Privacy Policy

Last updated: September 9, 2026

This Privacy Policy explains how Qualavo collects, uses, stores and protects personal data when you visit qualavo.com, purchase or download a product, subscribe to emails, contact us or otherwise interact with our website and services.

Qualavo is committed to processing personal data lawfully, fairly and transparently in accordance with applicable data-protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

Qualavo is operated by:

Trading name: Qualavo
Sole proprietor registration number: 40764483
Registering authority: National Tax and Customs Administration of Hungary (NAV)
Tax number: 66910398-1-33
Email: support@qualavo.com
Website: qualavo.com

For the purposes of applicable data-protection law, Qualavo is the data controller for personal data processed through its website and services, unless otherwise stated.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

• visits to qualavo.com;
• purchases of Qualavo digital products;
• checkout and payment processing;
• digital product delivery;
• QA Lite requests and email subscriptions;
• customer support and contact forms;
• complaints, refunds and payment disputes;
• website security and fraud prevention; and
• compliance with legal, tax, accounting and regulatory obligations.

3. Personal Data We May Collect

Depending on how you interact with Qualavo, we may collect the following categories of personal data.

Website and Technical Data

When you visit the website, technical information may be processed automatically, such as:

• IP address;
• browser type and version;
• device and operating-system information;
• date and time of access;
• requested pages or resources;
• referrer information;
• session identifiers;
• cookie information; and
• security and server-log information.

This data may be processed to operate, secure and troubleshoot the website.

Purchase and Order Data

When you place an order, we may process:

• first and last name;
• email address;
• billing address;
• country or region;
• postal code;
• city;
• telephone number if provided;
• products purchased;
• purchase price;
• order number;
• order date and status;
• payment method information;
• transaction identifiers;
• refund or dispute information;
• download access information; and
• the consent and acknowledgement recorded during checkout in relation to immediate supply of digital content.

WooCommerce stores order information such as products ordered, customer contact details, billing information and payment-method information in the site’s database.

4. Purposes and Legal Bases for Processing

We process personal data only where we have an appropriate legal basis.

Processing Orders and Delivering Products

We process order, billing, contact and delivery information where necessary to:

• process your purchase;
• confirm the order;
• collect payment;
• provide access to the purchased digital product;
• provide transactional emails;
• manage refunds or disputes; and
• provide purchase-related customer support.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

Legal, Tax and Accounting Obligations

Certain transaction, invoice and customer information may need to be retained to comply with applicable accounting, tax, consumer-protection and other legal obligations.

Legal basis: compliance with a legal obligation.

Customer Support and Contact Requests

If you contact Qualavo, we process the information you provide in order to answer your question, resolve a technical or purchase issue, or handle a complaint.

Legal basis: performance of a contract, steps taken at your request, and/or Qualavo’s legitimate interests in providing customer support and managing its business.

Website Security and Fraud Prevention

Technical, transactional and security-related data may be processed to prevent fraud, abuse, unauthorised access, payment fraud and other security incidents.

Legal basis: legitimate interests in protecting Qualavo, customers, payments and website infrastructure, and where applicable compliance with legal obligations.

Legitimate interest is a recognised GDPR legal basis where the controller’s interests do not override the individual’s rights and freedoms.

5. Payments

Qualavo uses WooPayments to process payments.

Payment processing may require information such as:

• your name;
• email address;
• billing address;
• country;
• transaction amount;
• transaction identifiers; and
• other information necessary to authorise, process, secure or refund a payment.

WooPayments is built in partnership with Stripe, and payment and billing information necessary to process or support a transaction may be provided to the payment provider.

Qualavo does not directly store your complete credit or debit card number or card security code. WooPayments uses hosted payment fields so sensitive card details are handled in the payment provider’s secure environment rather than being stored in Qualavo’s WordPress database.

Payment providers may also process information for fraud prevention, regulatory compliance and transaction-security purposes in accordance with their own legal obligations and privacy notices.

6. QA Lite and Email Communications

If you request QA Lite or subscribe to Qualavo emails, we may process:

• your email address;
• subscription status;
• confirmation status;
• subscription date;
• email delivery information; and
• where enabled, engagement information such as email opens or link clicks.

Qualavo currently uses MailPoet to manage subscriber lists, confirmation emails, automated emails and other email communications.

The legal basis for sending optional marketing or promotional email communications is normally your consent.

You may withdraw your consent at any time by using the unsubscribe link contained in marketing emails or by contacting:

support@qualavo.com

Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.

MailPoet supports subscriber data such as email addresses, subscription information and, depending on configuration, open/click statistics. Its sending service also processes email-related data to provide the service.

QA Lite Delivery

Where you provide your email address specifically to request the free QA Lite resources, your email address may also be processed as necessary to:

• confirm your request;
• deliver the requested download; and
• provide essential information directly related to that request.

Receiving optional promotional or marketing communications is handled according to the consent presented at the point of subscription.

7. Contact Form and Support Emails

When you use the contact form or send an email to support@qualavo.com, Qualavo may process:

• your name;
• email address;
• subject;
• message content; and
• any other information you voluntarily provide.

This information is used to respond to your request and, where relevant, maintain records of customer-support or contractual communications.

Please do not send unnecessary sensitive personal information or complete payment-card details through the contact form or by email.

