Privacy Policy

This Privacy Policy explains how QualCore Systems Limited (“QualCore,” “we,” “us”) collects, uses, stores, and protects your personal data. We are committed to compliance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) 2019.

1. Information We Collect

Business Health Check (Free, no login required):

• Name
• Email address
• Business name
• Business type/industry
• Assessment responses and scores

Registered Users (With account):

• Full name
• Email address
• Company name
• Business type
• Phone number (optional)
• Assessment data, documents, non-conformance records, and audit findings

Automatically Collected:

• IP address
• Browser type and version
• Pages visited
• Time spent on pages
• Device information

2. How We Use Your Data

• To provide Business Health Check results and operational assessments
• To create and manage your account
• To deliver Deep Scan assessments, SOP management, and audit tools
• To calculate your Cost of Poor Operations (COPQ) estimate
• To send you assessment results and platform notifications
• To improve our products and services
• To send periodic updates about QualCore (you can opt out at any time)

3. Legal Basis for Processing

We process your personal data based on:

• Consent: You provide your data voluntarily when taking the Business Health Check or creating an account
• Contract: We need your data to deliver the services you’ve subscribed to
• Legitimate Interest: We use aggregated, anonymized data to improve our platform

4. Data Storage and Security

• Your data is stored on secure, encrypted servers
• Access is restricted to authorized personnel only
• We use industry-standard encryption (TLS) for data in transit
• We conduct regular security reviews
• Data is stored for the duration of your account plus 3 years for audit purposes, unless you request earlier deletion

5. Data Sharing

We do NOT sell your personal data. We may share data with:

• AQC (certification partner): Only when you explicitly request certification services through Qore Consult
• Service providers: Cloud hosting, analytics (under strict data processing agreements)
• Regulatory authorities: If required by Nigerian law

6. Your Rights Under the NDPA

As a data subject, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data (“right to be forgotten”)
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to the processing of your data
• Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

To exercise any of these rights, contact us at qorequalcore@gmail.com (transitional) or info@qualcore.ng (once domain email is active).

7. Data Retention

• Free Business Health Check data: Retained for 3 years from the assessment date
• Account data: Retained for the duration of your account plus 3 years
• You may request deletion at any time, and we will comply within 30 days

8. Cookies

We use essential cookies for the platform to function and analytics cookies to understand usage. You can disable analytics cookies through your browser settings or our cookie consent banner (if implemented).

9. Children’s Data

QualCore is a business-to-business platform. We do not knowingly collect data from individuals under 18. If you believe a minor has provided us with data, please contact us immediately.

10. International Data Transfer

Your data may be processed on servers located outside Nigeria. We ensure appropriate safeguards are in place, including standard contractual clauses and compliance with the NDPA’s data transfer requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on qualcore.ng. The “Last updated” date will reflect the most recent revision.

12. Contact