Privacy Policy

1. Introduction

The Qualified Path ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using The Qualified Path, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide, including:

• Email address, when you subscribe to our newsletter, access free tools (such as the QWE Tracker or revision timetable), or sign up via any email capture form on the site
• QWE Tracker usage data: if you use the QWE Tracker, the time log entries and placement records you add (including hours, dates, practice areas, and employer details) are stored on our servers in Supabase, associated with your email address and an anonymous device identifier. This data is used solely to provide and improve the tracker service.
• Calculator inputs (course preferences, financial data, timeline information): these are processed in real-time and not stored
• Feedback or inquiries submitted through contact forms

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Operating system and device information (including user agent string)
• A randomly generated session identifier (stored in your browser session storage) used to associate page views within a single visit

This information is collected by both Google Analytics (see section 6) and our own first-party analytics system, which stores aggregated usage data on our servers.

3. How We Use Your Information and Our Lawful Basis

Under UK GDPR, we must have a lawful basis for processing personal data. The table below explains how we use your information and on what basis:

• To send newsletters and free resource emails: We rely on your consent, given at the point of sign-up. You can withdraw consent at any time by unsubscribing.
• To provide access to tools (QWE Tracker, revision timetable): Legitimate interests in providing the service you have requested.
• To analyse website usage and improve the site: Legitimate interests in understanding how visitors use the site to improve it. Analytics cookies require your separate consent via the cookie banner.
• To detect fraud and ensure security: Legitimate interests.
• To comply with legal obligations: Legal obligation.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our use of cookies, please see our Cookie Policy.

You can control cookies through your browser settings. However, disabling cookies may limit some functionality of our website.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure server infrastructure with encryption
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Data backup and recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Third-Party Services and Data Processors

We use the following third-party services that may process your personal data:

• Google Analytics (Google LLC, USA): We use Google Analytics to understand how visitors use our site. This sets cookies and sends usage data to Google's servers in the USA. This is only activated if you accept analytics cookies. Google is a certified participant in the EU–US Data Privacy Framework.
• Supabase (Supabase Inc., USA): We use Supabase as our database provider to store email addresses collected via sign-up forms and to store anonymised analytics data. Data is stored on servers in the EU where possible.
• Resend (Resend Inc., USA): We use Resend to send transactional and newsletter emails to subscribers. Your email address is passed to Resend solely for the purpose of sending you emails you have requested.
• Hosting: Our website is hosted via Vercel (Vercel Inc., USA). Vercel may process request data (including IP addresses) as part of serving the website.

These third parties act as data processors on our behalf and are subject to appropriate data processing agreements. Where data is transferred to the USA, we rely on Standard Contractual Clauses or equivalent adequacy mechanisms. Each provider has its own privacy policy, which we encourage you to review.

7. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise any of these rights, please contact us using the details in Section 11.

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Email addresses (newsletter and tool sign-ups): Retained until you unsubscribe or request deletion. You can unsubscribe at any time using the link in any email we send.
• QWE Tracker entries and placements: Retained for as long as the service is operational or until you request deletion. Contact us to have your data removed.
• Analytics data (page views, session records): Retained for up to 26 months, after which it is deleted or anonymised.
• Calculator inputs: Not stored. Processed in real-time in your browser only.

9. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

11. Contact Information and Data Controller

The data controller for this website is The Qualified Path. If you have questions or concerns about this Privacy Policy or our data practices, or wish to exercise any of your rights under section 7, please contact us:

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.