Privacy
Privacy and cookies
Your information, our website services, and your choices.
Last updated: 7 October 2026
Who is responsible for this website?
DQMH Consortium, LLC operates dqmh.org and is responsible for the uses of personal information described here. For privacy questions or to exercise your rights, write to [email protected] or use our contact form.
Contact and newsletter
The contact form collects your name, email address, topic, message and any optional company information you provide. Required fields let us respond to your enquiry; please avoid including passwords or sensitive information. Messages pass through Cloudflare and our ICDSoft email relay to [email protected], where the Consortium team handles them. Sending a message does not subscribe you to the newsletter.
Newsletter signup sends your email address and any optional first and last names to Mailchimp, with a tag identifying website signups. We use these details for the newsletter you requested. Unsubscribe using the link in any newsletter.
Where the GDPR applies, handling enquiries relies on steps taken at your request before a contract or our legitimate interest in responding to enquiries. Newsletter delivery relies on your consent.
Quote requests contain contact and billing details, requested products or membership places, application notes and any purchase-order reference. We store requests and issued PDF snapshots in Cloudflare D1. Authorized administrators review pricing and receive email notifications of requests and acceptance through the ICDSoft relay. Issued quotes may be emailed to the billing recipient. Private quote links provide access to the quote and its payment options; keep them confidential. Company quote history is available to the membership’s main contact, and Individual members can see their own quotes. Quotes and their acceptance do not themselves confirm payment or grant member access.
Orders, billing and memberships
Purchases and renewals involve contact details, company and billing information, tax identifiers where provided, the products ordered, amounts, payment status and subscription references. Stripe processes payment details and provides checkout and the billing portal. Our website stores order and subscription records in Cloudflare D1; it does not store your full card number or security code. Authorised administrators use these records to fulfil orders, manage memberships and prepare invoices. Order and renewal notifications are sent to the Consortium, and requested invoices may be emailed to the customer.
Membership records include the programme, company where applicable, participant names and email addresses, main contact, status and expiry. The purchaser or an administrator supplies these details so we can provide programme benefits. Main contacts should inform participants when registering them. Email passcodes and session cookies enable member and administrator sign-in.
These uses support performance of the purchase or membership contract, applicable accounting obligations, and our legitimate interest in administering and securing the service. We do not send customer identities, billing information or membership records to Google Analytics through our website integration.
Programme meeting invitations
We use Google Calendar to organise Trusted Advisor and Enthusiast meetings. Authorised administrators choose the programmes and any additional guests. The website sends invitees' names and email addresses, together with the meeting details, to the Consortium's connected Google calendar so Google can send invitations, updates and cancellation notices. Eligible members joining later may be added to future meetings automatically.
The connection is authorised by the Consortium's calendar account. Participants do not need to give the website access to their own Google accounts. Signed-in members can view and change their own response to an eligible meeting from the member area; the website records it on the Consortium's calendar using their registered email address. Administrators can view the responses and reply comments recorded by Google Calendar to coordinate the meeting. The website reads these responses when requested; it stores meeting details, guest and programme invitee addresses, event references and invitation processing records in Cloudflare D1. Connection credentials are stored as encrypted server secrets. Meeting details and replies are not sent to Google Analytics by the website.
Invitations and replies also remain in Google Calendar according to the calendar account's settings. When programme eligibility ends, the website automatically removes programme invitees from future meetings. Explicitly invited guests and past events are preserved. Contact [email protected] to ask about a programme invitation or request a correction or removal.
Programme emails
Authorised administrators can send programme messages to active Enthusiast and Trusted Advisor participants, optionally only company main contacts, and additional guests. The website stores the reviewed message, recipient names and email addresses, sending administrator, times and acceptance status in Cloudflare D1. Messages can include formatting and use the saved recipient name and email address for personalization. Each address receives a separate message through the Consortium's ICDSoft email relay; recipients do not receive the other recipients' addresses. Private relay receipts support retries without duplicate messages. These records support programme administration and correspondence; acceptance does not prove delivery or that a message was read. Contact [email protected] to discuss a programme message or request correction or removal of your information.
Protected downloads and public profiles
Protected files are stored with ICDSoft. Access is checked against programme or company eligibility, or an individual download grant. Administrators can see a private download log recording the email address, file and time of access to administer delivery and investigate access problems. Private download links and sign-in passcodes are not included in our Analytics page measurements.
