Privacy Policy

1. Who we are

QRFree is the operator of the QRFree platform and, for the purposes of UK data protection law, is the data controller for the personal data described in this policy unless we clearly say otherwise.

If you have questions about this Privacy Policy or about how QRFree handles personal data, please contact us below:

2. Scope of this policy

This Privacy Policy applies to personal data we collect through:

• the QRFree website;
• customer registration, login and account management;
• QR code creation, editing and analytics tools;
• billing, subscription and support interactions;
• cookies and similar technologies used on our site.

3. The categories of personal data we collect

3.1 Identity and contact data

• name;
• email address;
• phone or mobile number if you provide one;
• business or account contact details you choose to add.

3.2 Account data

• customer account ID;
• login details and encrypted password hash;
• subscription status, plan code and plan-related dates;
• account preferences and saved settings.

3.3 QR service data

• QR code names, titles and themes;
• destination URLs or other destination details you provide;
• saved QR configuration and style settings;
• QR code status such as active, paused or deleted.

3.4 Analytics and usage data

• scan count and last-scan timestamps;
• website usage and interactions;
• browser, operating system and device information;
• IP address and technical logs where needed for security and service operation.

3.5 Billing and payment data

• subscription and billing status;
• payment processor references and billing metadata;
• limited billing data returned to us by our payment providers.

3.6 Support and communications data

• messages you send to us;
• support requests and account enquiries;
• records of changes or actions taken in response to your request.

4. How we collect personal data

We collect personal data:

• directly from you when you register, log in, create QR codes, contact us or manage your account;
• automatically when you use our website and services;
• from service providers involved in subscriptions, billing and hosting;
• from cookies and similar technologies where applicable.

5. How and why we use personal data

6. Lawful bases in more detail

We rely on one or more of the following lawful bases:

• Contract: where we need your data to provide QRFree services you signed up for.
• Legitimate interests: where it is reasonable for us to use data to run, secure and improve QRFree, provided your rights do not override those interests.
• Consent: where consent is required, such as for certain cookies or certain marketing communications.
• Legal obligation: where we must keep or disclose information under applicable law.

7. Cookies and similar technologies

QRFree uses cookies and similar technologies for website functionality, security, preferences and, where enabled, analytics and performance measurement.

7.1 Strictly necessary technologies

Some cookies or similar technologies are necessary for the operation of the site, such as keeping you logged in, maintaining sessions, handling security, balancing traffic, or remembering essential choices.

7.2 Analytics and performance technologies

Where QRFree uses analytics or other non-essential technologies, we will request consent where required before placing or using them.

7.3 Managing cookie choices

You can adjust your browser settings to refuse or remove cookies, but some parts of QRFree may not function properly if strictly necessary technologies are blocked.

8. Marketing communications

QRFree may send service-related emails that are necessary for your account, such as billing, security or important service notices.

Where we send marketing communications, we will do so only where we have an appropriate legal basis and you can opt out at any time using the unsubscribe link or by contacting us.

9. Sharing personal data

We may share personal data with trusted third parties where necessary, including:

• payment processors and subscription providers, including Stripe;
• hosting, infrastructure and website service providers;
• support, communications or analytics providers used to operate QRFree;
• professional advisers, insurers, auditors or legal representatives where reasonably necessary;
• courts, regulators, law enforcement or public authorities where we are legally required to do so.

We do not sell your personal data.

10. International transfers

Some of our service providers may process personal data outside the UK. Where that happens, QRFree will use appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms.

11. Data retention

QRFree keeps personal data only for as long as reasonably necessary for the relevant purpose, including:

• while your account is active;
• for a reasonable period after closure where needed for security, dispute resolution or service continuity;
• for longer where tax, accounting, anti-fraud or legal obligations require retention.

When data is no longer needed, we will delete it, anonymise it, or securely archive it where lawful retention is required.

12. Data security

QRFree uses appropriate technical and organisational measures to protect personal data. These may include encrypted connections, access controls, account protections, logging, server security, and restricted administrative access.

No internet transmission or storage system is completely secure, but we take reasonable steps to reduce risk and protect the data we hold.

13. Your rights

Depending on the circumstances, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• request transfer of certain data to you or another provider;
• withdraw consent where processing relies on consent.

To exercise any of these rights, please contact us at support@qrfree.io.

14. Complaints

If you are unhappy with how QRFree handles your personal data, we would appreciate the chance to address your concerns first. You also have the right to complain to the Information Commissioner’s Office (ICO).

15. Third-party links and content

QRFree may link to third-party websites or services. We are not responsible for the privacy practices of those external sites. You should read their privacy information separately.

16. Children

QRFree is not intended for children and we do not knowingly provide our services directly to children. If you believe a child has provided personal data to QRFree, please contact us.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect service changes, legal updates or operational improvements. The latest version will always be published on this page.

18. Contact details

If you have questions about this Privacy Policy or your personal data, please use our contact form: