Privacy Policy
How we handle the personal data you send us through this website.
Last updated: 31 July 2026
1. Who we are
RLM Quality Management LTD (“RLM”, “we”, “us”) is a company registered in the Republic of Cyprus, providing independent QA/QC inspection, auditing and client representation services worldwide. We are the data controller for the personal data described in this policy.
For anything relating to your personal data, contact info@rlmqualitymanagement.com.
2. What we collect and why
| Where it comes from | What we collect | Why | Lawful basis |
|---|---|---|---|
| Request a proposal form | Name, company, email address, phone number (optional), service required, project details you choose to provide | To assess your enquiry, reply to it and prepare a proposal | Steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR), and your consent |
| Join our team form | Name, email address, base location, discipline, certifications, your CV, and any certificates you upload | To assess your suitability for inspection assignments and to contact you when a matching assignment arises | Your consent (Art. 6(1)(a) GDPR), given by ticking the consent box on the form |
| Email to us | Whatever the message contains | To respond and to keep a record of our correspondence | Legitimate interests in managing business correspondence (Art. 6(1)(f) GDPR) |
| Web server logs | IP address, browser type, pages requested, timestamps | Security, abuse prevention and keeping the site available | Legitimate interests in securing our systems (Art. 6(1)(f) GDPR) |
We do not ask for, and would prefer you not to send, special categories of personal data (health, religion, trade union membership, and so on). If your CV contains such data, we treat it as provided with your explicit consent under Art. 9(2)(a) GDPR and use it only to assess your application.
3. Cookies and tracking
This website sets no cookies and runs no analytics, advertising or tracking scripts. There is nothing to consent to and nothing to opt out of.
The site does load typefaces from Google Fonts. When your browser fetches them, Google receives your IP address and browser information. If you prefer to avoid this, a content blocker will prevent the request — the site remains fully readable with system fonts.
4. Who else sees your data
We do not sell personal data and we do not share it for marketing. We use a small number of service providers who process data on our instructions:
- Netlify — website hosting and form processing. Form submissions are stored in our Netlify account and forwarded to our mailboxes.
- Microsoft 365 — our email, where enquiries and applications are received and stored.
We may also disclose personal data where we are legally required to do so, or where necessary to establish, exercise or defend legal claims.
5. Transfers outside the EEA
Some of the providers above operate infrastructure outside the European Economic Area. Where personal data is transferred outside the EEA, it is protected by the European Commission’s Standard Contractual Clauses or an equivalent safeguard recognised under Chapter V of the GDPR. You can request a copy of the relevant safeguard from us.
6. How long we keep it
- Client enquiries and proposals: 24 months from our last substantive contact, unless a contract is concluded — in which case retention follows our contractual and statutory accounting obligations.
- Inspector applications and CVs: 24 months from the date of submission or from our last contact with you, whichever is later. We contact you before deletion if your profile is still active. You can ask us to delete it sooner at any time.
- Server logs: retained by our host for a short rolling period for security purposes.
7. How we protect it
The site is served over HTTPS with HSTS enforced. Access to submissions is limited to the people at RLM who need it to do their job, through individually authenticated accounts with multi-factor authentication. Uploaded CVs and certificates are treated as confidential and are never forwarded to a client without your prior agreement.
8. Your rights
Under the GDPR you have the right to:
- ask what personal data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, email info@rlmqualitymanagement.com. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
If you are not satisfied with how we have handled your data, you may complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the supervisory authority in your country of residence.
9. Changes
If we change this policy we will update the date at the top of this page. Material changes affecting people already on our inspector roster will be notified by email.