Privacy Policy

1. Controller and scope

1.1 The data controller is QRStop Solutions Limited (C 116839), . Any question relating to personal data should be sent to [email protected].

1.2 This Policy describes the processing carried out as part of the QRstop service available at https://www.qrstop.com.

2. Data collected

Account

Email address, encrypted password and, where applicable, name and country.

Billing

Payment history and data passed on by the payment provider. Full card details are never stored by QRstop.

Content created

QR codes generated, their destinations, logos and graphics uploaded, and customisation settings.

Technical data

IP address, connection logs, browser and device type.

3. Scan data

3.1 When a dynamic QR code is scanned, QRstop records limited measurement data: date and time, approximate country or region derived from the IP address, and device and system type.

3.2 That data exists to produce aggregate statistics for the account holder. It is not intended to identify the person scanning and is not tied to any advertising profile.

3.3 Where a QR code's destination leads to a site or form operated by the customer, any processing carried out on that destination is the customer's responsibility.

4. Purposes and legal bases

• Providing the service and performing the contract: creating codes, redirection, statistics, account access.
• Legal obligations: invoicing, accounting, responding to lawful requests from authorities.
• Legitimate interest: service security, tackling phishing and abusive use, product improvement.
• Consent: non-essential communications and trackers not required for the site to work.

5. Recipients and processors

5.1 QRstop does not sell or rent personal data.

• hosting and monitoring providers;
• payment providers;
• support and communication tools.

5.2 These providers act on instructions and are bound by contractual confidentiality and security obligations.

We use Stripe for payment, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

6. Transfers outside the European Union

6.1 Where a transfer outside the European Union is necessary, it is covered by the appropriate safeguards provided for by the applicable regulation, in particular the European Commission's standard contractual clauses.

7. Retention periods

8. Security

8.1 Traffic is encrypted in transit, passwords are stored as hashes and access to data is restricted to authorised staff.

8.2 In the event of a data breach likely to result in a high risk, the individuals concerned and the competent authority are informed within the periods required by law.

9. Your rights

• right of access to your data;
• right of rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent at any time.

9.1 These rights are exercised at [email protected]. A reply is provided within one (1) month. You also have the right to lodge a complaint with your supervisory authority.

10. Cookies and trackers

10.1 Strictly necessary cookies support authentication, security and the correct operation of the site.

10.2 Audience measurement and advertising trackers are only set with the user's consent, which may be withdrawn at any time. A QR code redirection sets no advertising tracker.

11. Changes

11.1 This Policy may be updated. Any material change is brought to users' attention by a notice on the site or by email.