Last updated: 3 September 2026

Who we are

Qualter+Co is a trading name of Qualterandco Limited, a company registered in England and Wales (company number 17375553). Our registered office is 5 Crescent East, Thornton Cleveleys, Lancashire, FY5 3LJ.

We are the data controller for the personal information described in this notice. That means we decide why and how your information is used.

If you have any questions about this notice, or about how we handle your information, contact us at mark@qualterco.com.

We are registered with the Information Commissioner’s Office (ICO), registration number ZC213792.

What this notice covers

This notice explains what personal information is collected through qualterco.com, including the Five-Lens Diagnostic, the Fix Library subscription and the Reckoning, and through client work. It details how that information is used and what rights individuals have over it.

Information we collect

When you complete the Five-Lens Diagnostic

The diagnostic is hosted by Tally. When you complete it we collect your name, your email address, and the answers you give about your business and your situation. You choose what to tell us. You do not need to include anything you would rather keep private in order to get a useful result.

When you subscribe to the Fix Library

When you subscribe we collect your name, your email address and a password for your account, which are held by FrameAuth. Your subscription status and a record of your payments are held by Stripe. Card details are entered with Stripe and never reach us.

When you book a Reckoning

When you book a Reckoning we collect your rerun diagnostic answers, the notes taken during the session, and a record of your payment.

When you use the Exposure Register

We collect nothing. What you type into the Exposure Register at register.qualterco.com is saved in your own browser and is never sent to us or to anyone else. Netlify hosts the page; it does not receive what you enter on it. If you clear your browser or change machine, that information is gone unless you have downloaded a copy yourself.

When you become a client

If you go on to book an Operator Review, we collect the information you share with us during that work. Depending on your situation this may include financial information about your business, information about your team, and commercial information about your plans. We also collect the information needed to invoice you and take payment.

When you contact us

If you email us or otherwise get in touch, we keep a record of that correspondence.

When you visit the website

Our website uses cookies. Seven are necessary to keep the site working and to keep Fix Library subscribers signed in. Two are analytics cookies, which are only set if you accept them through the banner shown on your first visit. You can change or withdraw your choice at any time. See the Cookies section below.

How we use your information, and why we are allowed to

To send you your diagnostic result. When you complete the diagnostic you are asking us to send you something, so we use your information to prepare and send that result. Our lawful basis is that this is necessary to take steps at your request before entering into a contract, and our legitimate interest in responding to enquiries about our services.

To send you follow-up emails about our services. Where you have agreed to receive them. Our lawful basis is your consent. You can withdraw that consent at any time using the unsubscribe link in any email, or by emailing us. Withdrawing consent does not affect anything we did before you withdrew it, and it does not stop us sending you the diagnostic result you asked for.

To give you access to the Fix Library. When you subscribe we set up an account for you and keep it open for as long as you are paying. Our lawful basis is performance of our contract with you.

To carry out a Reckoning. Comparing your rerun diagnostic against your original answers is the substance of what you have bought, so we keep those original answers for that purpose. Our lawful basis is performance of our contract with you.

To carry out an Operator Review. Our lawful basis is performance of our contract with you.

To keep proper business records. We keep records of the work we do and the payments we receive because we are required to. Our lawful basis is compliance with a legal obligation, and our legitimate interest in being able to defend a claim if one is ever made.

To improve what we offer. We look at diagnostic responses in aggregate to understand which problems come up most often and to improve the diagnostic itself. Our lawful basis is our legitimate interest in improving our services. Where we use responses this way we do not identify individuals.

Who we share your information with

We do not sell your information and we do not share it for anyone else’s marketing.

We use a small number of service providers who process information on our behalf. Each is bound by a contract that requires them to protect your information and to use it only on our instructions. They are:

• Framer, which hosts our website

• Netlify, which hosts the Exposure Register page (your entries are stored only in your own browser)

• Tally, which hosts the Five-Lens Diagnostic form

• Google, which provides our email, calendar, Google Meet and Google Drive through Google Workspace, and Google Analytics, which measures how the website is used

• FrameAuth, which manages Fix Library accounts and subscriber access

• Stripe, which processes payments

• Calendly, which handles session bookings

• Buttondown, which sends our writing to subscribers

• Cookiebot (Usercentrics), which manages cookie consent

• Notion, where our records are kept

We also use professional advisers, such as our accountant, where necessary.

We will disclose information if we are required to by law, by a regulator, or by a court.

Information held outside the UK

Some of our service providers are based outside the UK, principally in the United States. Where information is transferred outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law. Depending on the provider this is the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision covering the country concerned.

If you would like more detail about the safeguards applying to a particular transfer, email mark@qualterco.com.

Confidentiality of client information

If you engage us for an Operator Review, we will see information about your business that is commercially sensitive. We treat everything you tell us as confidential. We do not discuss client work with other clients, we do not use client examples publicly without express permission, and we do not disclose your involvement with us to anyone.

How long we keep information

Diagnostic responses: 24 months from completion, or for as long as you hold an active Fix Library subscription, whichever is longer, so that a Reckoning can be run against your original answers. Retained with client records if an engagement follows.

Fix Library accounts: for as long as the subscription is active. When a subscription ends or lapses, access is revoked but the account itself remains, so that it can be restored if you return. We delete accounts on request, and periodically remove accounts that have been inactive for more than 24 months. Deletion is immediate and irreversible: no copy is retained and it cannot be recovered.

Subscription and payment records: seven years, as required for tax and accounting purposes.

Reckoning notes: seven years, held with client records.

Marketing contacts: until you unsubscribe, and then a minimal record of your unsubscribe so that we do not contact you again by mistake.

Client records: seven years from the end of our engagement. This reflects our tax record-keeping obligations and the period during which a claim could be brought.

Correspondence: two years, unless it forms part of a client record.

Analytics data is held by Google for fourteen months.

When a retention period ends we delete the information or anonymise it so that it can no longer identify you.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you

• ask us to correct information that is wrong or incomplete

• ask us to delete information, in certain circumstances

• ask us to restrict how we use your information, in certain circumstances

• object to us using your information where we rely on legitimate interests

• ask us to transfer your information to you or another organisation, in certain circumstances

• withdraw your consent at any time, where we rely on consent

To exercise any of these rights, email mark@qualterco.com. We will respond within one month. There is no charge.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first at mark@qualterco.com. We will acknowledge your complaint within 30 days and will do our best to put things right.

You also have the right to complain to the Information Commissioner’s Office at any time. You do not need to raise it with us first.

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 ico.org.uk

Cookies

Our website uses nine cookies. Seven are necessary: they keep the site working and keep Fix Library subscribers signed in. Two are analytics cookies set by Google Analytics, which measure how the site is used. The analytics cookies are only set if you accept them. We do not use advertising cookies.

We ask for your consent before setting any non-essential cookie, and you can withdraw it at any time through the cookie settings link on any page.

Changes to this notice

We may update this notice from time to time. When we do, we will change the date at the top. If we make a change that materially affects how we use your information, we will tell you directly where we can.