Trusted Advisor company main contacts can submit a company description, website, logo, regions, languages and specialities for review. Approved information is published in the public Advisor directory. Participant email addresses and billing details are not part of that public profile. Publication is part of the company’s requested directory participation; contact us to correct or remove a profile.
Trusted Advisor participants can submit training reports containing their company, trainer, course date and duration, material use, reported fee and optional course details and feedback. Reports are stored in Cloudflare D1 and visible to eligible participants in that company and authorised Consortium administrators. The submitter’s email identifies who reported the course. An email notice goes to [email protected] through the Consortium’s ICDSoft relay. Administrators record their fee review and may create a private payment request; Stripe processes the resulting payment and the website retains its order and invoice records. Internal review notes are restricted to administrators; payment links are shared privately with the billing recipient. Historical reports remain available to administrators after membership deletion. Please avoid including unnecessary personal information about students in free-text fields.
Hosting and security
Cloudflare delivers the website and runs its APIs and database. ICDSoft hosts download files and email relays. Requests may involve IP addresses, requested URLs, browser information and request times for delivery, operational logging and abuse prevention. Cloudflare Turnstile checks applicable forms and sign-ins to limit automated abuse. These security services operate independently of Analytics cookie preferences.
Only authorised Consortium administrators can access the administration area. Session cookies, cart storage and security checks support the features you request. You can browse public pages without accepting Analytics cookies. External services, such as Stripe checkout, Mailchimp signup and linked community websites, have their own privacy practices.
Analytics and cookies
We use Google Analytics 4 to understand visits to public pages and improve the website. Our advanced Consent Mode integration sends limited, cookieless measurements to Google before you choose and after you decline Analytics cookies. These requests may include the public page viewed, time, browser or device information and referral origin; the connection also exposes technical network information to Google. Cookieless measurement still involves data processing.
If you accept, Google Analytics may also set _ga and _ga_* cookies to recognise your browser across visits. Your consent permits these Analytics cookies. Advertising consent remains denied; our integration disables Google signals and advertising personalisation. It measures public pages only, excludes query strings and fragments, and limits referrers to their origin. Admin, member, billing, cart, checkout, payment-request, protected-download and search pages are excluded. Form contents and individual download activity are not deliberately sent by this integration.
Choose Accept or Decline in the notice. Use Cookies and analytics in the footer to change your preference at any time. Withdrawal denies Analytics cookie storage and removes accessible _ga cookies; cookieless measurements continue. Your choice is stored in this browser for 180 days, and our integration sets Analytics cookies to expire after 180 days without refreshing their expiry on each visit. These choices do not affect purchasing, signing in, newsletters or security services. If browser storage is blocked, the choice may need to be made again on the next page.
Analytics is disabled on our preview and local environments. If JavaScript is disabled, this integration does not load Google Analytics. Browser tools or the Google Analytics opt-out browser add-on can provide additional controls.
Retention and international processing
Contact correspondence is kept while we handle your enquiry and follow up on the resulting relationship. Membership and delivery records support programme access and service administration. Orders and invoices may need to be retained after membership ends for accounting obligations and legal claims. The applicable period depends on the record and those obligations; contact us for the criteria and periods applying to your information.
The 180-day Analytics cookie and preference periods concern browser storage, not Google's server retention. Provider logs, Analytics event retention and newsletter records follow the respective service settings and operational requirements. Deleting browser cookies does not erase information already received by a provider.
Consortium staff and service providers process information according to their roles: Cloudflare for hosting, APIs, security and database storage; ICDSoft for files and email relays; Stripe for payments and billing; Mailchimp for newsletters; Google for Calendar invitations and responses, and Analytics. Using international providers may involve processing outside your country, including in the United States. You can ask us about the recipients, processing locations and transfer safeguards applicable to your data.
Your rights
Subject to applicable law and its conditions, you may request access, correction, deletion, restriction or portability of your information, and object to certain uses. You can withdraw consent without affecting processing carried out before withdrawal. A proportionate identity check may be needed. Send privacy requests to [email protected] or use the contact form. You may also complain to the relevant data protection authority, including the CNIL in France.