Privacy Policy

1. Introduction

Welcome to Scanheim. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dynamic QR code generation and management service.

2. Information We Collect

We may collect several types of information from and about users of our service, including:

Account Information:First name, last name, email address, and password when you create an account.
Profile Information: Time zone preferences and other settings.
QR Code Data: Information related to QR codes you create, including names, destination URLs, and images.
Campaign Data: Campaign names, descriptions, logos, and related information.
Usage Data: Information about how people interact with your QR codes.
Device Information: IP address, browser type, operating system, and other technical data.
Location Data: General location information (city, region, country) based on IP address when QR codes are scanned.
Session Information: Browser session details and activity timestamps.

3. Legal Basis for Processing Your Information

We collect and process your personal data based on the following legal grounds:

Contract Performance: To fulfill our contractual obligations when you subscribe to our services.
Legitimate Interests: For business improvements, fraud prevention, and analytics.
Consent: Some data is collected with your explicit consent, which you can withdraw at any time.
Legal Compliance: To comply with applicable laws and regulations.

Legal Basis for Specific Data Types:

Account and Profile Information: Contract performance and legitimate interests.
QR Code and Campaign Data: Contract performance.
Usage and Analytics Data: Legitimate interests and consent.
Technical and Device Information: Legitimate interests and consent.

4. Cookies and Similar Technologies

We use cookies to enhance your experience. The types of cookies we use include:

Essential Cookies: Required for core functionality.
Functionality Cookies: Store your preferences.
Performance/Analytics Cookies: Help us analyze usage patterns.
Session Cookies: Temporary cookies deleted when you close your browser.

You can manage cookie preferences through your browser settings.

5. How We Use Your Information

We use the collected information to:

Provide, maintain, and improve our application's performance and services.
Process subscriptions and transactions.
Generate analytics about feature usage throughout the application.
Send notifications, security alerts, and service updates.
Respond to support requests.
Prevent fraud and ensure security.
Share anonymized, aggregated data with partners, contractors, or other third parties for purposes such as industry analysis, demographic profiling, trend analysis, and advertising.
Comply with legal obligations.

6. Data Retention

We retain all your data unless otherwise requested to be removed either via legitimate request from the owner of the data or by legal authorities. We do not retain payment-specific information such as Payment Methods. Paddle, our merchant of record, stores this information for us.

Account Information
QR Code Data
Campaign Data
Analytics Data
Communication Records
Log Data

7. Data Security

We implement security measures such as those below. Note that despite our efforts, no system is 100% secure and we will notify you promptly of any data breaches.

Encryption: SSL encryption for data transmission.
Hashing: Sensitive data such as passwords are hashed and are more or less safe.
Access Controls: Strict authentication and authorization policies.
Data Backups: Regular encrypted backups.
Security Monitoring: Continuous monitoring for threats.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the Philippines. We ensure compliance with data protection laws when transferring your data. This is to fulfill our obligation to you, keeping our services awake, alive, and enthusiastic.

9. Third-Party Services

We integrate with third-party services for payments, analytics, and other functions. Please review their privacy policies separately. Our main merchant of record is Paddle (https://www.paddle.com).

10. Your Rights

Under Philippine data privacy laws, you have the right to:

Be Informed: Understand how your data is collected and processed.
Access: Obtain a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Object: Object to data processing, particularly for marketing.
Erasure: Request data deletion when no longer necessary.
Data Portability: Receive your data in a portable format.
Damages: Seek compensation for data privacy violations.
File a Complaint: Lodge a complaint with the National Privacy Commission.

11. How to Exercise Your Rights

To exercise your rights, contact us with:

Your full name and registered email.
The specific right you wish to exercise.
Details of your request.
A copy of two government-issued ID for verification uploaded to a secure file-sharing service such as Google Drive, or similar. Other arrangements may be made upon contact if this is not applicable.

12. Children's Privacy

Our service is not directed to children under 18. If we learn that we have collected data from a minor without parental consent, we will delete it, immediately.

13. Changes to This Privacy Policy

We may update this policy periodically and may or may not communicate the changes to our users. Should we communicate changes, the primary form of communication will be through the emails registered by our users.

14. Compliance with Philippine Data Privacy Laws

This policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its regulations, ensuring transparency, legitimate purpose, and proportionality in data collection and processing.

Legal