Legal

Privacy policy

The short version: this website sets no cookies, runs no analytics and loads nothing from third parties. We process personal data only when you choose to give it to us.

Who we are

Checkpoint Quality Assurance ("we") operates checkpointqa.co.uk and the CheckpointQA eQMS platform. For data submitted through this website, we are the data controller. To contact us about anything in this policy, use the contact form.

What this website collects

Nothing, by default. Browsing this site involves no cookies, no analytics, no advertising pixels and no third-party requests of any kind. Our hosting provider (Netlify) processes standard server logs — IP address, user agent, requested pages — for security and operation of the service.

Cookies

This website sets no cookies and uses no browser storage. There is nothing to consent to, which is why you will not see a cookie banner.

When you contact us

If you request a walkthrough, we receive the details you enter (name, work email, organisation, where you are with ISO 9001, optionally your role, and anything you ask us to cover), together with your consent to being contacted about the request. The form is processed by Netlify Forms acting as our processor. We use your details solely to arrange and follow up on your walkthrough. Enquiry data is retained while the conversation is live and deleted when no longer needed. We do not sell your data or use it for advertising.

When you use the readiness check

The ISO 9001 readiness self-assessment scores your answers in your browser; nothing is sent to us while you use it. Only if you choose to request the full breakdown do we receive the email address and company name you enter, together with the answers you selected. We use these solely to prepare and send your assessment and to follow up about it. As with the contact form, submissions are processed by Netlify Forms as our processor, and are deleted when no longer needed.

When you subscribe

There is currently no online checkout on this site, so we do not collect payment details through it. Subscriptions are arranged directly with us and invoiced separately; we hold only your business name, contact details and subscription status. If we introduce online payment in future, card details will be handled by the payment provider and will not touch our systems, and we will update this notice before that goes live.

Platform customers

Data you put into the CheckpointQA platform is governed by the platform agreement provided at workspace provisioning, including its published sub-processor register (Cloudflare, Clerk, Resend, Anthropic — see Security & Trust).

Legal basis

We process contact-form and readiness-check data on the basis of legitimate interest in responding to you, and subscription data as necessary to perform a contract with you.

International transfers

Some of the processors we rely on are based outside the UK, including in the United States (for example, our hosting and payment providers). Where personal data is transferred internationally, it is protected by appropriate safeguards — such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an adequacy decision — as applicable to each provider.

Your rights

Under UK GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability. To exercise any of these, contact us. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Last updated 4 July 2026.