Last updated: October 2026.
QR Plus processes personal data to provide its services, manage relationships with users and businesses and protect operations. This document explains those processes in greater depth for business assessments, complementing the Privacy Policy.
We organize processing reviews by each activity’s purpose and context. Having an account, QR Code or integration does not make the data, responsibilities or access conditions equivalent across all services.
1. Processing purposes and context
We process information needed for registration, authentication, account management, billing, communications and support. We also process records relevant to platform operation, security, abuse prevention and applicable operational obligations.
We relate data use to the activity that justifies it. Information used to answer a support request, for example, is considered within that relationship; campaign content is handled according to the feature and purpose to which it is linked.
2. QR Plus responsibilities
For processing performed to administer and protect the platform itself, QR Plus defines the purposes and conditions described in the Privacy Policy. When service delivery involves data added or made available by a business customer, roles are assessed according to the activity and engagement.
This distinction guides request handling and review of data protection instruments. Agreed responsibilities consider control over content, processing purpose and the platform’s technical role.
3. Public content and restricted information
We distinguish information intended for publication from data used to operate the account and service. Content made available through a QR Code or public page has a different access model from registration data, support communications and internal information.
Business document sharing and technical explanations take sensitivity into account. Responding to a request does not by itself expand access to other accounts’ content or third-party information.
4. Usage records and metrics
We process records and metrics according to available features and the purposes described in the Privacy Policy. Information may support statistics, feature operation and security review, depending on the service used.
We consider measurement limitations when presenting this data. Scans and visits do not necessarily represent distinct people, and device, network and application behavior can affect statistics. Processing by an external destination remains subject to that service’s context.
5. Providers and sharing
Operations may involve infrastructure, communications, authentication, payment and other supporting providers. We assess their participation according to processing purpose and the information needed to deliver the service.
Questions about provider categories, responsibilities and relevant flows are handled within the business assessment scope. Location information and processing outside the country are considered for the service and conditions described in the Privacy Policy, without assuming one location for all operations.
6. Retention and ending processing
We relate data retention to service delivery, stated purposes and applicable obligations. Accounts, content, operational records, communications and copies may have different retention conditions according to their use and context.
Ending a relationship does not mean that all processing ends simultaneously. Retention obligations, security, fraud prevention and exercise of rights are considered in the review. When no applicable purpose remains, processing follows the deletion, anonymization or aggregation criteria in the Privacy Policy.
7. Data subject requests
We receive privacy requests through official channels and verify identity and request scope before providing information. This review protects the data subject and reduces the possibility of improper access to another person’s data.
Responses consider QR Plus’s responsibility for the data, applicable rights and handling conditions. When a request involves processing conducted by a business customer, we assess routing appropriate to each party’s role.
8. Contractual requirements and specific uses
We assess data protection agreements and requirements against the activities covered by an engagement. Alignment considers purposes, sharing, confidentiality and obligations each party can undertake.
Uses involving more sensitive information are assessed for service suitability and specific contractual conditions. A requirement in a questionnaire does not automatically change platform scope or the conditions of existing instruments.
9. Contact and further information
Our team handles data protection questions and business requirements through the contact page. The Privacy Policy provides the general description of data, purposes and rights related to QR Plus services.