QR Rate

Privacy policy

Projet, 5 novembre 2026

Projet soumis à relecture juridique. Ce texte n'est pas définitif et doit être relu par un avocat avant le lancement.

Ce texte juridique n'est pour l'instant disponible qu'en anglais.

Who we are

QR Rate is a tagcrux product. It is provided by [Nom de la société] Ltd, immatriculée en [Angleterre et pays de Galles], numéro [numéro]. Siège social : [adresse]. [UK ICO registration number to be added, and an EU representative if required.] Contact: hello@tagcrux.com.

Two roles

For account data about our customers we decide how data is used, so we are the controller. For feedback that visitors leave for a business using our service, that business is the controller and we are its processor. If you left feedback and want to use your data rights, please contact the business whose QR code you scanned. We will help them respond.

Visitors who scan a QR code

  • Star ratings and comments: what you submit, the form it belongs to and the date.
  • Name and phone: only on forms that clearly ask for them, so the business can reply.
  • Scans: a daily total per form, with nothing about who scanned.
  • IP address: we do not store it with your feedback. To limit abuse, we keep a scrambled value based on it that changes each day and expires within minutes.
  • Web server logs: [retention to be confirmed when hosting is chosen].

Please avoid writing sensitive information in comments. Visitor pages set no cookies.

Customers using the panel

We process your name, work email, password (stored only as a secure hash), company details, billing details for invoices (legal name, address, tax number), any job title, work phone and extension your admin adds, and activity needed to run the service. Legal basis: performing our contract with you, and our legitimate interest in keeping the service secure.

Retention

Each business sets how long names and phone numbers are kept, 365 days by default. Account data is kept while the account is active and for [period to be confirmed] afterwards, unless the law requires longer.

Service providers

We use providers for hosting and email delivery: [list to be added once chosen, including locations and transfer safeguards].

Your rights

You may ask for access, correction, deletion, restriction, portability or object to processing. You may also complain to your data protection authority.