Privacy Policy of QRSong!
Introduction
Welcome to QRSong! (https://www.qrsong.io). We are committed to protecting your privacy. This policy details the information we collect, how it is used and shared, and your rights regarding your data.
Information We Collect
- Personal Information: We collect your name and address when you are placing an order. This enables us to send the cards to the right address.
Usage Data and Order Tracking
We collect and process the following data related to your order:
- Order Identification: Each card set is assigned a unique batch number linked to your purchase for order management, quality assurance, customer support, and fraud prevention.
- Usage Statistics: We track how many cards from your set have been scanned and when they were used. This helps us provide service improvements, customer support, and detect unauthorized redistribution.
Legal Basis: Contract performance (to fulfill your order and provide support) and legitimate interest (to prevent fraud and unauthorized resale of our products).
Sharing Your Information
- Data Hosting and Storage: We use Amazon Web Services (AWS) Relational Database Service (RDS) to host the data collected. Your personal data is stored securely on AWS, and we do not share it with any third-party services other than for the purpose of data hosting.
Data Security
We take the security of your data seriously. Your personal information is stored securely on AWS, protected with industry-standard encryption protocols both in transit and at rest. We implement stringent security measures to prevent unauthorized access, alteration, and misuse of your data.
Data Retention
Personal information (name, address, email) is retained for as long as necessary to fulfill our contractual obligations and comply with legal requirements, typically 7 years for tax and accounting purposes. Usage data and order tracking information is retained for up to 3 years from purchase for fraud prevention and customer support purposes. You may request deletion of your data at any time, subject to our legal retention obligations.
Service Communications
We may send you transactional emails related to your purchase, including order confirmations, shipping updates, and product-related notifications. If you have opted in to receive marketing communications, we may also send you review requests and promotional emails. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us.
Your Rights
- Access, Correction, and Deletion: You have the right to access, correct, or request the deletion of your personal data at any time. If you wish to request deletion, please contact us through the contact form.
- Data Portability: You have the right to request a copy of the data we hold about you in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to this processing if you feel it impacts your personal rights and freedoms. You can exercise this right by contacting us at the email provided above.
International Data Transfers
Data we collect may be processed and stored in any country where our servers or service providers are located. We ensure that data transferred to and from AWS in Frankfurt adheres to stringent data protection standards to maintain the security and confidentiality of your information.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any significant changes by posting the new privacy policy on our website and updating the effective date at the top of this policy.
Contact Us
If you have any questions or concerns about our privacy practices or your personal data, please contact us through the contact form.