Privacy Policy

1. Overview

This Privacy Policy explains how QED Academy (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website and Services. We serve customers globally; sections 9–12 describe additional rights for residents of the EEA/UK and California. By using the Services, you consent to the practices described here.

2. Information we collect

Information you provide

• Account information: name, email, company, job title, and phone number when you register.
• Inquiry and quote forms: the name, company, email, phone, and project details you submit through our contact and request-a-quote forms.
• Payment information: when you purchase a course, payment is processed by our third-party payment processor. We do not store your full card details; we receive limited transaction information (such as confirmation and the courses purchased).

Information collected automatically

• Basic technical and usage data (such as IP address, browser type, device information, pages viewed, and cookies or similar technologies used to keep you signed in and to operate and improve the Services).

Categories of personal information (for CCPA/CPRA)

In the preceding 12 months we may have collected these statutory categories: identifiers (name, email, phone, IP address); commercial information (courses purchased); internet/network activity (usage data); and professional information (company, job title). We do not knowingly collect sensitive personal information, and we do not collect it for the purpose of inferring characteristics.

3. How we use information

• to provide, operate, and secure the Services and your account;
• to process purchases and grant access to purchased courses;
• to respond to your inquiries and quote requests and to provide customer support;
• to send you administrative or, where permitted, marketing communications (you may opt out of marketing at any time); and
• to comply with legal obligations and enforce our terms.

4. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases: (a) contract — to create your account and deliver courses and services you request; (b) legitimate interests — to operate, secure, and improve the Services and respond to inquiries, where not overridden by your rights; (c) consent — for optional cookies and marketing, which you may withdraw at any time; and (d) legal obligation — to comply with applicable law.

5. How we share information

We do not sell your personal information. We share it only with service providers (processors) that help us operate the Services and only as needed, including:

• Hosting, database, and authentication providers that store account and site data;
• Payment processing providers that handle transactions;
• Email/communication providers used to send notifications; and
• others as required by law, to protect our rights, or in connection with a business transfer.

These providers process information under contractual and security commitments and only on our instructions.

6. Cookies and consent

We use cookies and similar technologies. Strictly necessary cookies keep you signed in and enable core functionality; these do not require consent. Any optional cookies (for example, analytics used to understand and improve usage) are only used with your consent, which you provide through our cookie banner. You can choose “Necessary only” or “Accept all,” and you can change your choice at any time by clearing your browser's site storage. Disabling necessary cookies may prevent you from staying signed in.

7. Data retention and security

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes, then delete or anonymize it. We use reasonable administrative and technical safeguards to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights (all users)

You may update your account information, opt out of marketing, and request access to or deletion of your personal information by contacting us at hello@qedanalytical.com. We will respond consistent with applicable law.

9. Your rights in the EEA and UK (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact hello@qedanalytical.com. We will not discriminate against you for exercising them.

10. International data transfers

We operate in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data from the EEA, UK, or other regions with data-transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism. You may request more information using the contact details below.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect and how we use and disclose it; request deletion of your personal information; correct inaccurate personal information; and opt out of the “sale” or “sharing” of personal information. You also have the right not to receive discriminatory treatment for exercising these rights. You may submit a request at hello@qedanalytical.com, and you may use an authorized agent; we will verify your request before responding.

12. Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. If this practice ever changes, we will update this policy and provide a working opt-out mechanism.

13. Children's privacy

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. Changes are effective when posted, and your continued use of the Services constitutes acceptance.

15. Contact

Questions about this Privacy Policy, or to exercise any of the rights above, contact us at hello@qedanalytical.com.