Privacy policy

Data controller

Frédéric Brosset, sole trader

Trade name: QLII

SIREN number: 937553675

Business address: 144, avenue Charles de Gaulle, 92200 Neuilly-sur-Seine

Email: contact@qlii.me

Data collected

Account data: email address, user identifier, account security information and preferred language.

Business data: business or establishment name, address, professional contact details, description, links and information used to present the activity.

Content: texts, images, videos, logos and other media added by the user.

Subscription and billing data: subscribed plan, subscription status, start and renewal dates, billing information, and transaction or customer identifiers provided by Stripe.

Full payment card details are processed directly by Stripe and are not stored by QLII.

Technical data: IP address, connection or usage date and time, browser, device type, and technical logs required for security and incident diagnosis.

QR code and analytics data: scan date and time, related business page, technical access information and, where applicable, approximate geographic information.

QLII does not seek to personally identify visitors to a business page from these analytics data.

Purposes of processing

Data is used to create and manage accounts, provide the QLII service, publish business pages, manage QR codes, subscriptions and payments, secure the service, prevent abuse, provide support, send necessary communications and produce usage statistics.

Legal bases

Depending on the processing involved, QLII relies on performance of the contract, compliance with legal obligations, legitimate interests including securing and improving the service, and consent where required.

Service providers

QLII uses technical service providers to operate its service, including Microsoft Azure for hosting, Stripe for payments and subscriptions, Brevo for email delivery and Cloudflare Turnstile for form protection.

International transfers

Some service providers may process data outside the European Economic Area. When such transfers occur, QLII ensures that they rely on a mechanism recognized by applicable regulations, such as an adequacy decision or standard contractual clauses approved by the European Commission.

Data retention

Data is retained only for as long as necessary for the purposes for which it is processed. Account data is kept for the duration of use of the service, while certain data may be retained longer to comply with legal obligations or protect legal rights. Billing and accounting records are retained for the applicable statutory periods.

Cookies and local storage

QLII uses cookies or similar mechanisms that are strictly necessary for the operation of the service, particularly for authentication, security and remembering certain preferences such as language. If trackers requiring consent are added in the future, they will only be activated after that consent has been obtained where required.

Emails

QLII may send emails necessary for the operation of the service, including email address confirmation, account security, access recovery, subscriptions, payments and important service information.

Security

QLII implements reasonable technical and organizational measures to protect data against unauthorized access, disclosure, alteration, loss or destruction.

Your rights

Subject to applicable law, you may request access to your personal data, correction, deletion, restriction of processing, portability where applicable, object to certain processing, and withdraw your consent where processing is based on it.

Email: contact@qlii.me

Complaint to the CNIL

If you believe that the processing of your personal data does not comply with applicable regulations, you may lodge a complaint with the French Data Protection Authority (CNIL).

Changes to this policy

This policy may be updated to reflect changes to the service or legal and regulatory requirements. The date of the latest update is shown at the top of this page.