Last Updated 02 January 2021
Who We Are
Le Grand Val
Alderney GY9 3XD
Our email address is: firstname.lastname@example.org
Our website address is: https://www.qedforensics.com
QED Limited is an Alderney registered company # 1381.
QED Limited (QED) is committed to protecting your privacy. QED is registered for Data Protection with the Guernsey Data Protection Authority reg. # 63751. All personal information is processed in accordance with the General Data Protection Regulation 2016/679 and The Data Protection (Bailiwick of Guernsey) Law, 2017. QED is Data Controller and Processor under the definitions of both legislations.
This privacy notice explains how QED processes your personal information when you visit our website, or if we collect, store or share your personal data as part of the legitimate interests of our business. It also explains how we will protect your information and personal data, and the controls and safeguards we provide for this data. This includes understanding, at all times, precisely what data we are storing for and about you, who (if anyone) can see that data, and whether you give permission for that data to be shared with third-parties.
The processing of personal data, such as names, addresses, email addresses, or telephone numbers will always be in line with the General Data Protection Regulation 2016/679 and The Data Protection (Bailiwick of Guernsey) Law, 2017.
By means of this Data Protection declaration, we would like to inform you of the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Data Protection declaration provides data subjects information on the rights to which they are entitled.
To protect your privacy, QED will observe the following fundamental principles:
We will not ask you for personal information unless we have a genuine need for it.
We will not share your personal information with anyone except to comply with the law or protect our rights.
What Personal Data We Collect and Why We Collect It
QED collects individually identifiable information from clients and business associates for legitimate administrative and financial purposes; to facilitate communication; deliver reports; and meet regulatory requirements. In all cases, the personal data we collect is limited to your name, address, e-mail address, and contact telephone number.
All of the information we collect is voluntarily provided by the data subjects themselves in the form of emails, letters, the QED Contact form, and other forms of documentation such as business cards. Where such information is provided to us on a voluntary basis, it is deemed to have been provided with the data subject’s consent.
All the personal information we hold is stored on computers in the Bailiwick of Guernsey. However, the QED website is located on servers within the EU and USA.
Who We share Your Data With
QED does not share any of the personal data we collect. It is also careful not to disclose or distribute any personally-identifying and/or potentially personally-identifying information other than on a need-to-know basis. This includes disclosing personally-identifying and/or potentially personally-identifying information in response to a subpoena, court order, or other governmental request, or when QED believes, in good faith, that disclosure is necessary to protect third parties or the public at large.
As part our normal business operations, QED uses third-party software and cloud services from Adobe, Dropbox, Google, Microsoft, and others, as well as financial institutions to provide various services which may involve processing data on our behalf. QED takes all reasonable endeavours to ensure our clients' data is secure and we are committed to only engage with third-parties who can offer it equal assurance.
Your Rights Over Your Data
You can request to receive an exportable file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
What Data Breach Procedures We Have in Place
As, in all cases, the personal data we collect is limited to your name, address, email address, telephone number, and contact telephone number, it is unlikely that a data breach will result in a high risk to the rights and freedoms of any data subjects. However, as soon as we become aware of a data breach, we will immediately take steps to inform those data subjects who may be impacted by it.