Legal · Draft
QOCTS Privacy Notice
Draft Placeholder — Pending Professional Review
1. Data We May Collect
Account data: name, email, role/access level, account status.
Training data: programme/module/session progress, completion conditions, session scores, drift notes, next adjustments, reflections, final 90-day plan, QOCTS-E efficiency traces.
Feedback data: session, module, programme, burden, support, and facilitator feedback.
Institutional data: organisation name, contact, role, email, sector, cohort size, enquiry message.
Admin/review data: reviewer notes, support flags, internal review status, cohort assignment, readiness status.
Training data: programme/module/session progress, completion conditions, session scores, drift notes, next adjustments, reflections, final 90-day plan, QOCTS-E efficiency traces.
Feedback data: session, module, programme, burden, support, and facilitator feedback.
Institutional data: organisation name, contact, role, email, sector, cohort size, enquiry message.
Admin/review data: reviewer notes, support flags, internal review status, cohort assignment, readiness status.
2. Why We Collect Data
To provide the platform, track training progress, generate evidence reports, support pilot learning, review readiness, improve usability, identify support needs, manage institutional enquiries, and protect method fidelity.
3. Data Boundaries
QOCTS development data is designed for learning, support, progression, and review. It should not be used for punishment, coercive ranking, exclusion, or identity judgment.
4. Data Sharing
QOCTS does not currently sell participant data. Institutional sharing, if any, must be governed by consent, purpose limitation, minimum necessary access, and agreed data boundaries.
5. Data Retention
Retention periods are not finalised. Draft policy: retain pilot training data while the account or pilot remains active, then review retention before wider launch.
6. User Rights
Users may request access, correction, export, or deletion review through the data request form. The exact operational process will be finalised before commercial launch.
7. Subprocessors / Tools
Hosting / database provider · authentication provider · analytics provider if used · email provider if used · payment provider only if later activated · AI tooling only if later connected. To be finalised before launch.
8. Security
QOCTS uses role-based access controls, restricted admin routes, and user-specific data access where implemented. Security review remains part of launch readiness.
9. Contact
Submit a request via /data-request.