Privacy policy

Who we are

ItQanMS is a quality and HSSE management service operated by the operator of ItQanMS.

For any question about this policy or your personal data, write to info@itqanms.net.

Two roles

For the records a customer company keeps in ItQanMS (its users, issues, investigations, actions, photos and documents), that company decides what is collected and why. It is the controller of that data and we process it on its behalf, under our agreement with it.

For visitors to this website and people who request a demo, we decide what is collected and why, as described below.

What we collect

Account details: name, email address, job title, office, department, roles, language and sign-in records, including two-step verification settings.

Records entered by customers: issue reports, descriptions, photos and documents, root cause analyses, actions and approvals. Reports about injuries can include health information; customers should record only what their procedures require.

Demo requests: name, company, work email, phone, country, company size and your message.

Technical data: IP address, browser type and time of each request, kept in server logs to protect the service against misuse.

Why we use it

To provide the service: sign-in, the workflow, notifications and reminders by email, reports and exports.

To keep the service secure: limiting repeated sign-in attempts and automated submissions, investigating misuse.

To answer demo requests and send quotes. We do not sell personal data and do not use it for advertising.

Where it is kept

Data is stored on servers in the United Arab Emirates. Emails are delivered through a specialised sending provider, which handles the addresses and contents of the messages it sends.

Customers in Saudi Arabia should note that their data is therefore kept outside the Kingdom; we will provide the information they need to assess this transfer under the Personal Data Protection Law.

How long we keep it

Customer records are kept for as long as the customer's subscription lasts, then deleted or returned on request. Nightly backups are kept for 14 days.

Demo requests are kept for up to two years unless you ask us to delete them sooner.

How we protect it

Connections are encrypted, each company's records are kept separate from every other company's, passwords are stored only in hashed form, two-step verification is available to every user, and access to the servers is restricted.

Your rights

You may ask to see, correct or delete your personal data, or object to its use. If your data is in a company's ItQanMS, contact that company first; we will help it answer. Otherwise write to info@itqanms.net. You may also complain to the data protection authority in your country.

Changes

We will publish any change to this policy on this page with a new date, and tell customers of significant changes by email.