GDPR Information

Last updated: 29-03-2026

Data controller

Base IT Group, 124 City Road, London, EC1V 2NX.

Lawful basis

We process data to provide the service (contract), maintain security (legitimate interests), and send necessary account communications.

Your rights

• Access, correction, and deletion of your personal data.
• Restriction or objection to processing.
• Data portability where applicable.

What we process

• Account and organisation details you provide.
• QR and landing page content you configure.
• Scan events (timestamp, device info, salted IP hash).

Processors

We use service providers for hosting, email delivery, and payment processing (Stripe). These providers act as data processors.

How to request

Submit a request using the in‑app Contact page or write to the address above. You can also email support@qr-depot.com.

Data retention

Retention depends on your plan and organisation settings. You can request deletion at any time.