Privacy Notice

This page is maintained by ParagonQMS to answer common privacy questions about the client portal. It is not a legal contract — please contact us with any specific questions.

Who we are

ParagonQMS is an ISO consultancy. We operate the client portal at this domain to help businesses scope, request and manage ISO certification support.

What we collect

Account data — name, work email, password (hashed), job title, phone.
Company profile — company name, sector, address, size, certification status and similar business details you provide.
Onboarding answers — information you submit about your management system and objectives.
Operational records — pricing calculations, quote requests, payment preference, template downloads and audit timestamps.

We do not knowingly collect special-category personal data. We minimise personal data to what is needed for consultancy follow-up.

How we use it

To deliver the portal and respond to enquiries.
To prepare indicative pricing and formal quotations.
To provide downloadable templates you are entitled to.
To meet our legal and contractual obligations.

Legal basis

We process your data under the lawful bases of contract (to provide the portal you requested), legitimate interests (to follow up on consultancy enquiries), and consent where required.

Sharing

We use trusted service providers to host the portal, send email and store files. We do not sell your data. We may disclose data where required by law.

Retention

We retain account and engagement records for as long as you have an active ParagonQMS portal account. Specific retention periods, in line with UK GDPR data-minimisation principles:

Profile & account data — for the lifetime of your account, then deleted within 30 days of a verified deletion request.
Onboarding answers & pricing calculations — kept for the lifetime of the account; retained 12 months after closure in case you re-engage, then deleted.
Quotations, invoices & payment records — retained for 6 years after the financial year they relate to, to meet HMRC and accounting obligations.
Email logs & audit timestamps — kept for 24 months for security and deliverability monitoring.
Template download audit log — kept for the lifetime of the account; anonymised after closure.
Suppressed email addresses — kept indefinitely to honour unsubscribe and bounce signals.

We may keep minimal records beyond these windows where required by law (for example, tax or regulatory enquiries).

Account deletion & UK GDPR rights

You can request deletion of your portal account at any time. Signed-in members can submit a request from the Account deletion page in the portal, or by emailing portal@paragonqms.com (portal support) — for general ParagonQMS enquiries you can also use admin@paragonqms.com. We action verified requests within 30 days, subject to the legal-retention exceptions above, and confirm by email once complete.

Your rights

You can request access, correction, deletion or export of your personal data, and you can withdraw consent at any time. Contact admin@paragonqms.com or portal@paragonqms.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Contact

For portal support, account access, template access, pricing calculator queries, payment issues or client dashboard support, email portal@paragonqms.com or call +44 7872 664 776. For general ParagonQMS enquiries, email admin@paragonqms.com or call +44 208 350 8573.