QualityExcellence Ltd customer privacy notice

This privacy notice tells you what to expect us to do with your personal information. It applies to your use of our website and when communicating with us or using our services.

  • Contact details
  • What information we collect, use, and why
  • Lawful bases and data protection rights
  • Where we get personal information from
  • How long we keep information
  • How to complain

Contact details

QualityExcellence Ltd.
Company Registration no: 15414144

Post

19 Montpellier Avenue, Bexley, Kent DA5 3AP

Telephone

020 8303 5909

Email

Jennifer@qualityexcellence.co.uk

What information we collect, use, and why

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details
  • Gender
  • Occupation
  • Transaction data (including details about payments to and from you and details of products and services you have purchased)
  • Usage data (including information about how you interact with and use our website, products and services)
  • Information relating to compliments or complaints
  • Records of meetings and decisions

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details
  • Addresses
  • Purchase or service history
  • Marketing preferences

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Marketing preferences
  • Purchase or account history

We collect or use the following personal information to comply with legal requirements:

  • Name
  • Contact information
  • Client account information
  • Any other personal information required to comply with legal obligations

We collect or use the following personal information to protect client welfare:

  • Names and contact information
  • Client account information
  • Emergency contact details

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Address
  • Payment details
  • Account information
  • Purchase or service history
  • Customer or client accounts and records
  • Financial transaction information
  • Correspondence

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

  • Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Your rights may vary depending on the lawful basis relied upon

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Contract – we need to process your personal information to enter into or perform a contract with you.
  • Legitimate interests – it is in our legitimate interests to operate, review and improve our services, maintain records of interactions, and manage our business operations, provided that these interests are not overridden by your rights and freedoms. All of your data protection rights may apply, including the right to object

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Legitimate interests – it is in our legitimate interests to administer customer relationships, maintain accurate records, and ensure the security and functionality of our systems.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you.
  • Legal obligation – we have to collect or use your information so we can comply with the law.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent – we have permission from you after we gave you all the relevant information.
  • Legitimate interests – where permitted under applicable marketing laws, we may send relevant business updates to existing clients where there is a reasonable expectation to receive such communications. You have the right to object at any time.

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Legal obligation – we have to collect or use your information so we can comply with the law.

Our lawful bases for collecting or using personal information to protect client welfare are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you.
  • Legal obligation – we have to collect or use your information so we can comply with the law.
  • Legitimate interests – it is in our legitimate interests to ensure the safety, welfare and appropriate support of our clients, provided this does not override your rights and freedoms.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Legitimate Interests – it’s in our legitimate interests to communicate with you, investigate issues, maintain records, and resolve disputes..
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you.
  • Legal obligation – we have to collect or use your information so we can comply with the law.

Where we get personal information from

  • Directly from you
  • Publicly available sources
  • Suppliers and service providers

How long we keep information

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Personal data will therefore be retained for the following periods (or its retention will be determined on the following bases):

  1. We will retain your contact details for as long as we contract with you and for 24 months thereafter, with the exception of financial information as detailed in iv. below;
  2. We will retain your contact details for 12 months if you have enquired about our services but not contracted with us. Thereafter, they will be deleted;

iii.        If you sign up to Our mailing list, We will retain your personal data for as long as you consent to receive emails from Us. You can unsubscribe at any time and we will remove you from our mailing list and thereafter we will delete your details.

  1. We will retain your financial information for as long as we contract with you and, thereafter, for the permitted period of time required by law which is currently 6 years

Where we store your data

We will store some of your personal data in the UK. This means that it will be fully protected under the UK’s Data Protection Legislation.

We will store some of your personal data within the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under the EU GDPR and/or to equivalent standards by law. Transfers of personal data to the EEA from the UK are permitted without additional safeguards.

We may store some or all of your personal data in countries outside of the UK and EEA. These are known as “third countries”. When we do, we ensure that appropriate safeguards are in place to protect your data. These safeguards include ensuring that the level of protection in the destination country is not materially lower than that required under the Data Protection Legislation.

We use the following third-party software and some of your data may be stored on their servers:

  1. Office 365 applications

Steps we take to secure and protect your data include:

  1. All devices and computers that we store your data on are password protected;
  2. All devices and computers that we store your data have anti-virus software and are constantly updated to the most recent operating system; and

We only store your data on computers and devices owned by us. We also use Contractors who may store Our data on their computers, servers and any such cloud storage they may access. We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.

Do We Share Your Data?

We may sometimes contract with third parties to supply products and services to you on our behalf. These may include payment processing, professional advisors such as legal or accountancy, delivery of goods or provision of services, IT support, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, we will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.

We may compile statistics about the use of our website including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Personal data will only be shared and used within the bounds of the law.

We may sometimes use third party data processors that are located outside of the United Kingdom and European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where we transfer any personal data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK under the Data Protection Legislation including:

  1. Using Standard Contractual Clauses “SCCs” as a mechanism to safely process data outside of the UK and EEA to third countries which have not been granted adequacy; or
  2. Is a Country that has been granted adequacy which confirms its data protection legislation is adequate to safeguard data processing.

In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.

How to complain

If you have any concerns about how we collect or use your personal data, we encourage you to contact us in the first instance using the details at the beginning of this privacy notice so that we can try to resolve the issue. We aim to respond to all complaints within 30 days. Where your concern is complex or requires more time, we will let you know and keep you updated on progress. If you are not satisfied with our response, or if you would prefer not to speak to us first, you can contact the UK’s data protection authority using the details below.

For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

19th February 2026