Who we are
InnoQualis Ltd ("InnoQualis", "we") is a company registered in the United Kingdom. We are the data controller for personal data collected through innoqualis.com, docs.innoqualis.com and our campaign emails. For the InnoQualis application at hub.innoqualis.com we act as a processor on behalf of the customer organisation that holds the account; that relationship is governed by the customer agreement and data processing addendum.
You can reach us about anything on this page at contact@innoqualis.com.
What we collect and why
When you request early access or contact us. Your work email address, and the company name and role if you give them. We use these to reply to you and to tell you when access opens. Lawful basis: our legitimate interest in answering a request you made, and your consent to be kept informed, which you can withdraw at any time by replying or using the unsubscribe link in any email.
When you accept analytics. Only after you accept the cookie notice on the site do we record page views and interaction events (clicks, scroll and pointer movement) to understand how the site is used. Nothing is recorded if you decline. Lawful basis: consent. See the Cookie Notice.
When you use the site at all. Our web server keeps standard access logs (IP address, browser type, requested page, time) for security and troubleshooting, and deletes them after 30 days. Analytics events recorded with your consent are kept for 12 months and then deleted. Lawful basis for logs: our legitimate interest in keeping the site secure.
When your organisation uses the application. Account details (name, work email, role) and the quality records your organisation creates. We process these only on your organisation's instructions and under the customer agreement. Records are retained for 10 years after an account is decommissioned unless the customer agreement says otherwise, because quality records are subject to regulatory retention obligations.
Who we share it with
We do not sell personal data and we do not share it for advertising. We use a small number of service providers to run InnoQualis, each under a contract that limits what they may do with the data:
| Provider | What for | Where |
|---|---|---|
| Contabo (our servers) | Hosting the sites, the application, and our own mailing and CRM tools | European Union |
| Microsoft 365 | Sending and receiving email | European Union |
| Stripe | Payments for application subscriptions | United States and European Union; Stripe's own privacy notice applies on their pages |
The full list of sub-processors for the application, with data flows and agreements, is published at docs.innoqualis.com/trust and updated before any new provider is added.
Where data is held
Tenant data is hosted in the UK/EU. Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256).
Your rights
Under UK data protection law you can ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; and give you a copy in a portable format. Where we rely on consent you can withdraw it at any time. Email dpo@innoqualis.com, or contact@innoqualis.com if you prefer; we respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
If you are in California, see Do Not Sell or Share My Personal Information for the rights that apply to you.
Children
Our sites and application are for businesses and are not directed at anyone under 16. We do not knowingly collect personal data from children.
Changes to this policy
We update this page when our practices change and note the date of the last review below. Significant changes are announced by email to people who have asked to be kept informed.
Last reviewed 12 September 2026.