Legal & Privacy

SQA Services, Inc. Legal.

Last modified:  2026-09-08

• Introduction

SQA Services, Inc. (“SQA,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Online Privacy Statement (“Statement”) explains what personal information we collect, how we use and share it, and the choices and rights available to you, including rights under the European Union’s General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), and other applicable U.S. state privacy laws.

This Statement applies to personal information collected through sqaservices.com, our STEPQ platform, and related SQA websites and services (collectively, the “Services”), unless a separate privacy notice applies.

• 1. Categories of Personal Information We Collect

We may collect the following categories of personal information:

• Identifiers — name, email address, postal address, phone number, unique online identifiers
• Professional information — job title, employer, business contact details
• Commercial information — services purchased or requested, transaction history
• Payment information — credit card or billing details, processed via a secure third-party payment processor
• Internet/network activity — IP address, device identifiers, browser type, pages visited, and online identifiers, collected through cookies and similar tracking technologies (see Section 11)
• Human Resources data — personal information concerning SQA employees, contractors, or job applicants only
• Sensitive personal information — limited to payment/financial account details necessary to process transactions; we do not intentionally collect other categories of sensitive personal information (e.g., government ID numbers, precise geolocation, health data) through the Services

We do not knowingly collect personal information from children under 13 (see Section 12).

• 2. How We Use Personal Information

We use personal information for the following business purposes:

• Providing, maintaining, and improving our services
• Billing, accounting, and account administration
• Responding to inquiries, questions, or requests for support
• Sending service-related communications and account notices
• Sending information about our products, services, events, or other marketing communications, where you have opted in or where otherwise permitted by applicable law 
• Analyzing usage to improve our websites, products, and services
• Information security, fraud prevention, and IT management
• Recruiting and administering Human Resources programs (employees and applicants only)
• Complying with legal obligations and enforcing our agreements

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

• 3. Legal Bases for Processing (GDPR)

Where our processing of your personal information is governed by the GDPR, we rely on one or more of the following legal bases:

• Performance of a contract — to perform services you have purchased or requested
• Compliance with legal obligations — where required by applicable law
• Consent — for optional activities such as joining a mailing list, which you may withdraw at any time by contacting privacy@sqaservices.com
• Legitimate interests — for purposes such as improving our services and maintaining business relationships, balanced against your rights and interests. You may object to processing based on legitimate interests at any time (see Section 10).

• 4. Sharing of Personal Information

We may disclose personal information to:

• Service providers who process personal information on our behalf, including application hosting, cloud storage, email, and CRM providers, under contracts requiring them to protect your information and use it only as instructed
• Professional advisors, auditors, and regulators, where necessary
• Government or law enforcement authorities, where required by law or to protect our legal rights
• A successor entity, in connection with a merger, acquisition, financing, or sale of assets

SQA does not sell personal information in exchange for money. We use cookies and similar tracking technologies — including advertising and analytics technologies that may disclose certain identifiers and browsing activity to our advertising and marketing partners in order to measure the effectiveness of our advertising and deliver information about our Services on other websites. Under the CPRA, certain uses of these technologies may constitute “sharing” for cross-context behavioral advertising. You can opt out using the “Do Not Sell or Share My Personal Information” link in our website footer or by enabling Global Privacy Control in a supported browser, which we honor as a valid opt-out request.

Where we transfer personal information outside the United States or European Economic Area, we rely on appropriate safeguards, including Standard Contractual Clauses where applicable, or another lawful transfer mechanism permitted under applicable law.

• 5. Human Resources Data

We collect and use Human Resources data in connection with employment and recruiting, including compensation and benefits administration, performance management, training, facility and network access, staffing client engagements, and evaluating candidates for employment. Human Resources data may be shared with service providers and other third parties that support these employment-related functions or our business operations, including** payroll, benefits administration, recruiting, information technology, legal compliance, travel, and professional advisory services, or where required by law or necessary to perform our contractual obligations. Such information is not disclosed or used for unrelated commercial purposes.

• 6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Statement, including to provide the Services, comply with our legal obligations, resolve disputes,enforce our agreements, and support our legitimate business operations. When retention is no longer necessary, we will delete, anonymize, or otherwise dispose of the information in accordance with our internal data retention procedures and applicable law.

