Legal · Last updated 6 October 2026
Privacy Policy
We collect what we need to build and support your quality management system, and nothing else. We don't sell your data.
1. Who is responsible
Funderlytics Ltd, registered in England & Wales, company no. 15848558. Registered office: 167-169 Great Portland Street, Fifth Floor, London W1W 5PF, UK operates QMSReady and is the controller of the personal data described here. Contact us about privacy at support@qmsready.com.
2. What we collect
- Contact and account details: your name, work email, company name, job title and (optionally) phone number.
- Questionnaire answers: information about your company, products, processes, equipment, customers, suppliers and roles. This may include names and job titles of your staff.
- Uploads: files you choose to upload, such as existing procedures, forms, org charts and audit evidence.
- Generated content: the documents, audit reports and assistant conversations created in your account.
- Gap-score answers: if you take the free gap score, your answers and email address.
- Payment information: handled by our payment processor. We receive confirmation of payment, billing name, country and the last digits of your card, never full card numbers.
- Usage data: pages visited, device and browser information, approximate location and ad-click identifiers, collected through cookies and similar technologies (see section 6).
- Support emails: anything you send us.
3. How we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Providing the software: generating your documents, running the internal audit and assistant, account access | Performance of our contract with you |
| Payments, invoicing, tax and accounting records | Contract; legal obligation |
| Support and service emails | Contract; legitimate interests |
| Gap-score results and follow-up emails about getting audit-ready (you can unsubscribe at any time) | Legitimate interests, or consent where required |
| Analytics and measuring our advertising | Consent where required; otherwise legitimate interests |
| Keeping the service secure and preventing misuse | Legitimate interests |
We use your questionnaire answers, uploads and generated content only to provide the service to you. We do not use them to train AI models, and we do not share them with other customers.
4. Who processes your data for us
| Processor | What for | Location |
|---|---|---|
| Vercel Inc. | Website hosting, application hosting and file storage (questionnaire answers, uploads, generated documents) | USA |
| Anthropic PBC | AI processing to generate documents, run the internal audit and power the QMS assistant. Under its commercial terms, your data is not used to train its models | USA |
| Resend | Transactional and follow-up email (receipts, account emails, gap-score results) | USA |
| Our payment processor | Checkout, payment processing, tax and invoicing; may act as merchant of record | USA / UK / EU |
| Google LLC (Google Analytics, Google Ads) | Website analytics and advertising conversion measurement | USA |
Where data is transferred outside the UK, we rely on adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. We may also disclose data where required by law, or to a buyer of our business, under the same protections.
5. How long we keep it
- Account data, answers, uploads and generated documents: for your Access Term plus 12 months (so you can renew or export), then deleted. You can ask us to delete them sooner.
- Gap-score leads who don't buy: up to 24 months after your last interaction, or until you unsubscribe or ask us to delete it.
- Payment and invoicing records: 6 years, as UK tax law requires.
- Analytics data: up to 14 months in Google Analytics.
- Support emails: up to 24 months after the conversation ends.
6. Cookies
We use essential cookies to run your account and checkout, and Google Analytics and Google Ads cookies to understand how visitors use the site and to measure our ads. Where the law requires consent for non-essential cookies, we ask for it first. You can also block cookies in your browser settings.
7. Security
Data is encrypted in transit (HTTPS). Access to customer data is limited to what is needed to provide and support the service. No system is perfectly secure, but we will tell you without undue delay if a breach affects your data.
8. Your rights
Depending on where you are, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. US residents of states with privacy laws have similar rights; we do not sell or share personal data for cross-context behavioural advertising beyond the Google measurement described above. To exercise a right, email support@qmsready.com. In the UK you may also complain to the Information Commissioner's Office (ico.org.uk).
9. Children
The service is for businesses and is not directed at anyone under 18.
10. Changes
We will post any changes here and update the date above. If a change is significant, we will email account holders.