Legal

Privacy Policy

Last updated: April 2026

1. Who we are

This website is operated by Katarzyna Javaheri-Szpak, trading as QA Clinic, based in Funchal, Madeira, Portugal (EU).

For any privacy-related questions, contact us at: hello@qaclinic.pro

2. What data we collect and why

Contact form & email

When you contact us via the contact form or directly by email, we collect your name and email address. This data is used solely to respond to your enquiry.

Contact form submissions are delivered via Resend (Resend Inc., USA), a transactional email service. Your name, email address, and message are transmitted to Resend's infrastructure for the sole purpose of delivering the message to us. Resend does not use this data for any other purpose.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) / Pre-contractual steps (Art. 6(1)(b) GDPR).

Resend Privacy Policy →

Booking via Calendly

When you book a consultation through Calendly, your data (name, email, selected time slot) is processed by Calendly Inc. under their own privacy policy. We receive the booking details to prepare for and conduct the call.

Legal basis: Pre-contractual steps (Art. 6(1)(b) GDPR).

Calendly Privacy Policy →

Analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to understand how visitors use our site. Cloudflare Web Analytics is cookieless and privacy-preserving — it does not collect personal data, does not use cookies, and does not track you across websites or devices. Only aggregated, anonymised page view data is collected.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). No consent is required as no personal data or cookies are involved.

Cloudflare Privacy Policy →

Test Canvas (local storage)

The Test Canvas tool stores your inputs in your browser's local storage only. This data never leaves your device and is not transmitted to us or any third party.

3. Cookies

This website does not use tracking or advertising cookies. We store your cookie consent preference in your browser's local storage. Cloudflare Web Analytics does not set any cookies.

You can review or reset your cookie preference at any time using the Cookie preferences link in the footer.

4. How long we keep your data

Email and contact form enquiries are retained for as long as necessary to handle your request and any follow-up, and deleted within 12 months unless a client relationship is established.

Booking data held by Calendly is governed by their own retention policy.

5. Third-party services

We use the following third-party services that may process data on our behalf:

6. Your rights under GDPR

As a data subject in the EU/EEA, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Request portability of your data
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at hello@qaclinic.pro. We will respond within 30 days.

7. Data transfers outside the EU

Calendly and Resend are based in the United States. Data transfers are covered by each provider's adherence to applicable data transfer mechanisms under GDPR. Please refer to their respective privacy policies for details.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

9. Contact

For any questions about this Privacy Policy or how we handle your data, please contact:

Katarzyna Javaheri-Szpak / QA Clinic
Funchal, Madeira, Portugal
hello@qaclinic.pro