1. Scope
This policy applies to the QR3X public website, Request Demo and Contact forms, Hospitality Intelligence Tools, and QR3X-powered guest experiences where QR3X collects or processes information for its own purposes or on behalf of a participating hospitality business.
A hotel, villa, restaurant, beach club, spa or other customer may have its own privacy notice and may determine additional purposes for information collected through its QR3X experience. In those cases, the property’s notice and instructions may also apply.
2. Who operates QR3X
QR3X is operated under the public name QR3X Hospitality. The exact contracting entity, billing entity or client-specific data roles may be identified in the applicable proposal, order form, terms or data-processing documentation.
3. Information we may collect
Information you provide
- Name, business or property name, business type and location
- Email address or WhatsApp number
- Demo preferences, enquiry category, message and operational information you choose to submit
- Feedback, ratings, reward or offer claim information
- Consent selections and the version of the notice shown
Technical and interaction information
- Anonymous or pseudonymous session and visitor identifiers
- QR source, campaign, page, module, item, offer or action used
- Browser, device category, language, approximate time and compatibility information
- AR start, success, failure or lite-fallback events where enabled
- Security, error and anti-abuse signals
QR3X does not require payment-card details for basic website, tool or guest-hub use and does not intentionally use invasive device fingerprinting for ordinary return-visit measurement.
4. Forms, demo requests and enquiries
When you submit a demo or contact form, QR3X stores the information after you accept the displayed consent statement. The record may be linked to an anonymous profile, the source page, the enquiry type and an immutable consent log. The information is used to review and respond to the request, maintain follow-up history, prevent abuse and improve the business workflow.
Do not submit passwords, full payment details, health information, government identifiers or sensitive guest records through public forms.
5. Analytics, cookies and browser storage
QR3X may use cookies, local storage or similar browser features to maintain preferences, language, anonymous session continuity, approximate return visits, form security and product analytics. Return-visit detection should use random identifiers rather than invasive fingerprinting.
Analytics events may include page loads, QR source, tool use, menu or service interest, offer engagement, WhatsApp intent, feedback and optional AR activity. A WhatsApp click or order-intent event is not treated as proof of a completed purchase.
6. Camera and optional AR access
Camera access is optional and should be requested only after you choose a camera-based or AR feature. Browser permission controls determine whether access is granted. Core guest utility should remain available without camera access where supported by the relevant property configuration.
Unless a specific feature clearly states otherwise, QR3X does not intentionally upload or store the live camera feed on its servers. External browser or device AR functions may be governed by the device or platform provider.
7. How information is used
- Provide the website, Intelligence Tools and guest experiences
- Respond to demo, contact, partnership, support and privacy enquiries
- Route guest orders, bookings or service enquiries to the relevant WhatsApp destination
- Generate diagnostic or estimated-opportunity results
- Measure guest interest, QR performance and conversion intent
- Maintain consent, lead, feedback and operational records
- Protect the service, prevent abuse and troubleshoot compatibility
- Improve content, workflows and product performance
- Meet applicable contractual, legal, accounting or dispute-handling obligations
8. Consent and communication preferences
Where a form relies on consent, the consent text, purpose, source and policy version are recorded. You may decline to submit the form and use other public content without providing contact details.
Submitting an enquiry allows QR3X to respond to that enquiry. It does not automatically subscribe you to unrelated bulk marketing. Any future promotional communication should provide an appropriate preference or opt-out mechanism.
9. WhatsApp, review platforms and external services
QR3X may link to WhatsApp, Google Reviews, TripAdvisor, maps, social networks or other third-party destinations. When you leave QR3X or open an external application, that provider’s terms and privacy practices apply. QR3X does not control the external provider’s processing.
Pre-filled WhatsApp messages may include the property name, selected service, item list, QR source, table or room context and information you choose to add before sending.
10. Service providers and hosting
QR3X uses website hosting, WordPress, database, email-delivery and technical service providers needed to operate the platform. Providers may process limited information under their own agreements and security responsibilities. QR3X does not sell personal information as a product.
11. Data retention
Retention depends on the record type, purpose, customer instructions, security needs, disputes and legal obligations. Contact and lead records may be retained while an enquiry or commercial relationship is active and for a reasonable period afterward. Raw analytics may be aggregated or deleted according to configured retention rules. Consent and audit records may be retained longer where needed to demonstrate the history of a submission or request.
12. Security measures
QR3X uses measures appropriate to its shared-hosting architecture, including HTTPS, WordPress authentication, role-based access, input validation, output escaping, prepared database queries, upload controls, nonces, honeypots, rate limiting, backup procedures and restricted public exposure of notification addresses.
No internet service can guarantee absolute security. Users should avoid sending unnecessary sensitive information through public channels.
13. International access and processing
QR3X is intended for hospitality businesses and guests in multiple countries. Information may be accessed or processed in countries different from the user’s location, depending on hosting, service providers, property operations and support arrangements. Client-specific international-transfer requirements should be addressed in the relevant agreement and legal review.
14. Access, correction, deletion and other requests
You may submit a request to access, correct, delete or anonymize information associated with you, or to ask a question about processing. Select “Privacy or data request” on the secure Contact page.
QR3X may request proportionate verification before disclosing or changing information. Some records may be retained where required for security, legal claims, consent evidence, accounting, fraud prevention or other legitimate obligations. The public form does not automatically disclose or delete data.
15. Children’s privacy
QR3X is designed for general hospitality guest and business use and is not intentionally directed at children for independent account creation or marketing lead capture. Parents, guardians and participating properties should supervise use where appropriate.
16. Changes to this policy
QR3X may update this policy as the platform, legal requirements, service providers or public workflows change. The effective date and version at the top of the page identify the current publication. Material changes may also be communicated through the website or relevant client channels.
17. Contacting QR3X about privacy
Use the secure Contact page and select “Privacy or data request.” QR3X does not need to publish a personal phone number or public recipient email address for this purpose.