Privacy Policy

A clear note before we begin

We know privacy pages are often difficult to read. This page explains, in straightforward language, what information ELMARWA receives, why we need it, and the choices available to you.

Information you give us

When you create an account or contact us, we may receive your name, email address, phone number and the information included in your message. Your password is stored as a protected hash; we cannot read the original password.

When you create a QR code, we store its name, destination, content, appearance and settings so that you can manage and update it later. Please do not place confidential personal information inside a public QR page.

Payments and receipts

PayPal processes PayPal payments using its own systems and privacy practices. ELMARWA stores the order and capture references needed to confirm payment, but does not store your full card number or CVV.

For InstaPay requests, we receive the transfer details and receipt you upload. Authorised accounts staff can review this information to confirm that the transfer reached the receiving account.

How we use information

We use information to operate your account, deliver QR services, confirm payments, provide support, prevent abuse, investigate technical problems and improve reliability. We do not sell your personal information.

QR scan analytics

When a dynamic QR code is scanned, we record the QR code identifier, scan time, browser and device information supplied in the User-Agent, country when available, and a hash derived from the connection IP address. The scan-event record stores this hash instead of the plain IP address and does not include GPS coordinates. We use these records to provide QR analytics and protect the service.

Cookies and security

We use essential cookies to keep you signed in, remember language preferences and protect forms and accounts. Security services may also process limited technical information to detect automated or harmful requests.

When information is shared

Information is shared only when needed to operate the service—for example with hosting, security or payment providers—or when we are legally required to do so. Staff access is limited according to role and operational need.

How long information is kept

We keep account and QR information while your account is active and for a reasonable period afterwards when needed for recovery, security, accounting or legal obligations. Payment records may be retained for the period required by financial and legal rules.

Your choices

You may ask us to explain, correct or delete personal information linked to your account, subject to security, payment-record and legal requirements. Deleting an account can stop its hosted dynamic QR codes from working, so we will explain the effect before completing the request.

Contact us

For a privacy question or request, email info@elmarwa.org from the address connected to your account. We may ask for reasonable verification before changing or releasing account information.