Privacy notice

Who is responsible

QuraZone Holdings LTD is the proposed Canadian operator and accountable organization for the Terms-to-Bill application. Its public address is 201 Selby Street, Nanaimo, British Columbia, V9R 2R2, Canada. Privacy questions and requests can be sent to info@qurazone.com.

The exact contracting entity will also appear in any proposal. This notice must be updated before activation if another QuraZone entity operates the application.

What we collect

The public application is limited to business contact and workflow information:

• first name, work email, company, role, and company website;
• ranges or categories describing engagement count, billing workflow, and accounting platform;
• the fit-check score and route if you completed the optional browser-only check;
• request and optional marketing-consent records, including date and notice version; and
• basic security and delivery records such as submission time, page version, referral host, IP address, and user agent when logged by the website or endpoint provider.

Do not submit contracts, invoices, client names, financial records, credentials, payment data, or other confidential material through the public form. The form has no upload field. A protected intake, if offered, uses a separate notice, agreement, and security review.

Why we use it

We use application information to:

• receive, secure, deduplicate, and answer your requested business-fit review;
• assess whether the proposed diagnostic appears suitable and prepare a scoped response;
• maintain consent, suppression, correction, incident, and audit records;
• protect the form and service from abuse; and
• send occasional pre-invoice control material only when you separately select the optional marketing checkbox.

The required checkbox authorizes contact about the request you initiated. It is not consent to unrelated marketing. Optional marketing consent can be withdrawn at any time using the unsubscribe method in a message or by emailing us.

Providers and transfers

The intended application workflow uses the QuraZone website host for page delivery, Tally BV for the embedded form and submission record, Render Services, Inc. for signed webhook validation, Resend for one internal application alert, and Google Workspace for the QuraZone mailbox and correspondence. Tally email notifications remain disabled. The alert is restricted to info@qurazone.com; the webhook does not send an applicant receipt or marketing message. These providers may process technical or business contact data outside British Columbia or Canada, including in the United States, under their service terms.

We do not sell application data. We disclose it only to service providers supporting the stated purposes, accountable QuraZone personnel, professional advisers where necessary, a successor under appropriate safeguards, or where law requires. The live form is configured without uploads, payments, partial submissions, respondent emails, or advertising connectors. Technical delivery records may be retained by the providers under their account and security policies.

Retention and your choices

The form provider is configured to delete submission data after 12 months. QuraZone will also delete or de-identify unsuccessful or inactive application records within 12 months of the last meaningful contact, unless a shorter request applies or a longer period is needed for a documented legal, security, dispute, or consent reason. Active commercial records follow the signed proposal and applicable recordkeeping requirements. Suppression records may retain the minimum email or identifier needed to honour an unsubscribe request.

You can ask about access, correction, deletion, withdrawal of optional marketing consent, or how a decision was made by contacting info@qurazone.com. Some records may be retained where law or a documented defence, security, or suppression need requires it; we will explain any applicable limit.

Security, cookies, and incidents

The workflow is designed to minimize collection, separate this project from other QuraZone services, restrict access, and preserve consent and change records. No online service can promise absolute security. The live endpoint must pass access, abuse, backup, restore, deletion, incident, and secret-handling checks before collection begins.

The Terms-to-Bill page does not require advertising cookies. Website hosting may create essential technical logs. Analytics and advertising connectors remain disabled unless this notice, consent controls, and release configuration are updated first.

If a privacy incident creates a real risk of significant harm, the accountable organization will assess notification and reporting obligations and keep the required record.

Contact and complaints

Email info@qurazone.com with the subject “Terms-to-Bill privacy.” You may also contact the applicable privacy regulator. In British Columbia, private-sector privacy oversight is provided by the Office of the Information and Privacy Commissioner for British Columbia; federal matters may fall under the Office of the Privacy Commissioner of Canada.

Material changes to collection, purpose, provider, retention, or marketing use require a new notice version and, where required, renewed consent.