Privacy Policy

Quality Assurance Forum (QAF)

Privacy Policy

Effective Date: 01 April 2026
Last Updated: 01 April 2026

QAF values the privacy of users and is committed to handling personal information responsibly.

2.1 Information collected

QAF may collect the following categories of information:

  • Name, designation, laboratory or organization name.
  • Postal address, billing address, email address, and mobile number.
  • Login credentials and account-related information.
  • Programme registration details, order history, invoices, and payment status.
  • Technical information such as IP address, browser type, device details, date/time of access, and website usage logs.
  • Any documents, forms, communications, or queries voluntarily submitted by users.

2.2 How information is used

Personal data may be used to:

  • Process registrations, orders, payments, renewals, and service requests.
  • Support the user's experience throughout the website.
  • Communicate registration confirmation, invoices, reminders, schedules, programme updates, reports, alerts, and support responses.
  • Maintain records, improve services, monitor usage, prevent fraud, and comply with legal obligations.
  • Send service-related communications and, where permitted, updates about relevant programmes or offerings.

2.3 Legal basis and consent

By using the website and submitting personal information, you consent to collection and use of data for the purposes described in this policy. Where required, QAF may also process data to perform a contract, meet legal obligations, establish claims, or protect legitimate business interests.

2.4 Payment information

  • Online payments may be processed by third-party payment gateway providers.
  • QAF does not intentionally store complete card, UPI PIN, or banking authentication credentials on its own servers unless expressly stated and legally compliant.
  • Users should review the privacy and security practices of the applicable payment partner before completing a transaction.

2.5 Data sharing

QAF may share limited information with:

  • Payment gateway providers, banks, and transaction processors.
  • Technology vendors, hosting providers, SMS/email communication service providers, and website support vendors.
  • Government, regulatory, judicial, or law-enforcement authorities where required by law.
  • Internal staff, consultants, or authorized service partners on a need-to-know basis for programme administration.

QAF does not sell personal information to third parties for unrelated commercial marketing.

2.6 Cookies and analytics

The website may use cookies or similar tools to remember preferences, maintain sessions, improve performance, and understand how visitors use the website. Users may control cookies through browser settings, though some site features may not function properly if cookies are disabled.

2.7 Data retention

Personal information will be retained for as long as reasonably necessary for registration records, payment records, programme administration, dispute handling, legal compliance, taxation, audit, or enforcement of rights.

2.8 Data security

QAF adopts reasonable technical and organizational safeguards to protect personal information from unauthorized access, misuse, loss, disclosure, or alteration. However, no internet transmission or storage system is completely secure, and absolute security cannot be guaranteed.

2.9 User rights

Subject to applicable law, users may request access to their personal data, correction of inaccurate data, update of profile details, or deletion of data that is no longer required, by contacting QAF. QAF may retain data where legally required or where necessary for legitimate administrative records.

2.10 Children's privacy

The website is not intended for use by minors without appropriate parental, guardian, or institutional supervision. QAF does not knowingly collect personal data from children in violation of applicable law.

2.11 Policy changes

QAF may update this Privacy Policy from time to time. Updated versions will be posted on the website with a revised effective date.