Legal
Last updated: 1 September 2026
CodiQR ("CodiQR", "we", "us" or "our") operates a Dynamic QR Code platform that allows users to create, customise, manage and analyse QR Codes.
This Privacy Policy explains how CodiQR collects, uses, stores and protects personal information when people:
CodiQR is based in South Africa and aims to process personal information in accordance with applicable South African privacy requirements, including the Protection of Personal Information Act, 2013 ("POPIA"), where applicable.
The information CodiQR processes depends on how the service is used.
Account Information
When a user creates an account, we may collect information such as:
QR Code Information
When a user creates or manages a QR Code, CodiQR may store:
Scan Information
When a CodiQR Dynamic QR Code is scanned, we may process technical information needed to perform the redirect, protect the service and provide analytics.
Depending on available technology, this may include:
Approximate location is derived from the IP address and should not be represented as precise GPS location. CodiQR does not collect precise GPS location unless that is separately implemented with appropriate permission.
CodiQR may allow visitors to create certain free or promotional QR Codes without creating an account.
Where this functionality is available, CodiQR may process information necessary to:
CodiQR may use browser storage and reasonable server-side controls to determine whether a promotional offer has already been claimed.
CodiQR does not use invasive device fingerprinting for promotional eligibility unless this is separately implemented and appropriately disclosed.
Promotional QR records may include:
An account is not required for promotional QR Codes where the specific campaign allows creation without signup.
CodiQR uses third-party payment providers to process eligible purchases and subscriptions.
CodiQR currently uses Paystack for supported payment processing.
Payment information may be processed directly by Paystack according to its own privacy and security practices.
CodiQR may receive transaction-related information necessary to:
CodiQR does not store full card numbers, CVV numbers or other complete payment-card credentials. Where Paystack processes those details, it does so directly under its own practices.
CodiQR may use information to:
Where permitted and appropriately configured, CodiQR may also measure the performance of advertising campaigns.
CodiQR Dynamic QR Codes generally operate through CodiQR's redirect infrastructure.
When a Dynamic QR Code is scanned:
This means certain technical information may be processed by CodiQR before the visitor reaches the destination website.
The destination website may independently collect information under its own privacy policy.
CodiQR is not responsible for the privacy practices of third-party destination websites.
Scan information may be associated with a particular Dynamic QR Code so the QR Code owner can view analytics through CodiQR.
Analytics may include:
Analytics are not presented as identifying the individual person who scanned the QR Code unless CodiQR has a lawful and specifically disclosed basis for doing so.
CodiQR does not sell QR scan data to third parties.
CodiQR may advertise through platforms such as Google and Meta.
Where advertising measurement technologies are enabled, information about visits or actions on CodiQR may be processed to understand campaign performance.
Examples may include:
The actual technologies and consent controls used by CodiQR determine what information is collected.
CodiQR does not currently install advertising or conversion-measurement trackers (such as Meta Pixel or Google Ads conversion tracking) on the platform. This Privacy Policy will be updated if and when such technologies are introduced.
CodiQR relies on third-party service providers to operate parts of the platform.
Those providers may process information according to their respective agreements and privacy practices.
Where practical, CodiQR aims to provide links to relevant third-party privacy information where appropriate.
This policy only references third-party providers that CodiQR actually uses in production.
Some CodiQR service providers may process or store information outside South Africa.
Where personal information is transferred internationally, CodiQR will aim to use appropriate safeguards and service providers consistent with applicable data protection requirements.
This policy does not state that all CodiQR data is stored in South Africa unless that has been technically verified.
CodiQR retains information only for as long as reasonably necessary for the purposes for which it was collected, subject to operational, security, contractual and legal requirements.
Retention periods may vary depending on the type of information. For example:
Where information is no longer reasonably required, CodiQR may delete, de-identify or anonymise it, subject to applicable legal requirements.
CodiQR uses reasonable technical and organisational safeguards intended to protect personal information against:
Where appropriate, safeguards may include encrypted transmission, access controls and infrastructure security.
However, no online service or method of electronic storage can guarantee absolute security.
Subject to applicable law, users may have rights relating to their personal information.
These may include the right to:
Some information may need to be retained where required for legal, security, fraud-prevention, accounting or other legitimate purposes.
Where supported by CodiQR, users may manage certain information directly through their dashboard.
This may include:
Deleting a QR Code from the user interface does not necessarily mean every related technical or legally required record is immediately removed from all systems.
CodiQR is not intentionally designed to collect personal information directly from young children.
Users must satisfy the eligibility requirements in the CodiQR Terms of Service.
If CodiQR becomes aware that personal information has been collected in circumstances that require parental or guardian consent under applicable law, appropriate steps may be taken.
People do not need a CodiQR account merely to scan a CodiQR Dynamic QR Code.
When someone scans a Dynamic QR Code, technical information may nevertheless be processed as described in this Privacy Policy because the request passes through CodiQR's redirect infrastructure.
QR Code owners should not use CodiQR to unlawfully collect or process personal information through their destination websites.
CodiQR QR Codes may redirect users to third-party websites.
Those websites are independent from CodiQR.
Users should review the privacy policies of destination websites to understand how those organisations process information.
CodiQR may update this Privacy Policy when:
The current version will be published on this page with an updated date.
Where appropriate, material changes may also be communicated through the platform or by email.
Users may contact CodiQR regarding:
Use the existing CodiQR Contact page.
Where POPIA applies, individuals may have rights relating to the processing of their personal information under South African law.
CodiQR aims to provide a reasonable mechanism for privacy-related requests.
Where required by applicable law, individuals may also have the right to raise concerns with the relevant South African regulatory authority.
Questions about your privacy?
Contact CodiQR