Privacy Policy

This privacy policy explains how VP HUB Ltd. ("we", "us", "our") collects, uses, and protects your personal data when you use our website or app, qrl.la ("the service"). By using the service, you agree to the collection and use of your personal data in accordance with this policy.

What personal data do we collect and why?

We collect the following categories of personal data from you:

• Email address: We collect your email address when you create an account on the service, or when you use our external payment processor, Stripe, to pay for the service. We use your email address to identify you as a user, to link your payments to your account, to communicate with you about the service, and to send you marketing emails if you opt-in. The legal basis for processing your email address is your consent and our legitimate interest in providing and improving the service.
• Files or links: We collect the files or links that you provide to us when you use the service to generate static or dynamic QR codes, shortened URLs, or file sharing. We use these files or links to provide the service to you and to other users who scan or click on your QR codes or shortened URLs. The legal basis for processing these files or links is your consent and our legitimate interest in providing and improving the service.
• IP address and device information: We collect your IP address and device information when you use the service or when you scan or click on a QR code or shortened URL generated by the service. We use these data to provide the service, to monitor and analyze the usage of the service, to detect and prevent fraud and abuse, and to improve the performance and security of the service. The legal basis for processing these data is your consent and our legitimate interest in providing and improving the service.

We do not collect any other personal data from you, unless you voluntarily provide it to us.

Who do we share or disclose your personal data with?

We do not share or disclose your personal data with any third parties, except as described below:

• Payment processor: We use Stripe, a third-party payment processor, to process your payments for the service. When you use Stripe, you provide your email address and payment information directly to them. Stripe may collect, use, and share your personal data in accordance with their own privacy policy, which you can find here: https://stripe.com/privacy. We do not have access to or control over your payment information. We only receive your email address from Stripe to link your payments to your account.
• Service providers: We may use third-party service providers to help us provide, maintain, and improve the service. These service providers may have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal obligations: We may disclose your personal data if required to do so by law or in response to a valid request from a public authority, such as a court, a regulator, or a law enforcement agency.
• Business transfer: We may transfer your personal data to a successor entity in the event of a merger, acquisition, reorganization, or sale of assets of our company. In such cases, we will notify you of the change and inform you of your rights under this policy.

How long do we retain your personal data?

We retain your personal data for as long as you have an active subscription to the service and up to 5 years after. We may retain your personal data for longer if required by law or if necessary to protect our legal rights, prevent fraud, or resolve disputes.

What are your rights regarding your personal data and how can you exercise them?

You have the following rights regarding your personal data, subject to applicable laws and limitations:

• Access: You have the right to request a copy of the personal data that we hold about you.
• Rectification: You have the right to request that we correct any inaccurate or incomplete personal data that we hold about you.
• Erasure: You have the right to request that we delete your personal data, unless we have a legal obligation or a legitimate interest to keep it.
• Restriction: You have the right to request that we restrict the processing of your personal data, if you have a valid reason to do so, such as a dispute or a legal claim.
• Portability: You have the right to request that we transfer your personal data to another service provider, if technically feasible.
• Objection: You have the right to object to the processing of your personal data, if you have a valid reason to do so, such as direct marketing or profiling.
• Withdrawal of consent: You have the right to withdraw your consent to the processing of your personal data at any time, without affecting the lawfulness of the processing before the withdrawal.
• Complaint: You have the right to lodge a complaint with a supervisory authority, if you believe that we have violated your data protection rights.

To exercise any of these rights, please contact us at info@vp-hub.com. We will respond to your request within one month, unless we need more time, in which case we will inform you of the reason and the expected date of response.

How do we secure your personal data?

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encrypting your data in transit and at rest
• Hashing and salting your passwords
• Restricting access to your data to authorized personnel only
• Regularly testing and updating our systems and software
• Training our staff on data protection and security

However, no method of transmission or storage is 100% secure, and we cannot guarantee the absolute security of your personal data. If you have any questions or concerns about the security of your personal data, please contact us at info@vp-hub.com.

Do we use cookies or similar technologies?

We use cookies or similar technologies on our website or app to enable the functionality of certain features, such as authentication. Cookies are small files that are stored on your device by your browser when you visit a website or app. You can manage your cookie preferences in your browser settings, but please note that some features of the service may not work properly if you disable or delete cookies.

We do not use cookies or similar technologies for tracking, advertising, or analytics purposes.

Do we transfer your personal data outside the EU or EEA?

We transfer your personal data outside the EU or EEA to our servers located in New York, USA. These servers are managed by Digital Ocean, a cloud service provider that complies with the EU-US Privacy Shield Framework, which ensures an adequate level of data protection. You can find more information about Digital Ocean's privacy practices here: https://www.digitalocean.com/legal/privacy-policy/.

We chose the location of our servers to provide the best connectivity and performance for our users in Europe and North America.

How do we notify you of any changes to this policy?

We may update this policy from time to time to reflect changes in our data processing practices, legal obligations, or service features. We will notify you of any material changes by email, or by posting a notice on our website or app, at least 30 days before the changes take effect. Your continued use of the service after the effective date of the changes will constitute your acceptance of the updated policy. If you do not agree to the changes, you should stop using the service and delete your account.

How to contact us?

If you have any questions, comments, or requests regarding this policy or your personal data, please contact us at:

VP HUB Ltd. 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ info@vp-hub.com