Privacy Policy

LumeQR (“LumeQR”, “we”, “us”, or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, store, share, and protect information relating to you when you access the LumeQR website, register for or use a LumeQR account, create and publish QR pages, purchase subscription services, or access QR pages hosted by LumeQR.

This Privacy Policy also explains your rights regarding your personal information.

This Privacy Policy applies to the LumeQR website and related online services provided by LumeQR.

1. About LumeQR

LumeQR is an online service that allows users to create, manage, and publish dynamic QR pages.

LumeQR is operated by LumeQR.

Privacy Contact:
privacy@lumeqr.com

Depending on applicable data protection laws and the specific processing activities involved, LumeQR may act as a data controller or data processor when handling personal information.

For content that users independently upload, create, or publish through QR pages, the page creator is responsible for ensuring that they have all necessary rights, permissions, licenses, or other lawful bases required to collect, use, upload, display, or publicly share such content.

2. Information We Collect

The information we collect depends on how you use LumeQR.

2.1 Account Information

When you register, log in, or manage your LumeQR account, we may process information including:

• Email address;
• Name or display name;
• Username (if applicable);
• Profile picture (if provided through a third-party login service);
• User account identifier;
• Login method;
• Account status;
• Subscription plan and subscription status.

If you choose to sign in through Google or another third-party account provider, we may receive information that the third-party provider shares with LumeQR based on your authorization.

How third-party login providers process your information is governed by their own privacy policies.

2.2 Content You Create and Upload

When you use LumeQR to create QR pages, we process and store content that you voluntarily provide, including:

• Text;
• Images and logos;
• Videos;
• Audio files;
• PDF files;
• Links;
• Buttons;
• Page layouts and styles;
• QR code styles and settings;
• Information related to creating, editing, publishing, and managing pages.

Such content may include information about you or third parties.

You are responsible for ensuring that you:

• Only upload content that you have the legal right or authorization to use and process;
• Avoid publishing unnecessary sensitive personal information, confidential information, or other information that should not be publicly available through QR pages;
• Do not upload content that infringes third-party rights, violates applicable laws, or is shared without proper authorization.

3. Subscription and Payment Information

If you purchase a paid LumeQR subscription, payments are generally processed by third-party payment service providers.

To manage your subscription, we may receive and store necessary transaction and subscription information, including:

• Purchased subscription plan;
• Subscription status;
• Transaction or subscription identifier;
• Payment amount and currency;
• Payment status;
• Payment date and time;
• Necessary account or payer information returned to us by payment providers.

LumeQR does not directly store complete credit card numbers or bank account payment credentials.

Complete payment information is processed by the relevant payment service provider according to its own terms of service and privacy policy.

4. Technical and Usage Information

When you access or use LumeQR, we and the service providers supporting LumeQR’s infrastructure and security may automatically process necessary technical information, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Request and access time;
• Pages or resources accessed;
• Network request information;
• Login and authentication records;
• Error logs;
• Security logs;
• Information related to service performance and stability.

This information is mainly used to:

• Provide our services;
• Maintain service reliability and availability;
• Troubleshoot technical issues;
• Prevent abuse;
• Protect accounts and system security.

5. When You Contact Us

If you contact us for support, feedback, reporting issues, or other communication, we may retain:

• Your contact information;
• Communication content;
• Attachments or other materials you voluntarily provide;
• Information necessary to handle your request.

We use this information to respond to your requests, resolve issues, and maintain necessary customer support records.

6. How We Use Information

We may use information we collect for the following purposes:

• Creating and managing LumeQR accounts;
• Verifying identity and maintaining login sessions;
• Providing QR page creation, editing, hosting, and publishing services;
• Storing and transferring user-uploaded media files;
• Delivering published QR pages to visitors who scan QR codes;
• Managing subscriptions and payment status;
• Sending necessary account, subscription, security, and service-related notifications;
• Providing customer support;
• Maintaining and improving LumeQR’s stability and performance;
• Diagnosing and resolving technical issues;
• Preventing spam, fraud, abuse, malicious activity, and unauthorized access;
• Protecting the rights, property, and safety of LumeQR, our users, and third parties;
• Enforcing our Terms of Service;
• Complying with applicable legal, tax, accounting, and regulatory obligations.

