What information we collect

Information you give us directly:

• Names
• Email addresses
• Phone numbers

Information collected automatically:

• Technical data your browser sends with every request, such as IP address, browser type and the pages you visit. Our web host keeps short-lived server logs of these for security.
• With your permission where required, cookies and similar technologies record how you use the site (performance and functionality). See our Cookie Policy.

We do not ask for sensitive information (such as health data, precise location or government ID numbers) through this site. Please do not send it to us.

How we use it

• Answer enquiries and messages
• Provide and manage our services and contracts
• Schedule and hold meetings
• Invoice and collect payment
• Understand how the site is used and improve it
• Keep the site and our systems secure and prevent fraud
• Meet legal, tax and accounting obligations

We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

Legal bases (EU, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Consent: for optional cookies and marketing emails. You can withdraw it at any time, which does not affect what we did before.
• Performance of a contract: to provide services you asked for or agreed to, and to take steps before entering into a contract.
• Legitimate interests: to run and secure our business, answer enquiries and improve our services, where those interests are not overridden by your rights.
• Legal obligations: to meet tax, accounting and other legal requirements.

Cookies and similar technologies

We use cookies that are needed for the site to work and, where you allow it, optional cookies for performance and functionality.

You can change your choices at any time in Consent preferences. Our Cookie Policy lists each cookie.

When we share information

We share personal information only with service providers who process it on our behalf, under contracts that require them to protect it and use it only for us:

• Microsoft 365: email, calendar and file storage
• Our web host: runs this website
• Soverion Meridian: meeting scheduling and bookings

We may also disclose information where the law requires it, to protect our rights or safety, or as part of a business transfer such as a merger, where the new owner keeps the same protections.

We do not sell personal information and do not share it for cross-context behavioural advertising. We have not done so in the past 12 months.

International transfers

We are based in the United States; we and our providers may process information in the United States or other countries whose laws differ from yours. Where we transfer personal information out of the EEA, UK or Switzerland, we use safeguards the law recognises, such as the European Commission's standard contractual clauses or a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions.

How long we keep it

We keep personal information only as long as we need it for the purposes described here: usually for as long as we are in contact or working together, plus the time needed to meet legal, tax and accounting obligations (typically up to seven years for business records). Cookie consent records are kept for 180 days.

How we protect it

We use technical and organisational measures suited to the risk, such as encrypted connections, access controls, multi-factor sign-in and encrypted backups. No system is completely secure, so we cannot guarantee absolute security; if a breach affects you, we will tell you as the law requires.

Children

This site is not meant for people under 18. We do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

Your privacy rights

Depending on where you live, you may have the right to ask us to: tell you what personal information we hold about you and give you a copy; correct it; delete it; give it to you in a portable format; restrict or object to how we use it; and withdraw consent you gave. We will not treat you differently for using these rights.

To make a request, use our privacy request form or email info@usqcc.com. We will confirm your identity (usually by asking you to confirm your email address) and answer within the time the law sets. You may ask someone to act for you as your authorised agent; we will ask for proof of that permission.

United States

Residents of Colorado have the rights above as their state law provides, including the right to opt out of the sale or sharing of personal information and of targeted advertising. We do not use sensitive personal information to infer characteristics about you.

In the past 12 months we have collected the categories of information described in "What information we collect", for the purposes in "How we use it", from you and from your browser. We have not sold or shared it for targeted advertising.

If we decline your request, you can appeal by replying to our answer; we will respond to the appeal within 60 days (45 days in Colorado). If you are not satisfied, you may contact your state attorney general.

EU/EEA, UK and Switzerland

You have the rights described above under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection. You also have the right to complain to your local data protection authority, although we would appreciate the chance to resolve your concern first.

Canada

Under PIPEDA and, in Quebec, Law 25, you may access and correct your personal information and withdraw consent, subject to legal and contractual limits. You may also complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Do-Not-Track and Global Privacy Control

Our site treats a Global Privacy Control (GPC) signal from your browser as a request to opt out of optional cookies and of any sale or sharing of your information, for that browser. Browsers' older "Do Not Track" setting has no agreed meaning, so we do not respond to it separately.

Changes to this policy

We will update this policy when our practices change. The date at the top shows the latest version; if a change is significant, we will say so on the site or tell you directly.

Contact us

Questions about this policy or your information:

Our privacy officer: Andrew Quraishi, aquraishi@usqcc.com, 650-333-8489.

To make a privacy request, use our privacy request form.