Privacy Policy

Qualti, based in Bussum, the Netherlands, is the data controller responsible for your personal data within the meaning of the General Data Protection Regulation (GDPR). You can contact us at privacy@qualti.eu for any privacy or data-protection questions.

We collect and process the following categories of data when you use Qualti:

• Account data: your name and email address when you register.
• Product specification files: documents you upload for compliance assessment.
• Generated reports: the compliance reports and ingredient analyses produced from your uploads.
• Usage data: information about how you interact with the platform, such as pages visited and actions taken.

We use your personal data to:

• Provide and operate the Qualti compliance-checking service.
• Process uploaded product specifications and generate compliance reports.
• Manage your account and authenticate your sessions.
• Process payments and maintain records of purchased checks.
• Send transactional notifications about your account and reports.
• Send marketing communications where you have opted in (see Section 8).
• Measure and improve platform performance and user experience.

We retain your uploaded product specification files and completed compliance reports in your account until you choose to delete them. When you delete a file or report from your account, it is removed from our active systems. Account data is retained for as long as your account remains active.

We process your personal data on the following legal bases:

• Performance of a contract: to deliver the compliance-checking service you have purchased.
• Legal obligation: where required to maintain records for billing or tax purposes.
• Consent: for marketing emails and analytics cookies, which you can withdraw at any time.
• Legitimate interests: to secure, maintain and improve the platform.

We use trusted third-party services to operate Qualti. These processors may access your data only to provide services on our behalf:

• Hosting platform (Base44): hosts the application and stores your data.
• Google OAuth: provides optional sign-in via your Google account.
• Payment providers (Stripe and/or Wix Payments): process payments for purchased checks.
• AI processing services: analyse uploaded product specifications to generate compliance findings.

We use market-standard analytics tools to measure how visitors use the Qualti website. These tools collect aggregated usage data — such as pages visited and general interaction patterns — to help us improve the platform. Analytics cookies are set only with your consent and can be disabled through your browser settings or our cookie preferences.

We send transactional emails (such as account confirmation, report notifications and payment receipts) to all users as part of operating the service.

We also send marketing emails only to users who have explicitly opted in. You can opt in through your account settings or at registration. Every marketing email includes an unsubscribe link, and you may opt out at any time. Opting out of marketing emails does not affect transactional emails required to operate your account.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Dutch data-protection authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, contact us at privacy@qualti.eu.

We take appropriate technical and organisational measures to protect your personal data, including encrypted data transmission, access controls and secure storage. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

If you have any questions about this Privacy Policy or your personal data, please contact us at privacy@qualti.eu.