Data protection commitment

Last updated: 18 October 2026

This page sets out the principles we follow when handling the data you send us. It complements our Privacy policy; where the two differ, the Privacy policy prevails.

1. Lawful basis

We process the .qbw file you upload and the contact details you provide to us under Article 6(1)(b) of the UK GDPR — performance of a contract. The contract is the order you place on this site.

2. Data minimisation

We collect only the personal data we need to deliver the service you have ordered:

• your email address, so we can send you the download link and any service updates;
• the .qbw file you upload, so we can process it;
• basic order metadata (order ID, payment amount, file size, tier purchased), so we can support the order if you contact us.

We do not collect your name, postal address, phone number, or any other contact detail unless you choose to provide it.

3. Purpose limitation

We use the .qbw file you upload only to produce the data file you have ordered. We do not index your file, we do not use it to train any AI model, we do not share it with any third party, and we do not retain it once the order is complete.

4. Storage limitation

Your .qbw file is stored in our order pipeline for the minimum time needed to process it. In normal operation:

• our working copy of the uploaded file is deleted as soon as processing is complete (usually within minutes, and always within 24 hours);
• generated data files are available for download for 7 days, after which the download link expires;
• we may retain a copy of the data file for up to 30 days for customer-support purposes (e.g. to re-issue a download link if the email went to spam);
• after 30 days, all copies of the file and the generated data file are permanently deleted from our systems.

5. Security

Your file is transferred over HTTPS (TLS 1.2 or higher). It is stored on a server behind a firewall. Access to the storage is limited to the operator of the service. We use Cloudflare in front of the service to protect against common web attacks.

6. International transfers

Our servers are located in the United Kingdom. We do not transfer your file outside the UK. The Cloudflare network may cache static pages at edge locations outside the UK, but your file is never cached and is never made available to a third party.

7. Your rights

You have the right to:

• request a copy of the personal data we hold about you (Article 15);
• request that we correct inaccurate data (Article 16);
• request that we delete your data (Article 17);
• object to processing or restrict processing (Articles 18, 21);
• request portability of your data (Article 20);
• withdraw consent where consent is the lawful basis (Article 7(3)).

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Our registration with the ICO

We are registered with the Information Commissioner's Office as a data controller. The data controller is Gary Dully, trading as Cosy Flats, Cosy Flats & Houses, qbwtojson.com, and qbwfileunlock.com.

Our data controller registration number is ZC278036. The registration took effect on 18 October 2026 and expires on 17 October 2027. We renew it before it expires.

You can confirm our status on the ICO register at ico.org.uk using that number, or our application reference C2062754. A copy of our registration certificate is available to view here.

9. Complaints to the regulator

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Details are on the ICO website at ico.org.uk.

10. Contact

Questions about this commitment can be sent to [email protected].

← Back to qbwfileunlock.com · Terms of service · Privacy policy · Cookie policy · Acceptable use · Complaints · Why this is legal · Modern slavery statement