

When you visit any page

We keep a short visit log: the time, your IP address, the country it belongs to, the page you opened, the page that referred you and your browser's description of itself. We use it for security and to prevent fraud and abuse of the checkout and the chat. It is kept for 90 days and then deleted automatically.

Lawful basis: legitimate interest in keeping the site and payments secure.

If you tick "remember my details"

At checkout you can choose to have your checkout details saved in a cookie on your own device, so the form is filled in next time. This is optional and off by default; see the cookie policy.

Lawful basis: your consent, which you can withdraw at any time.

We do not use analytics or advertising tools, we do not build marketing profiles and we do not sell your data. We send emails about your order; we do not send newsletters.

3. Who receives your data

We share personal data only with service providers who need it to run the site, each for the purpose stated:

We may also disclose data where the law requires it, for example to a court or to HM Revenue & Customs.

4. International transfers

Some of these providers process data outside the United Kingdom, for example in the European Economic Area or the United States. Where that happens, the transfer is covered by UK adequacy regulations or by the safeguards the provider offers, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

5. How long we keep it

• Orders and the details given at checkout: six years after the end of the financial year of the purchase, as required for UK company accounting records.
• Chat messages and files: 12 months after the last message.
• Visit log: 90 days.
• "Remember my details" cookie: on your device for up to 180 days, or until you remove it.

6. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have data erased where we no longer need it or have no lawful basis to keep it;
• restrict processing or object to processing based on legitimate interest;
• receive data you gave us in a portable format;
• withdraw consent at any time, where processing is based on consent.

Write to hello@dqatraining.co.uk. We reply within one month. We may need to confirm your identity first, for example by asking you to write from the email address used for your order.

7. Complaints

If you think we have not handled your data properly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

8. Security

The site is served only over an encrypted connection. Order files and chat data are kept in folders that cannot be opened from the web, and card details are entered only on the payment provider's page, never on ours.

9. Changes to this policy

If we change how we use personal data, we will update this page and the date at the top.