Traciqo ("Traciqo", "we", "us") operates the platform available at traciqo.com and its tenant sub-domains and connected custom domains. Traciqo is being incorporated as a company in the United Kingdom; this policy will be updated with the registered company name, number, and registered office once incorporation is complete.
For privacy matters you can reach us at [email protected].
Traciqo serves two kinds of people, and our role under data protection law differs accordingly:
This policy describes both. Where a business is the controller, end users should also consult that business's own privacy notice.
| Feature | Data collected |
|---|---|
| QR / product scan logs | Timestamp, IP address, user agent, browser, operating system, device type, a device fingerprint and confidence score, referrer, approximate country/city, and anomaly-detection signals. |
| Precise location (optional) | GPS latitude/longitude and accuracy — only when the business enables precise scan location and the end user's browser grants permission. See section 6. |
| Warranty registration | Customer name, email, phone, product/serial details, purchase and manufacture dates, uploaded invoices, and any custom registration fields configured by the business. |
| Lead capture | Name, email, IP address, and the timestamp of the scan that generated the lead. |
| Feedback | Rating, free-text comment, IP address, and timestamp. |
We do not sell personal data, and we do not use end-user scan or warranty data for our own advertising.
Where Traciqo is the controller, we rely on:
Where Traciqo is a processor, the relevant legal basis is determined by the business customer (the controller).
Approximate location (country/city) is derived from IP address for security and analytics. Precise GPS location is only collected when a business explicitly enables it and the end user grants browser location permission. End users can decline the browser prompt, in which case only approximate IP-based location is used. Device fingerprints are used to recognise repeat scans and to flag anomalies that may indicate counterfeiting; they are not used to track individuals across unrelated third-party websites.
We use strictly necessary cookies for session management, security (CSRF protection), and login. We do not use third-party advertising cookies. Public scan and verification pages function without requiring login.
We use a limited set of trusted providers to operate Traciqo:
| Provider | Purpose | Data involved |
|---|---|---|
| Oracle Cloud Infrastructure | Cloud hosting and storage | All platform data |
| Stripe | Subscription payments and billing | Billing contact, payment tokens (Stripe stores card data; we do not) |
| Email / SMTP provider | Transactional & notification email | Recipient email and message content. Businesses may configure their own SMTP. |
| WhatsApp messaging | Optional customer notifications | Phone number and message content (when enabled by the business) |
| Apple Wallet / Google Wallet | Optional digital warranty passes | Pass content issued at the business's request |
We will keep this list current as our providers change. A more detailed sub-processor list is available on request to business customers.
Traciqo and some of its sub-processors may process data outside your country, including outside the UK/EEA. Where we transfer personal data internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or EU Standard Contractual Clauses where required.
We retain account and billing data for the life of the account and as required for tax and legal purposes. End-user data (scans, warranties, leads, feedback) is retained for as long as the business customer maintains the data in their workspace or until they instruct us to delete it. When a subscription ends, data may be retained for a limited grace period before deletion, and backups are rotated on a defined schedule.
Subject to applicable law (including the UK GDPR and Data Protection Act 2018), you have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO).
We apply technical and organisational measures including per-tenant data isolation, encryption in transit, encryption of stored secrets, access controls, and regular backups. See our Security page for details.
Traciqo is a business-to-business platform and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided data through a feature built on Traciqo, contact the relevant business or us at [email protected].
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying account holders.
Privacy enquiries and data-rights requests: [email protected].