Review status: this document is an operational draft for the developing InstructQR service. The service operator must confirm its legal identity, contact details, retention schedule, and final legal terms with a qualified adviser before broader public launch.
1. Who we are
InstructQR is a developing service for creating and hosting digital product instructions. In this policy, "InstructQR", "we", and "us" refer to the operator of the InstructQR service at instructqr.co.uk.
The operator's final legal name, postal address, and registration details will be added before commercial launch. Until then, privacy questions can be sent to service@instructqr.co.uk.
2. Who this policy covers
This policy covers personal information relating to:
- people who visit the InstructQR website;
- people who open public or access-controlled manuals;
- creators and team members who sign in to manage manuals; and
- people who contact us about the service.
A manual creator may independently decide what information to include in a manual. Where a creator includes personal information in its content, that creator is responsible for its own privacy obligations.
3. Information we handle
Account and identity information
Creator accounts use Google sign-in through Supabase Auth. We may receive your name, email address, profile image, provider identifier, and authentication records needed to maintain your session. We do not receive or store your Google password.
Creator content
When creator features are available, we process the products, manuals, instructions, images, branding, support details, access settings, and related files that authorised users submit to the service.
Technical and security information
Our hosting and authentication providers may process request data such as IP address, browser or device information, timestamps, requested pages, and security events. We use this information to deliver the service, maintain sessions, diagnose failures, and prevent abuse.
Public manual use
Public manuals can be viewed without an InstructQR account. InstructQR does not currently use advertising trackers or creator-facing behavioural analytics. Standard hosting request logs may still be produced when a page is requested.
Correspondence
If you contact us, we process your contact details and the contents of your message so that we can respond and keep an appropriate support record.
Optional contributions
If you choose to support InstructQR through our external Buy Me a Coffee page, Buy Me a Coffee and its payment processor collect the information needed to process the transaction. They may make supporter details, messages, contribution amounts, and transaction status available to us. InstructQR does not receive your full payment-card details.
4. Why we use information
We use personal information where necessary to:
- provide creator accounts and requested service features under our contract with you;
- operate, secure, troubleshoot, and improve the service in our legitimate interests;
- respond to enquiries and manage our relationship with you;
- protect users, investigate misuse, and enforce our terms; and
- meet legal, regulatory, accounting, or security obligations.
Where we ask for consent for a specific use, you may withdraw that consent at any time. We do not currently make decisions about people using solely automated processing that produces legal or similarly significant effects.
5. Cookies and similar technology
InstructQR uses cookies that are necessary for Google sign-in, session security, and protected account access. These cookies are not used for advertising.
We do not currently set optional analytics or marketing cookies. If that changes, we will update this policy and introduce any consent controls required by law before those technologies are enabled.
6. Who receives information
We use service providers that help us operate InstructQR:
- Google provides the identity service selected by creator users.
- Supabase provides authentication and supporting application infrastructure.
- Vercel provides website hosting, delivery, and operational logs.
- Buy Me a Coffee provides the independent page used for optional contributions and works with its payment processors.
We may also disclose information to professional advisers, regulators, law-enforcement bodies, or another organisation involved in a genuine business transfer where lawful and necessary. We do not sell personal information.
Content published as a public manual is intentionally available to anyone with its URL or QR code. Creators should not publish personal or confidential information in a public manual.
7. International transfers
Some providers may process information outside the United Kingdom. Where UK data protection law requires safeguards, we rely on applicable adequacy regulations or contractual protections offered by those providers. Information about provider safeguards is available from the relevant provider or from us on request.
8. How long we keep information
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including providing an active account, resolving disputes, maintaining security, and meeting legal obligations.
Retention depends on the type of record, account status, legal requirements, backup cycles, and the need to prevent abuse. Provider logs and backups follow controlled lifecycle schedules. The final service retention schedule will be published before commercial launch.
9. Your data protection rights
Depending on the circumstances and the lawful basis used, you may have rights to access, correct, erase, restrict, or object to the use of your personal information, and to receive certain information in a portable format. You may also withdraw consent where processing relies on it.
These rights are not absolute. We may need to verify your identity and may retain information where the law permits or requires it. Contact us to make a request.
10. Contact, complaints, and changes
Contact service@instructqr.co.uk with a privacy question or request. We will update this policy when the service or our data practices materially change and will update the date shown above.
You can also complain to the UK Information Commissioner's Office through ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.