8. Website Hosting

The website and associated infrastructure are hosted using services supplied by:

Hostinger International Ltd.
61 Lordou Vironos Street
Larnaca 6023
Cyprus
VAT registration number: CY10301365E

Hosting infrastructure may process technical and stored website data where necessary to provide hosting, security, backup, database, server and related technical services.

9. Cookies and Similar Technologies

Qualavo may use cookies and similar technologies that are necessary for the website, checkout and ecommerce functions to operate.

WooCommerce may use essential cookies such as:

woocommerce_cart_hash
woocommerce_items_in_cart
wp_woocommerce_session_...

These help WooCommerce maintain cart and session functionality. WooCommerce states that these core storefront cookies do not themselves store personal information.

Payment providers may also use cookies or similar technologies for payment processing, authentication, security and fraud prevention.

If Qualavo introduces non-essential analytics, advertising or marketing technologies that require consent under applicable law, appropriate consent controls and information will be provided.

10. Who May Receive Personal Data

Personal data may be disclosed only where reasonably necessary to organisations involved in operating Qualavo, including:

• website and email hosting providers;
• WooCommerce-related service providers;
• payment processors and payment-security providers;
• MailPoet and email-delivery infrastructure;
• accounting, tax or invoicing service providers where applicable;
• professional legal or accounting advisers where necessary;
• authorities where disclosure is required by law; and
• technical providers required to maintain and secure the website.

We do not sell personal data to advertisers or data brokers.

Service providers may act as processors, independent controllers or joint controllers depending on the specific processing activity and applicable contractual arrangements.

11. International Data Transfers

Some service providers or their subprocessors may process personal data outside Hungary or outside the European Economic Area.

Where GDPR rules governing international transfers apply, transfers must be based on a lawful transfer mechanism, such as:

• an adequacy decision adopted by the European Commission;
• approved Standard Contractual Clauses;
• another legally recognised safeguard; or
• an applicable GDPR derogation where permitted.

The exact location and safeguards may depend on the service provider and processing activity.

The GDPR requires individuals to be informed where personal data is transferred outside the EU and about relevant safeguards.

12. Data Retention

Qualavo retains personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable contractual, legal, tax, accounting, consumer-protection and dispute-resolution requirements.

Retention periods therefore depend on the type and purpose of the data.

Order and Transaction Data

Order, payment, invoice and related transaction information may be retained for the period required by applicable tax, accounting and other legal requirements and, where appropriate, for the establishment, exercise or defence of legal claims.

Support Communications

Support and complaint correspondence may be retained for as long as reasonably necessary to resolve the issue and meet applicable contractual or legal requirements.

Email Subscribers

Email-subscription data may generally be retained while you remain subscribed and for a reasonable period afterwards where necessary to demonstrate consent, manage unsubscribe requests or comply with legal obligations.

If you unsubscribe, Qualavo may retain limited suppression information where necessary to ensure that marketing emails are not sent to you again.

Technical and Security Data

Technical logs may be retained for periods reasonably necessary for security, diagnostics, abuse prevention and website operation.

GDPR requires personal data to be kept no longer than necessary and requires the privacy notice to explain the retention period or the criteria used to determine it.

13. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• obtain information about how your personal data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• object at any time to processing for direct marketing;
• request data portability where applicable;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent data-protection authority.

These rights are provided by the GDPR subject to the circumstances and legal basis of each processing activity.

To exercise your rights, contact:

support@qualavo.com

Qualavo may request reasonable information to verify your identity before acting on a request.

Requests will be handled without undue delay and within the period required by applicable data-protection law. Under the GDPR, requests generally must be answered no later than one month, subject to permitted extensions in appropriate cases.

14. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent supervisory authority.

The Hungarian supervisory authority is:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, P.O. Box 9
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
Website: naih.hu

These are the NAIH’s current published contact details.

You may also have the right to complain to another competent supervisory authority where permitted by applicable law.

15. Security

Qualavo takes reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• alteration;
• destruction; and
• unauthorised disclosure.

However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.

The GDPR requires appropriate measures to protect the integrity and confidentiality of personal data.

16. Automated Decision-Making and Fraud Detection

Qualavo does not itself use customer personal data to make solely automated decisions that produce legal or similarly significant effects on individuals.

Payment and fraud-prevention providers may use automated systems to assess payment risk or detect potentially fraudulent transactions.

For example, WooPayments uses Stripe’s payment infrastructure and fraud-protection technology.

Such providers may process relevant payment information in accordance with their own privacy notices and legal obligations.

17. Children’s Privacy

Qualavo products and services are intended for professionals, businesses and persons capable of entering into the relevant transactions.

Qualavo does not knowingly seek to collect personal data from children for marketing purposes.

If you believe that personal data relating to a child has been provided to Qualavo inappropriately, contact:

support@qualavo.com

18. Third-Party Links

Qualavo may contain links to websites or services operated by third parties.

Qualavo is not responsible for the privacy practices of third-party websites. You should review the applicable privacy notice when visiting an external service.

19. Changes to This Privacy Policy

Qualavo may update this Privacy Policy to reflect changes in:

• the website;
• products and services;
• service providers;
• processing activities; or
• applicable legal requirements.

The current version will be published on qualavo.com with its latest update date.

Material changes may be communicated through the website or other appropriate means where required.

20. Contact

For questions about this Privacy Policy or the processing of your personal data, or to exercise a data-protection right, contact:

Operated by Qualavo
Email: support@qualavo.com
Website: qualavo.com