Where applicable data protection laws require consent for specific processing activities, we will obtain your consent before carrying out such processing.

7. Legal Basis for Processing Information

Where GDPR, UK GDPR, or other similar data protection laws apply, our processing of personal information may rely on the following legal bases:

Contractual Necessity

For example:

• Creating and managing accounts;
• Hosting QR pages;
• Processing subscriptions;
• Providing LumeQR features requested by you.

Legitimate Interests

For example:

• Maintaining system security;
• Preventing fraud and abuse;
• Diagnosing technical issues;
• Maintaining service reliability;
• Improving our products and services.

Legal Obligations

For example:

• Complying with applicable tax, accounting, regulatory, or other legal requirements.

Consent

For certain processing activities where consent is legally required, we will obtain your consent where applicable.

You may withdraw previously provided consent where permitted by applicable law.

8. Public QR Pages

LumeQR allows users to create and publish pages that can be accessed through QR codes or links.

Once a QR page is published, anyone who obtains the relevant QR code or page link may access the publicly available content on that page, and the link may be further shared by others.

Therefore, please do not publish information through public QR pages that you do not want to make publicly available.

If content you upload or publish contains another person's name, photos, videos, contact information, or other personal information, you are responsible for ensuring that you have the necessary legal basis, authorization, or permission to collect, use, upload, and publicly share such information.

LumeQR provides technical infrastructure and hosting services for page creators, but LumeQR does not decide what information page creators should upload or make publicly available on their pages.

If you believe that a page hosted by LumeQR improperly exposes personal information relating to you, you may contact us using the contact information provided in this Privacy Policy.

9. QR Code Scanning and Page Access

When visitors scan a QR code and open a page hosted by LumeQR, our servers, networks, and security infrastructure may process necessary technical information to deliver the page properly, including:

• IP address;
• Browser and device information;
• Request time;
• Page request information;
• Information related to network, security, and error diagnosis.

This information may be used for:

• Delivering pages;
• Security protection;
• Preventing abuse;
• Troubleshooting errors;
• Operating our infrastructure.

LumeQR does not currently provide QR scan statistics or visitor analytics features.

If we introduce QR scan analytics or other visitor analysis features in the future that involve new types of personal information processing, we will update this Privacy Policy and related notices as required by applicable laws.

10. Cookies and Similar Technologies

LumeQR may use cookies, local storage, and similar technologies to provide and protect necessary website and service functionality, including:

• Maintaining login sessions;
• Authentication;
• Saving necessary service states and user preferences;
• Protecting account and system security.

For more information, please refer to the LumeQR Cookie Policy.

If we use non-essential cookies or similar technologies that require user consent under applicable laws in the future, we will provide appropriate notices and consent choices where required.

11. How We Share Information

To operate and provide LumeQR services, we may share necessary information with third-party service providers that perform specific technical or business functions on our behalf.

These service providers may include:

• Cloud hosting and network infrastructure providers;
• Database and authentication service providers;
• Image, video, audio, and file storage providers;
• Content delivery providers;
• Payment and subscription processing providers;
• Email and communication service providers;
• Security, error monitoring, and technical operations providers;
• Other vendors that provide necessary services to LumeQR.

These service providers may only process information as necessary to provide their services or as required by their own legal obligations.

We may also disclose necessary information in the following circumstances:

• To comply with applicable laws, court orders, or lawful government requests;
• To investigate fraud, abuse, illegal activities, or security incidents;
• To protect the rights, property, and safety of LumeQR, our users, or others;
• To establish, exercise, or defend legal claims;
• To handle disputes or legal requests.

If LumeQR undergoes a merger, acquisition, financing, restructuring, asset sale, or similar business transaction, information related to our business may be transferred as part of that transaction, subject to applicable data protection requirements.

12. We Do Not Sell Personal Information

LumeQR does not sell or rent your personal information.

We also do not sell or share personal information for third-party cross-context behavioral advertising purposes.

If our business model or data processing practices materially change in the future, we will update this Privacy Policy before such processing begins and provide applicable notices and choices where required by law.

13. International Data Processing and Transfers

LumeQR provides services to users in different countries and regions.

