Privacy & Data Protection Policy
*Last updated: November 06, 2026*
**Zero Tracker Guarantee:** QRKiosque uses NO third-party advertising cookies, NO marketing profiling trackers (no Facebook Pixel, no Google Ads scripts). Only strictly technical cookies for authentication and language are deployed.
1. Applicable Regulatory Framework
QRKiosque is designed to comply with:
1. The **European General Data Protection Regulation (GDPR - EU 2016/679)**.
2. Applicable African data protection frameworks (including Law n° 2010/012 in Cameroon, Law n° 2013-450 in Ivory Coast, and related regional African privacy regulations).
2. Collected Data & Retention
- **Merchant Account:** Name, professional email, phone number, secure hashed password. Retained for active account lifecycle plus 3 years.
- **Payment Records:** Transaction IDs, currency, billing logs. Retained for 10 years pursuant to statutory commercial tax obligations.
- **Analytics:** Aggregate page visits and catalog scans. Retained for 90 days.
- **WhatsApp Orders:** Orders are routed directly via WhatsApp Click-to-Chat protocol and are not permanently archived on our database servers.
3. Server Hosting & Infrastructure Security
- Data resides securely on enterprise cloud infrastructure in the European Union (Paris, eu-west-3) with ISO 27001 and SOC 2 certifications.
- All web traffic is encrypted in transit via TLS 1.3 with automated HSTS.
4. Your Rights
You hold the right to access, rectify, export, and delete your personal data. Data export tools are directly accessible within the Merchant dashboard. Privacy requests may be addressed to: **[contact@qrkiosque.com]**.