Partner Program Privacy Policy

The controller of personal data described in this policy is the entity operating the QReportly platform (the "Controller", "we"). For GDPR requests relating to the partner program, use the contact details at the end of this document.

Processing related to referred organisations' client accounts and reports received through the platform is governed by the general QReportly Privacy Policy, where the Controller may act as controller or processor depending on context.

Within the partner program we may process:

We process data to: administer the partner account; attribute referrals; calculate and pay commissions; prevent fraud; send operational communications; comply with legal obligations (tax, AML where applicable).

Legal bases: contract performance (Art. 6(1)(b) GDPR); legitimate interest in securing the program and preventing abuse (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)); consent where required (e.g. non-essential cookies).

Data may be accessible to infrastructure providers (hosting, databases), transactional email services, payment processors for commissions, and security tools, under Art. 28 GDPR processing agreements.

We do not sell Partner data to third parties. Disclosure to authorities occurs only on legal obligation or valid request.

We retain partner account data for the duration of participation and thereafter for periods necessary to defend rights, meet tax obligations, and audit (typically up to 5 years after the relationship ends, unless law requires otherwise).

Technical logs and referral attribution data may be retained for the period necessary to resolve commission disputes.

Partners have the right of access, rectification, erasure, restriction, portability (where applicable), objection, and not to be subject to automated decision-making with significant legal effect, under GDPR conditions.

To exercise rights, contact us at the address below. You have the right to lodge a complaint with the competent supervisory authority.

If certain providers process data outside the European Economic Area, we apply appropriate safeguards (standard contractual clauses, adequacy decisions, or equivalent measures).