Our cloud infrastructure and other service providers may operate in multiple countries or regions.

Therefore, information related to your use of LumeQR may be stored or processed outside your country or region.

Data protection laws may differ between countries and regions.

Where required by applicable laws, we will take reasonable measures and rely on appropriate data transfer mechanisms or safeguards provided by relevant service providers to protect personal information during international transfers and processing.

14. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide our services;
• Fulfill the purposes described in this Privacy Policy;
• Meet reasonable business, security, and legal requirements.

The specific retention period depends on factors including:

• The type of information;
• The purpose of processing;
• Your account and service status;
• Applicable legal requirements.

Generally:

• Account information is retained during the active period of your account and for a reasonable period necessary for account closure, security, and compliance purposes;
• User-created and uploaded content is generally retained for as long as necessary to provide the relevant LumeQR services;
• After content or accounts are deleted, related data may be removed from primary systems, but limited copies may remain for a reasonable period due to backups, security, or technical requirements;
• Transaction and subscription records may be retained longer where required for tax, accounting, fraud prevention, or other legal purposes;
• Technical, security, and error logs may be retained for periods reasonably necessary to maintain service security, diagnose issues, and prevent abuse;
• Customer support and communication records may be retained as necessary to resolve issues, handle disputes, and maintain necessary records.

When information is no longer reasonably required for business or legal purposes, we will delete or anonymize it according to applicable procedures.

15. Information Security

We implement reasonable technical, administrative, and organizational measures designed to reduce the risks of unauthorized access, disclosure, alteration, loss, or misuse of personal information.

These measures may include:

• Authentication controls;
• Access control mechanisms;
• Data transmission protection;
• System monitoring;
• Security measures provided by our infrastructure and service providers.

However, no internet transmission, cloud service, or electronic storage system can guarantee absolute security.

If a personal information security incident occurs that requires notification to users or regulatory authorities under applicable laws, we will take appropriate actions as required.

16. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have some or all of the following rights:

• Request access to your personal information;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Request restriction of certain processing activities;
• Object to certain processing activities;
• Receive a copy of your personal information or exercise data portability rights where applicable;
• Withdraw previously provided consent;
• Exercise applicable opt-out rights regarding certain personal information sharing or sale practices;
• Submit a complaint to a competent data protection authority.

If you wish to exercise applicable privacy rights, please contact us:
privacy@lumeqr.com

To protect your account and personal information, we may take reasonable steps to verify your identity before processing certain requests.

Some requests may be subject to limitations or exceptions permitted by applicable laws. For example, we may need to retain information required by law or information necessary to prevent fraud, protect security, resolve disputes, or handle legal requests.

17. Children's Privacy

LumeQR is not specifically designed for children.

We do not knowingly collect personal information from children who are required under applicable laws to obtain parental or guardian authorization before providing personal information.

If we discover that we have processed children's personal information protected under applicable child privacy laws without appropriate authorization, we will take reasonable steps to address or delete such information.

If you believe that a child has provided personal information to LumeQR without appropriate authorization, please contact us:
privacy@lumeqr.com

18. Third-Party Websites and Services

LumeQR or user-created QR pages may contain links to third-party websites, applications, social media platforms, e-commerce platforms, or other external services.

Once you access a third-party service through such links, how that third party collects, uses, and protects your information is governed by its own privacy policy and terms of service.

LumeQR does not control third-party privacy practices and is not responsible for the data processing activities of third-party services.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time due to changes in:

• LumeQR features;
• Infrastructure;
• Business model;
• Operations;
• Applicable laws.

When this Privacy Policy is updated, we will revise the “Last Updated” date at the top of this page.

If changes may materially affect user privacy, we may provide additional notice through the website, account interface, email, or other reasonable methods where appropriate.

If we plan to use previously collected personal information for a new purpose that is materially different from the original purpose, we will provide appropriate notice before beginning such processing where required by applicable laws.

20. Contact Us

If you have questions about this Privacy Policy, LumeQR’s privacy practices, how we process personal information, or if you wish to exercise applicable privacy rights, please contact us:

LumeQR
Privacy Contact:
privacy@lumeqr.com

You may also submit a complaint to a competent data protection authority according to the applicable laws in your jurisdiction.