Every published policy that governs how BetterQA and the people acting on its behalf operate. We keep them here so clients, prospects, candidates, suppliers, and regulators can read the same thing we do.
All policies apply across every country we operate in, are reviewed annually by the Managing Director, and route to a single confidential channel: [email protected].
How we collect, use, and protect information from website visitors, marketing contacts, candidates, clients, and Flows extension users. The master document for everything personal-data and platform-use related.
GDPR aligned →Your eight rights under the EU General Data Protection Regulation, how to exercise them, and how we respond. Includes processing legal bases, retention, and routes to file with ANSPDCP.
EU 2016/679Zero tolerance, no facilitation payments, zero gifts to public officials. Applies wherever we work.
UK Bribery Act 2010 + Law 78/2000 →KYC on every counterparty, no cash, sanctions and PEP screening, SARs filed to ONPCSB.
Law 129/2019 →Internal and external fraud, segregation of duties, quarterly review of expense and payment runs.
Internal control →EUR 100 receipt threshold, central register held by the Managing Director, no gifts during active negotiation.
Register keptHow we protect the end customers of our regulated financial services clients from harm caused by our work.
FCA / DORA aware →Annual statement, supplier due diligence, no labour brokers in our supply chain.
UK Modern Slavery Act 2015, s.54 →Tiered due diligence, ISO 27001 alignment, annual review of Critical and Important suppliers, exit plans.
ISO 27001 Annex 5.19-5.22 →Anonymous channel, no retaliation, 7-day acknowledgement, 90-day outcome. Internal and external routes.
EU 2019/1937 + Law 361/2022Any matter falling under any of these policies, including financial crime, conduct risk, supply-chain harm, fraud, or breaches of our own published rules, can be reported through a single confidential channel.
Anonymous reports are accepted. We acknowledge every report within 7 days and provide an outcome within 90 days, in line with EU Directive 2019/1937. Retaliation against anyone who reports in good faith is itself a breach of policy.
[email protected]Need help with software testing?
BetterQA provides independent QA services with 50+ engineers across manual testing, automation, security audits, and performance testing.