Legal
Policies & agreements
Every policy below is publicly available and versioned. The effective date is the day a given version took effect; previous versions are archived for the legal-retention period.
Privacy
Privacy Policy
How we collect, use, and protect personal data across our marketing site, product, and support channels. Aligned with GDPR, UK GDPR, CCPA / CPRA, LGPD, and India DPDP 2023.
Version 1.1Effective 2026-05-14Cookie Policy
What cookies and similar technologies we use, why, and how to control them. Aligned with GDPR, UK PECR, CCPA / CPRA, and LGPD.
Version 1.1Effective 2026-05-14QEHS Ethos — Mobile App Privacy
How the QEHS Ethos mobile app collects, uses, and protects data on iOS and Android. Required by App Store and Google Play disclosures; specific to the mobile client rather than the broader product.
Version 1.0Effective 2026-05-21
Contract
Terms of Service
The contract that governs use of qehsethos.com and the QEHS product for Starter and Business plans. Enterprise customers execute a separate Master Services Agreement.
Version 1.1Effective 2026-05-14Data Processing Addendum
Controller–processor terms for customers who process personal data in their tenants. Incorporates the EU Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum. Article 28 GDPR-compliant.
Version 1.1Effective 2026-05-14Master Services Agreement
The enterprise contract that supersedes the online Terms of Service. Template available under NDA; key terms summarised below.
Version 1.1Effective 2026-05-14
Platform
Acceptable Use Policy
What is and is not allowed on the QEHS platform. Incorporated by reference into the Terms of Service and Master Services Agreement.
Version 1.1Effective 2026-05-14Service Level Agreement
99.9% monthly uptime for the production service; service credits for missed targets. Applies to paid plans (Starter, Business, Enterprise).
Version 1.1Effective 2026-05-14