Privacy Policy
1. Introduction
This Privacy Policy explains how personal data is collected, used, and protected when using the TablQR software-as-a-service platform (“Service”).
The Service is operated by:
Sole Proprietor Huzyk Ivan Vasylovych
Registration Number: 3790112419
Registered address: Ukraine, Rivne region, Berezne 34600, Koretska St. 132
Email: support@tablqr.com
For the purposes of data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we act as:
- Data Controller for account, billing, and website data
- Data Processor for restaurant customer data processed on behalf of our business clients
2. Categories of Personal Data We Collect
2.1 Account & Business Information
- Name
- Business name
- Email address
- Login credentials
- Contact details
2.2 Billing & Payment Data
Payments are processed via WayForPay.
We do not store full payment card numbers.
WayForPay may process:
- Card details
- Transaction identifiers
- Billing information
WayForPay acts as an independent data controller for payment processing.
2.3 Technical & Usage Data
- IP address
- Browser type
- Device information
- Access logs
- Usage analytics
2.4 Restaurant Guest Data (Processed on Behalf of Clients)
When restaurant guests access QR menus, limited technical data may be processed, including:
- IP address
- Device type
- Interaction analytics
In this case, TablQR acts as a Data Processor, and the restaurant remains the Data Controller.
We process such data only under instructions of our business client.
3. Legal Basis for Processing (GDPR Article 6)
We process personal data based on:
- Performance of a contract (Art. 6(1)(b))
- Legitimate interest (Art. 6(1)(f)) — service improvement, fraud prevention
- Legal obligation (Art. 6(1)(c))
- Consent where required (Art. 6(1)(a))
4. Purpose of Processing
We use personal data to:
- Provide and maintain the Service
- Process subscriptions and payments
- Provide customer support
- Improve platform functionality
- Ensure platform security
- Prevent fraud or abuse
We do not sell personal data.
5. Data Retention
We retain personal data:
- For the duration of the active subscription
- As required by accounting and tax laws
- As necessary to resolve disputes or enforce agreements
After termination, data may be deleted or anonymized unless legal retention is required.
6. International Data Transfers
The Service is operated from Ukraine.
Personal data may be processed in:
- Ukraine
- European Economic Area (EEA)
- Other jurisdictions where our service providers operate
Where required, appropriate safeguards (including contractual protections) are implemented.
7. Data Security
We implement appropriate technical and organizational measures, including:
- Secure hosting infrastructure
- Encrypted data transmission (HTTPS/SSL)
- Access control restrictions
- Monitoring and logging
However, no system can guarantee absolute security.
8. Your Rights Under GDPR
If you are located in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase personal data (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
- Lodge a complaint with a supervisory authority
Requests may be submitted to: support@tablqr.com
We may require identity verification before fulfilling requests.
9. Cookies and Analytics
The Service may use cookies and similar technologies for:
- Authentication
- Security
- Analytics
Business customers are responsible for implementing appropriate notices to their restaurant guests if required by local law.
10. Data Processing for Business Clients (Processor Clause)
When processing personal data on behalf of restaurant clients:
- We act strictly under documented instructions
- We do not use such data for our own purposes
- We implement security measures appropriate to risk
- We assist clients with GDPR compliance where reasonably possible
This Privacy Policy constitutes a basic Data Processing Agreement (DPA) within the meaning of Article 28 GDPR.
11. Third-Party Services
We may use third-party providers for:
- Payment processing (WayForPay)
- Hosting infrastructure
- Analytics tools
- Email communication
Each provider processes data in accordance with its own privacy policy and applicable law.
12. Children’s Data
The Service is intended for business users only.
We do not knowingly collect data from individuals under 18 years of age.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
The updated version will be published on the website with a revised “Last updated” date.
14. Contact Information
For privacy-related inquiries, please contact:
Sole Proprietor Huzyk Ivan Vasylovych
Registration Number: 3790112419
Registered address: Ukraine, Rivne region, Berezne 34600, Koretska St. 132
Email: support@tablqr.com