Privacy policy
Privacy notice
Last updated: 28 September 2026
Who we are
QMS Technology Ltd ("QMS", "we"), trading as QMS Compliance Toolkits, is the data controller for personal data collected through our website (toolkits.qmstech.co.uk), this online store and our product sales.
Company number: 16928590
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
ICO registration number: ZC163490
Contact: hello@qmstech.co.uk
What we collect and why
- Name and email when you download the free scorecard: To send you the scorecard (lawful basis: Contract)
- Your email, only if you tick the box at checkout: To send you occasional Building Safety Act updates (lawful basis: Consent (you can withdraw at any time))
- Name, email and billing details when you buy: To process your order, deliver the files and send you updates to your edition (lawful basis: Contract)
- Messages you send us: To reply to you (lawful basis: Legitimate interests)
Payments and delivery
Orders are processed securely by Shopify. QMS Technology Ltd is the seller. We never see or store your full card details. Shopify processes your information on our behalf. Shopify's privacy policy: https://www.shopify.com/legal/privacy
Website hosting (toolkits.qmstech.co.uk)
This website is hosted by Lovable. This website does not use advertising or tracking cookies. Our hosting sets two technical cookies: __cf_bm, a Cloudflare security cookie that helps protect the site from automated attacks and expires after 30 minutes of inactivity; and __dpl, set by our website hosting provider, Lovable.
Website analytics (toolkits.qmstech.co.uk)
We use Lovable's built-in visitor analytics to understand how this website is used, so we can improve it. It measures overall traffic (visits, page views, visit duration, traffic sources, device type and country), not individual people. It is not used for advertising and does not build profiles of visitors. It may set a cookie named session-id. You can object at any time, free of charge: email hello@qmstech.co.uk, or block cookies for this site in your browser settings.
Business contacts we contact about our services
If you work for an organisation involved in a building project, we may email you at your work address about our services. We obtain business contact details (name, job title, employer, work email and project details) from construction project information services, including Glenigan, and business contact databases, including Apollo, and from public sources. Our lawful basis is legitimate interests: telling construction professionals about Building Safety Act and CDM (Construction (Design and Management) Regulations 2015) services relevant to their projects. We keep these details for up to 2 years after our last contact, unless you become a customer. You can ask us to stop at any time by replying "no thanks" or emailing hello@qmstech.co.uk, and we will not contact you again.
How long we keep your data
- Building Safety Act update subscribers: until you unsubscribe.
- Customers: order records for 6 years from the end of the financial year they relate to, as UK law requires companies to keep accounting records.
Your rights
You can ask to access, correct or delete your data, object to processing, or withdraw consent at any time. Email hello@qmstech.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Online store and checkout
This store and its checkout are provided by Shopify. Shopify may set its own cookies on the store and checkout pages; see Shopify's privacy policy: https://www.shopify.com/legal/privacy
We do not sell your data or share it with anyone except the service providers named above.