Legal

Privacy Policy

Last Updated: July 2026

Quick Summary

Qualabs is a specialized media technology engineering partner that helps organizations design, build, and operate mission-critical video platforms, streaming infrastructure, and media workflows. When you visit qualabs.com, we collect minimal data to understand how our site is used and to communicate with people interested in our engineering services and industry expertise. You have full control over what data we collect and how we use it.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have regarding your data. If you have questions, contact us at legal@qualabs.com.


1. Information We Collect

We collect data in three distinct ways:

Google Analytics (Automatic Tracking)

When you visit qualabs.com, we automatically collect information through Google Analytics to understand how visitors interact with our website.

What we collect:

  • IP address and approximate location
  • Device type, browser, operating system
  • Pages visited, time spent on each page
  • Links clicked, interaction patterns
  • Referring website

Why we collect it:

  • Understand traffic patterns and user behavior
  • Identify which content is most valuable
  • Improve website performance and user experience
  • Track campaign effectiveness

How long we keep it:

  • Session-based data is deleted when you close your browser
  • Historical data is retained in Google Analytics for 14 months
  • After that, data is automatically deleted

Your control:

  • You can reject Analytics tracking via the cookie banner on our website
  • You can opt-out at any time by adjusting your cookie preferences
  • If you reject Analytics, we do not load Google Analytics on your device

We manage cookies and similar technologies through Google Consent Mode v2, applied on a region-aware basis. Cookies are grouped into three categories: Necessary (always on), Analytics, and Marketing. For visitors in the EEA and UK, no Analytics or Marketing cookies are loaded until you opt in. For visitors in the United States, these categories are active by default and you can opt out at any time, including through the "Do Not Sell or Share My Personal Information" control in your cookie preferences. Your choice is saved on your device and can be changed anytime with the button above. For the full list of cookies and local storage we use, see our Cookie Policy.

Legal basis (GDPR): Article 6(1)(a) — your consent via the cookie banner

Contact / Message Form via FormSubmit.co

When you send us a message through the contact form on qualabs.com, your submission is relayed to us by FormSubmit.co, a third-party form-processing service that forwards the contents of the form to us by email at info@qualabs.com. Submitting the contact form does not add you to any marketing list or newsletter.

What we collect:

  • Your name and email address
  • Any message or details you choose to include

Why we collect it:

  • Respond to your inquiry or support request
  • Follow up about our engineering services if you ask us to

How long we keep it:

  • Contact inquiries are retained for 1 year, then deleted
  • You can request earlier deletion at any time (see "Your Rights" below)

Legal basis (GDPR): Article 6(1)(a) — your consent when you voluntarily submit the form

Newsletter Subscription via Mailchimp (Voluntary Opt-In)

We do not automatically add website visitors to our mailing list. We only collect email addresses from people who explicitly choose to subscribe to our newsletter.

How we collect it:

  • You fill out our newsletter subscription form on qualabs.com
  • You provide your email address (and optionally your name)
  • You confirm you want to receive emails from us
  • Your request reaches us by email through our form provider, FormSubmit.co
  • We then add you to our Mailchimp audience, which delivers the newsletter and lets you unsubscribe at any time

What we collect:

  • Email address
  • First name and last name
  • Company name
  • Date of subscription
  • Email engagement metrics (opens, clicks, unsubscribes)

Why we collect it:

  • Send you relevant content about streaming infrastructure and media technology
  • Keep you informed about Qualabs services, engineering insights, and industry updates
  • Share knowledge about live streaming operations, CDN strategy, and video delivery
  • Invite you to events, webinars, and industry collaborations relevant to streaming technology

Who receives emails:

  • Companies with active interest in streaming infrastructure
  • People who explicitly subscribe to our newsletter
  • Business contacts we've met at industry events (with consent)

We do not send emails to:

  • Random website visitors
  • People who didn't explicitly subscribe
  • Individuals who have no connection to our industry or services

How long we keep it:

  • Until you unsubscribe or request deletion
  • You can unsubscribe anytime by clicking the link in any email
  • If you unsubscribe, we remove you immediately from all future communications

Your control:

  • Every email includes an "Unsubscribe" link
  • You can manage preferences or unsubscribe instantly with one click
  • No questions asked, instant removal from our list

Legal basis (GDPR): Article 6(1)(a) — your explicit consent when you subscribe


2. Data Transfers & International Storage

Qualabs is based in Uruguay. However, some of our data processors are based in the United States, which is classified as having potentially inadequate data protection standards under GDPR.

Where data is stored:

  • Primary infrastructure: Uruguay
  • Backup and processing: Amazon Web Services (AWS) — USA
  • Google Analytics: Google servers — USA
  • Mailchimp: Mailchimp servers — USA
  • FormSubmit.co: form-relay servers — USA

How we protect your data in transit:

  • All transfers to the USA are protected by EU Standard Contractual Clauses (SCC) pursuant to GDPR Article 46
  • These are binding legal agreements that ensure your data receives equivalent protection
  • Qualabs has executed Data Processing Agreements (DPAs) with Google and Mailchimp

Your awareness: by using qualabs.com, you acknowledge and consent to the transfer of your personal data to the United States as described above.


