Privacy policy

Last updated: 26 October 2026

Who is responsible

WebEvolutions Ltd (BRN C23195495), of 9A Higginson Street, Curepipe 74414, Mauritius, is the controller of personal data processed by MyQR, under the Mauritius Data Protection Act 2017. Contact: support@myqr.codes.

When our customers use MyQR for their own audiences (for example a business card or a menu QR code), the customer decides what the code collects and we process scan data on their behalf.

What we collect from customers

Your name, email address, company name, password (stored only as a secure one-way hash), billing contact details, invoices and payment status, and the content you create, such as links, files and contact cards. We keep a log of account activity (sign-ins and changes) for security. Card, Juice and blink details are entered with our payment partners and never reach us.

What we collect when someone scans a code

The date and time, approximate country and city, type of device, operating system and browser, and the page that sent the visitor if their browser shares it. We don’t store IP addresses: to count unique visitors we keep a one-way code made from the IP address that changes every day and can’t be reversed. We don’t use advertising trackers on scans.

Cookies

We use one essential cookie to keep you signed in to your account, and one that remembers the language you chose (English or French). Our website loads fonts from Google Fonts, which means your browser connects to Google’s servers. We don’t use advertising or analytics cookies.

Why we use it

To provide the service you’ve asked for (our contract with you), to bill you and keep accounting records (legal obligation), and to keep accounts and the service secure and free of abuse (our legitimate interests). We send emails about your account, invoices and security; we don’t send marketing emails without your consent.

Who we share it with

Only the service providers that help us run MyQR, each under a contract that limits them to acting on our instructions:

We may also disclose data where the law requires it. We don’t sell personal data.

Where it’s stored

Data is stored on Cloudflare’s infrastructure, mainly in data centres outside Mauritius, and our payment and email providers may process it in other countries. Where data leaves Mauritius we rely on these providers’ data protection agreements, which include standard contractual safeguards, as permitted by section 36 of the Data Protection Act 2017.

How long we keep it

Account data is kept while your account is open and deleted within 12 months after it closes. Invoices and payment records are kept for as long as accounting and tax law requires. Scan records are kept while the QR code exists and are deleted when the code is deleted. Email delivery logs are kept for 90 days.

Your rights

You can ask to see, correct or delete your personal data, to restrict or object to how we use it, or for a copy to take elsewhere. Email support@myqr.codes and we’ll reply within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Data Protection Office of Mauritius.

Changes

If we make important changes to this policy, we’ll email account holders before they take effect.