Privacy Notice

Last updated: 27 August 2026

1. Who we are

This service (QRI.Today, the "Qualitative Research Institute") is operated by QRI.Today ("we", "us"). QRI.Today is the data controller for personal data processed through this website and platform. You can reach us via the contact page.

2. Personal data we collect

Account data — name, email address, institution, password (hashed), authentication provider (e.g. Google).
Learning data — quiz attempts and scores, subjective and competency submissions, portfolio evidence you upload, reflections, module progress and certificate status.
Support and communications — messages you send us and correspondence via email.
Usage and device data — IP address, browser and device information, pages viewed, and error/diagnostic logs.
Cookies — essential cookies for authentication and session management.

Payment card details are collected directly by our Merchant of Record (Paddle) and are never stored on our servers.

3. Why we process your data (purposes and legal basis)

To create and maintain your account and deliver the courses you enrol in — performance of a contract.
To assess your submissions, issue certificates and verify them — performance of a contract.
To provide customer support and respond to enquiries — legitimate interests / contract.
To keep the platform secure, prevent fraud and troubleshoot errors — legitimate interests.
To comply with legal, tax and accounting obligations — legal obligation.

4. Who we share data with

Paddle.com Market Ltd — our Merchant of Record. Handles payments, invoicing, tax compliance, refunds and payment-related support.
Hosting and infrastructure providers — for hosting the application, database, storage and email delivery.
Professional advisers — legal, accounting and tax advisers where necessary.
Authorities — where required by law or valid legal process.

We do not sell your personal data.

5. International transfers

Your data may be processed in countries outside your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) with our service providers.

6. Retention

We keep account and learning records for as long as your account is active and for a reasonable period afterwards so we can honour certificate verification requests. Transaction and tax records are retained for the period required by law. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to certain processing. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us via the contact page. You may also lodge a complaint with your local data protection authority.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, hashed passwords and row-level authorization — to protect your data. No system is completely secure; please use a strong, unique password and keep it confidential.

9. Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use advertising cookies. You can control cookies through your browser settings.

10. Changes to this notice

We may update this notice from time to time. Material changes will be communicated via the website or by email where appropriate. The date at the top indicates when it was last revised.

11. Contact

For any privacy question or request, contact QRI.Today through the contact page.