GDPR Compliance

Who is responsible for data processing?

QR Build is the data controller responsible for processing your personal data. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR).

What personal data do we collect?

We collect various types of personal data to provide and improve our services:

collect.gdpr.data.answer.second

How is your data used?

We use your personal data for the following purposes:

To provide and maintain our QR code generation services
To manage your account and provide customer support
To process payments and prevent fraud
To send you important updates about our services
To analyze usage patterns and improve our platform
To personalize your experience
To comply with legal obligations
To protect our rights and prevent misuse
To send marketing communications (with your consent)
To generate analytics and insights about QR code usage

How long do we retain your data?

Account data: Retained while your account is active and for a reasonable period after account closure
QR code data: Retained based on your subscription status:
- retail.gdpr.data.various.two.sub.various.one
- retail.gdpr.data.various.two.sub.various.two
Payment data: Retained as required by law and for fraud prevention
Analytics data: Aggregated and anonymized data may be retained indefinitely

What are your rights under GDPR?

Right to access: Request a copy of your personal data
Right to rectification: Correct inaccurate or incomplete data
Right to erasure: Request deletion of your data ("right to be forgotten")
Right to restrict processing: Limit how we use your data in certain circumstances:
- user.rights.gdpr.answer.various.four.sub.various.one
- user.rights.gdpr.answer.various.four.sub.various.two
Right to data portability: Receive your data in a structured, commonly used format

How to exercise your rights?

To exercise any of your GDPR rights, please contact us at support@qr-build.com. We will respond to your request within 30 days.

What security measures do we implement?

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include encryption, access controls, regular security assessments, and employee training on data protection.