Who we are
YourQual is run by ProviderLab Ltd (“we”, “us”).
You can contact us about anything in this policy through our contact form.
Our two roles
We handle personal data in two different ways, and the rules are different for each.
- This website and your enquiries. When you visit yourqual.co.uk, try the live demo or send us an enquiry, we decide how that data is used. We are the controller.
- The YourQual platform. When a training provider uses YourQual for its learners, trainers and employers, the training provider decides how that data is used. They are the controller and we are their processor: we only handle the data on their instructions and under a written agreement with them. If you are a learner, employer or member of staff, your training provider’s own privacy notice explains how they use your data, and they are the first people to contact about it.
What we collect through this website
Enquiries
When you fill in our contact form we collect your name, work email address, organisation, roughly how many learners you have and anything you write in your message. We use this to reply to you and to talk to you about YourQual. Our lawful basis is our legitimate interest in responding to people who contact us. We will not add you to a marketing list without asking first.
The learner data preview
The “see your data in it” preview reads your file inside your own browser. The file is never uploaded to us or anyone else, and nothing in it is stored.
The live demo
The live demo signs you in to a demo training provider filled with fictional people. To stop the demo being misused, we record a scrambled (salted and hashed) version of your IP address each time a demo session starts, so we can limit how many sessions can be started from one place. The scrambled value can’t be turned back into your IP address.
Technical data
Like any website, our hosting provider receives technical information such as your IP address and browser type when you visit, which is used to deliver the site and protect it from attacks. This website does not use analytics, advertising or tracking cookies. See our cookie policy for details.
What the platform holds for training providers
Depending on how a training provider uses YourQual, the platform can hold: names and contact details of learners, staff and employer contacts; learner profile information such as date of birth, photo, employer, qualification and programme dates; portfolio evidence including photos, audio recordings and documents; progress reviews, assessment plans, off-the-job hours, feedback and messages; and records needed for quality assurance and inspection. Training providers may also record safeguarding and wellbeing information, which can include special category data. The training provider is responsible for having a lawful basis for this information, and we protect it on their behalf.
Each training provider’s data is kept separate from every other provider’s. Records are stored in a database hosted in the EU (Ireland), and files such as photos, audio and PDFs are stored on Cloudflare R2.
Who we share data with
We use a small number of trusted service providers (sub-processors) to run the website and platform. They can only use the data to provide their service to us.
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Platform database and sign-in | EU (Ireland) |
| Cloudflare | Website hosting, file storage for evidence (R2) and security | Global network |
| Resend | Sending emails, such as enquiry replies, review links and notifications | United States |
| Anthropic | Writing knowledge questions and revision notes from qualification content only. No personal data is sent. | United States |
| Google Fonts | Serving the fonts this website uses | Global network |
We never sell personal data. We only share it with anyone else if the law requires us to, or with a training provider’s permission.
Transfers outside the UK
Some of the providers above are based in, or may process data in, countries outside the UK. Where that happens, we make sure the transfer is protected by appropriate safeguards, such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
How long we keep data
- Platform data: for as long as the training provider’s agreement with us requires, and then deleted or returned to them.
How we protect data
Data is encrypted in transit, each training provider’s data is isolated from every other provider’s, access is limited by role so people only see what their job needs, and files can only be opened through short-lived signed links.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data held about you;
- have inaccurate data corrected;
- have your data deleted, or its use restricted, in some circumstances;
- object to us using your data on the basis of legitimate interests;
- receive your data in a format you can take elsewhere, in some circumstances.
For website enquiries, contact us through our contact form. For data held in the YourQual platform, contact your training provider first; we will help them respond.
If you are unhappy with how your data has been handled, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.
Changes to this policy
We will update this page if the way we handle data changes. The date at the top shows when it was last updated.