• 7. Your Rights Under the GDPR

If the GDPR applies to our processing of your personal information, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request erasure of your personal information in certain circumstances
• Restrict our processing of your personal information in certain circumstances
• Object to processing based on our legitimate interests, including direct marketing
• Receive a copy of your personal information in a portable format and request its transfer to another provider, where technically feasible
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection supervisory authority

To exercise these rights, submit a request through our data privacy request form at https://na2.hs-data-privacy.com/request/SBzxNF-KNmJiDTN7wV1Yfw, or contact us at privacy@sqaservices.com. We will verify your identity before responding and will respond within the timeframes required by applicable law. We may decline a request where a valid legal exception applies, in which case we will explain why.

• 8. Your Rights Under the CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights regarding your personal information, subject to certain exceptions:

• Right to Know — the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it
• Right to Delete — request deletion of personal information we have collected from you
• Right to Correct — request correction of inaccurate personal information
• Right to Opt Out of Sale/Sharing — SQA shares certain identifiers and browsing activity with advertising partners for cross-context behavioral advertising, as described in Section 4. You may opt out using the “Do Not Sell or Share My Personal Information” link in our website footer or by enabling Global Privacy Control in a supported browser, which we honor as a valid opt-out request.
• Right to Limit Use of Sensitive Personal Information — request that we limit use of sensitive personal information to purposes necessary to provide the Services
• Right to Non-Discrimination — we will not deny services, charge different prices, or provide a different level of service because you exercised your privacy rights

We collect personal information from the following categories of sources: directly from you, from your employer or business contacts, from our service providers, and automatically through your use of the Services. In the preceding 12 months, we have collected the categories of personal information described in Section 1 for the business purposes described in Section 2, and have disclosed those categories to the service provider categories described in Section 4.

To exercise your California privacy rights, submit a request through our data privacy request form at https://na2.hs-data-privacy.com/request/SBzxNF-KNmJiDTN7wV1Yfw, or contact us at privacy@sqaservices.com. You may designate an authorized agent to make a request on your behalf, subject to identity verification.

• 9. Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive consumer privacy laws may have similar rights to those described above, including the right to access, correct, delete, and port personal information, and to opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, contact privacy@sqaservices.com.

• 10. How to Exercise Your Rights / Opting Out

You may exercise any of the rights described in this statement, or opt out of specific uses of your personal information, by submitting a request through our data privacy request form at https://na2.hs-data-privacy.com/request/SBzxNF-KNmJiDTN7wV1Yfw, or by contacting us at privacy@sqaservices.com. You may opt out of marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us directly. Opting out of marketing does not affect transactional or service-related communications necessary to your account or request.

• 11. Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate the Services, understand how visitors use our website, and support marketing and advertising efforts. These fall into three general categories:

• Essential cookies — required for the website and forms (including our HubSpot-powered request forms) to function
• Analytics cookies — help us understand site usage and improve the Services
• Advertising and marketing cookies — used by our advertising partners and us to measure the effectiveness of our marketing campaigns, understand visitor interests, and deliver relevant advertising across websites and online services. Certain uses of these technologies may constitute “sharing” under the CPRA (see Section 4)

You can manage cookie preferences through our cookie consent banner and through your browser settings, including by enabling Global Privacy Control, which we honor as a valid opt-out request. Disabling certain cookies may affect the functionality of the Services.

• 12. Privacy of Children

Our Services are not directed to children, and we do not knowingly collect personal information from children under 13 (or a higher age threshold where required by applicable state law). If we learn we have collected personal information from a child without appropriate consent, we will delete it.

• 13. Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. These safeguards may include, where appropriate, the use of encryption for data transmitted over public networks, access controls, and other security measures appropriate to the nature of the information we process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• 14. Changes to This Statement

We may update this Statement from time to time. We will post the revised Statement with an updated “Last modified” date and, where required by law, provide additional notice of material changes.

• 15. Contact Us

If you have questions about this Statement or wish to exercise your privacy rights, please contact us at:

SQA Services, Inc.
Attn: Privacy Team
425 Via Corta, Suite 203
Palos Verdes Estates, CA 90274
Email: privacy@sqaservices.com