Legal
Privacy Policy
How QC&A GROUP™ collects, uses and protects your personal data.
Who we are
QC&A GROUP™ is the data controller for personal data processed through this platform. You can reach us through the contact page.
What we collect
Account data: name, email address, job title, organisation and service type.
Usage data: assessments you complete, documents you download and training you view.
Enquiry data: the details you provide when contacting us.
Why we process it
To provide your membership and personalise your governance content (performance of a contract).
To improve the platform and understand which resources help providers most (legitimate interests).
To send service messages and, where you have opted in, governance updates (consent).
Your rights
You have the right to access, correct, erase, restrict, port or object to the processing of your personal data. You can also complain to the Information Commissioner's Office.
Retention and security
We keep account data while your account is active and for a reasonable period afterwards to meet legal obligations. Data is encrypted in transit and access is restricted to authorised personnel.
Last reviewed August 2026.