3. Third-Party Service Providers

We share your data with the following service providers to help us operate qualabs.com:

Google Analytics

  • Provider: Google LLC (Google Ireland Limited for EU processing)
  • Location: USA (with EU data center option)
  • Purpose: Website traffic analysis, user behavior tracking
  • Data shared: IP address, browser info, pages visited, referrer data
  • DPA: Yes, in place
  • Privacy Policy: policies.google.com/privacy

Mailchimp

  • Provider: Mailchimp (Intuit Inc.)
  • Location: USA
  • Purpose: Email marketing, newsletter delivery, engagement tracking
  • Data shared: Email, name, company, engagement metrics
  • DPA: Yes, in place
  • Privacy Policy: mailchimp.com/legal/privacy

FormSubmit.co

  • Provider: FormSubmit (form-to-email relay service)
  • Location: USA
  • Purpose: Relays contact / message form submissions to Qualabs by email
  • Data shared: Name, email, and message content submitted via the contact form
  • Data processing terms: See FormSubmit's terms and privacy policy
  • Privacy Policy: formsubmit.co

Amazon Web Services (AWS)

  • Provider: Amazon Web Services, Inc.
  • Location: USA
  • Purpose: Data storage, backup, infrastructure
  • Data shared: Website data, analytics data (encrypted)
  • DPA: Yes, in place
  • Privacy Policy: aws.amazon.com/privacy

Important: we do not share your data with anyone else. These are the only third parties who have access to your information, and only for the technical purposes listed above.


4. How We Use Your Information

We use the information we collect for the following purposes:

  • Website improvement: analyze traffic patterns to optimize site performance
  • Communications: respond to your inquiries and support requests
  • Marketing (if subscribed): send you relevant industry content, product updates, and event invitations
  • Legal compliance: fulfill our obligations under GDPR, CCPA, and other regulations
  • Security: protect our website from attacks and fraud
  • Analytics: understand which content resonates with our audience

We do not:

  • Sell your data to third parties
  • Use your email for any purpose other than what you've agreed to
  • Share your information with competitors or unrelated companies
  • Use your data for automated decision-making

5. Your Rights

Under GDPR (EU) and CCPA (California), you have the following rights:

Right to Access

You can request a copy of all personal data we hold about you in a structured, commonly used, machine-readable format.

Right to Correction

If your data is inaccurate or incomplete, you can ask us to correct it.

Right to Deletion ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements. This includes:

  • Unsubscribing from our newsletter (automatic removal from Mailchimp)
  • Requesting deletion of any data we've collected about you

Right to Data Portability

You can request your data in a format that can be transferred to another service provider.

Right to Restrict Processing

You can ask us to limit how we use your data for specific purposes.

Right to Object

You can object to marketing communications or processing based on legitimate interests.

Right to Opt-Out of Analytics

You can reject Google Analytics tracking via our cookie banner or by adjusting browser settings.

How to Exercise Your Rights

Send a request to legal@qualabs.com including:

  • Your name and email address
  • What right you're exercising
  • Any relevant details

We will respond within 30 days. If we need to verify your identity, we may ask for additional information.


6. Data Retention

We keep your data only as long as necessary:

  • Analytics data: 14 months (Google Analytics default)
  • Newsletter subscription: until you unsubscribe
  • Contact inquiries: 1 year, then deleted
  • Legal/compliance data: as required by law (typically 7 years)

7. Security & Compliance

Qualabs takes data security seriously and implements the following measures:

Certifications

  • ISO/IEC 27001: Information Security Management certification
  • ISO/IEC 42001: AI Management System certification

Technical Protections

  • SSL/TLS encryption for all data in transit
  • Encrypted data storage
  • Secure access controls and authentication
  • Regular security audits and penetration testing
  • Intrusion detection systems

Organizational Protections

  • Data protection training for all employees
  • Confidentiality agreements with staff and vendors
  • Incident response plan
  • Regular backup procedures

Limitations

While we maintain robust security measures, no system is 100% secure. We are not responsible for unauthorized access due to external attacks or third-party breaches beyond our control.


8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to delete your data, and to opt-out of data sharing. You can exercise these rights by emailing legal@qualabs.com.

We do not sell personal information for money. California residents can also opt out of the sharing of personal information through the "Do Not Sell or Share My Personal Information" control in our cookie preferences, or by contacting us at the email above. For details on the cookies we use, see our Cookie Policy.


9. European Union & GDPR

If you are in the EU or EEA, GDPR applies to your data. This Privacy Policy complies with GDPR requirements, including data access rights, deletion rights, and international data transfer safeguards.

You have the right to lodge a complaint with your national Data Protection Authority if you believe we've violated your rights.


10. Contact Us

For Privacy Questions:
Email: legal@qualabs.com

For General Inquiries:
Email: info@qualabs.com
Phone: +598 2708 5252

Our Address:

Qualabs
Av. Brasil 2371
Montevideo, Uruguay

Effective Date: July 2026

Qualabs is committed to transparency and respect for your privacy.