Privacy notice

Who is responsible

For the personal data described on this page, the data controller is Qaveridia, which you can reach at hello@qaveridia.online. Questions about privacy, requests to use your rights and complaints all go to that address, and the person responsible for this website handles them.

What we collect and why

When you browse the site

The site has no analytics, no advertising, no social media plugins and no embedded third-party content. Fonts and images are served from this website itself. The pages do not set cookies, with the one exception on the contact page described below.

Like any web server, the server that hosts this site records basic technical information about each request: the IP address, the date and time, the page requested, the referring page and the browser's user agent. Our hosting provider keeps these logs to run and secure the service. We do not use them to profile visitors, and we look at them only to investigate faults or abuse.

When you use the free tools

All four free tools on this site, from the checklist to the launch planner, run entirely in your browser. Nothing you type into them is sent to this website or to anyone else, and nothing is stored after you close the tab.

When you use the contact form or email us

The contact form asks for your name, email address and message, and optionally your organisation and a website address. When you send it, the details are delivered by email to the hello@qaveridia.online mailbox. They are not stored in a database on the website.

To protect the form from abuse, the contact page also uses:

• A session cookie called qvd_desk, set only on the contact page and only when the form is shown. It holds a random reference to a small server-side record containing a security token, the time it was issued and how many messages were sent in that session. The token expires after two hours, and session records older than two hours are deleted in routine cleanup the next time the contact page is requested.
• A send counter that records a one-way, keyed hash of your IP address with the time of each successful send, so that the form can limit how many messages one address sends in a day. The hash cannot practically be linked to your IP address without the site's secret key. Entries older than 24 hours are removed in routine cleanup the next time the contact page is requested.

We use your enquiry to read and reply to it, and to discuss and deliver any work you ask for. If you ask about testing or related work, our reply may describe other services offered by Qaveridia's owner. See the commercial-interest note in the footer. We do not sell your details, and we do not pass them to anyone else for their marketing.

Legal bases

• Replying to enquiries and preparing quotes: taking steps at your request before entering into a contract, and our legitimate interest in answering messages sent to us.
• Delivering work you engage us for: performance of a contract.
• Protecting the contact form from abuse, and server logs: our legitimate interest in keeping the site secure and available.
• Invoices and business records: compliance with legal obligations, such as tax law.

How long we keep it

• Enquiries that never turn into work: deleted at the latest two years after the final message.
• Project correspondence and records for work we carry out: for as long as contract and tax law require us to keep them.
• Session records and send counters: as described above, two hours and 24 hours respectively, removed in routine cleanup.
• Server logs: for the period set by our hosting provider.

Who processes it for us

• Our hosting and email provider runs the server that hosts this website and the mailbox that receives enquiries. It processes data on our behalf under its own data processing terms.

Our provider operates data centres in several countries, and its services may process data outside Ireland and the European Economic Area. Where personal data is transferred outside the EEA, we rely on the safeguards the provider puts in place under the GDPR, such as standard contractual clauses.

We do not use any other service that receives your personal data through this website.

Your rights

Under the GDPR you have the right to:

• access: a copy of whatever personal data about you is in our hands;
• rectification: correction of anything inaccurate;
• erasure: deletion, where the GDPR gives that right;
• restriction and objection: limits on our use, and objection where legitimate interests are our basis;
• portability: the data you provided, in a portable format, where the law allows.

To use any of these rights, email hello@qaveridia.online. We may need to confirm who you are before acting on a request. Requests are handled within the period set by Article 12(3) GDPR.

You also have the right to complain to the Data Protection Commission, the supervisory authority in Ireland, or to the supervisory authority in the EU country where you live or work. We would appreciate the chance to deal with your concern first.

Security

The site is served only over HTTPS. Contact form settings, including the mailbox password, are stored outside the public part of the website. Session records and send counters are kept in a private folder that the web server does not publish.

Children

Qaveridia is written for organisations and the people working in them, and no data is knowingly gathered from children.

Changes to this notice

Any change in how personal data is handled is reflected here, with a new "last updated" date at the top.