Privacy Policy

1. Who we are

QAonTOP is a software quality engineering provider with a Canadian office in Calgary, Alberta and a delivery centre in Ahmedabad, India. For the purposes of this policy, QAonTOP is the data controller.

2. What we collect

We collect only what you type into one of our two forms, plus a small amount of technical data needed to stop automated abuse.

Contact form

• Full name, work email address, company name
• Phone number (optional)
• Service you are asking about (optional)
• Your message

Hire Expert form

• Full name, work email address, company name
• Engagement type and the skills or roles you need
• Your description of the work

Collected automatically with each submission

• Date and time of submission, and which form it came from
• The page address the form was submitted from
• A spam-check token issued by hCaptcha, and the IP address it was issued to, used solely to distinguish people from bots

We do not use advertising or analytics cookies on this site, and we do not track you across other websites.

3. Why we collect it, and our lawful basis

• To reply to your enquiry and prepare a scope, team shape or quote. Basis: your consent, given by ticking the box on the form, and our legitimate interest in responding to a business enquiry.
• To prevent spam and abuse of our forms. Basis: legitimate interest in keeping the service available.
• To keep a record of enquiries for internal reference during the sales conversation. Basis: legitimate interest.

We do not use your form submission to send marketing email. If we later offer a newsletter, it will have its own separate opt-in with an unsubscribe link in every message, as CASL requires.

4. Who processes it on our behalf

Three service providers handle data as part of this website working. Each is bound by its own terms and processes data only as instructed.

• Web3Forms — receives your submission and delivers it to our inbox.
• hCaptcha — runs the spam check before a submission is accepted.
• Our email provider — stores the resulting message in the contact@qaontop.ca mailbox.

We never sell personal information, and we do not share it with third parties for their own purposes.

5. International transfers

Enquiries reach our teams in both Canada and India, so your information may be accessed from either country, and our providers may process it in the United States or the European Union. Where information about people in the EU, UK or Switzerland is transferred outside those regions, we rely on Standard Contractual Clauses or an equivalent safeguard. You can ask us which one applies to your enquiry.

6. How long we keep it

Enquiries that do not lead to a project are deleted within 24 months. Enquiries that become client work are retained for the life of the engagement plus the period required by our contractual, tax and audit obligations. Spam-check data is short-lived and held only by hCaptcha under its own retention terms. You can ask us to delete your enquiry sooner at any time.

7. Your rights

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you and get a copy of it
• Have inaccurate information corrected
• Have your information deleted
• Withdraw consent, which stops us contacting you further
• Object to or ask us to restrict a particular use
• Receive your information in a portable format
• Not be discriminated against for exercising any of these rights

Email contact@qaontop.ca with the subject line "Privacy request" and we will respond within 30 days. We may need to confirm your identity first. Under PIPEDA you can escalate an unresolved concern to the Office of the Privacy Commissioner of Canada; in the EU or UK you may complain to your local supervisory authority.

8. Security

The site is served over HTTPS and form submissions are encrypted in transit. Access to the enquiry inbox is restricted to staff who need it and protected by multi-factor authentication. No method of transmission is completely secure, so please do not send credentials, patient data, cardholder data or other sensitive material through the forms — we will arrange a secure channel for that once we are in touch.

9. Cookies

This site sets no advertising, analytics or profiling cookies. hCaptcha may store a short-lived technical token needed to run the spam check; it is not used to identify or track you. If we add analytics in future, this policy will be updated and, where required, a consent banner shown before any non-essential cookie is set.

10. Children

This is a business-to-business website. We do not knowingly collect information from anyone under 16. If you believe a child has submitted information, email us and we will delete it.

11. Changes to this policy

If we change how we handle personal information, we will update this page and revise the date at the top. Material changes affecting how we use existing enquiries will be communicated to the affected people directly.