Privacy Notice

Who we are

Azif Mir trading as EasyTagz operates the EasyTagz service. Our contact address is 94 Dunstall Hill, Wolverhampton, WV6 0SP, United Kingdom. You can contact us at info@easytagz.co.uk.

This notice explains how EasyTagz handles personal information for customer accounts, NFC/QR stand routing, analytics, reports, support, billing and physical stand fulfilment. A business whose EasyTagz stand you use may also determine how it uses customer feedback or analytics generated through that stand.

Our role and your venue

For instructed venue requests, bookings, conversations and feedback, the venue or customer normally determines purposes and lawful bases and EasyTagz acts as processor. For our own account administration, billing, necessary security and legal obligations, EasyTagz acts as controller. The customer data-processing schedule explains instructions, subprocessors, assistance and return/deletion. Do not put sensitive health or identity documents or payment credentials into guest comments.

Information we handle

This can include account and business contact details, login/security and session information, stand configuration, order and delivery details, Stripe payment and refund references, guest request and booking details, housekeeping requests, request items and history, guest/staff conversations, first-party Experience ratings or feedback, and engagement telemetry such as time, device class, user agent, referrer and pseudonymous visitor identifiers (which are not necessarily anonymous).

We also maintain account activity totals for usage warnings and any voluntary request cap chosen by the owner. A secure first-party visitor cookie, retained for up to 30 days, can distinguish browsers for abuse protection without grouping guests by shared Wi-Fi. It is not used for advertising; cookie-disabled visitors retain stand access.

Why we use it and our lawful bases

We process information where it is necessary to perform or take steps connected with a contract, for example providing an account, routing stands, managing memberships and fulfilling orders. We also process information where necessary for legitimate interests such as securing the platform, preventing abuse, maintaining service reliability, providing requested analytics and improving EasyTagz, provided those interests are not overridden by individual rights. We may process information to comply with legal obligations, including appropriate financial and regulatory record keeping. Where we specifically rely on consent, it can be withdrawn for future processing.

Who receives information

We use service providers including Cloudflare for hosting and database infrastructure, Stripe for payments and refunds, and Resend for transactional email. We may also disclose information where required by law, to protect the service or its users, or to professional advisers where reasonably necessary.

International processing

Some service providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we rely on the provider's applicable transfer mechanism or other legally recognised safeguard and can provide further information on request.

Retention

Approved workspace and closed-request erasure runs in bounded stages, subject to valid instructions, eligibility checks and legal holds. Removal is not instantaneous. Contact support for an individual rights request.

Scheduled maintenance removes tap and analytics-event records older than 1825 days in bounded batches; expiry is not instantaneous. This source limit does not mean all other guest history is erased at the same time. We review purpose, necessity and valid earlier deletion requests separately. Security, email and webhook diagnostic data is retained for shorter operational periods and is progressively stripped of payloads. Completing or cancelling a guest request does not immediately delete its history or conversation. Eligible closed requests can be erased under a business owner's justified retention instruction once the retention service is activated; active work, future bookings and documented legal holds are protected. Ordinary workspace closure has a recovery window, after which erasure proceeds in bounded resumable steps. Recovery stops once final erasure starts. Billing reconciliation is tracked separately so a provider failure does not indefinitely retain unnecessary guest content. Necessary financial/order records may still contain personal information and are restricted and retained for their applicable reconciliation, fraud-prevention, accounting or legal purpose. Temporary owner-export snapshots expire after one hour. Provider backups and copies require separate restricted-retention and erasure arrangements; closure does not mean every provider backup is instantly erased. A valid individual rights request is assessed separately from ordinary workspace closure.

Your rights

Depending on the circumstances and lawful basis, UK data-protection rights can include access, correction, deletion, restriction, objection and data portability. You may also withdraw consent where consent is the basis used. Account owners can export account data, manage notification preferences and schedule deletion in EasyTagz, and anyone can contact us to exercise an applicable right.

Your right to object: where we rely on legitimate interests, you can object to that processing and we will consider the objection in accordance with applicable law.

Providing information and automated decisions

Some information is required to create and secure an account, process payment, fulfil an order or provide requested EasyTagz functionality. If required information is not provided, the relevant service may not be available. EasyTagz does not use solely automated decision-making about individuals that produces legal or similarly significant effects.

Complaints

Use the contact below to raise a privacy complaint directly with EasyTagz. We must acknowledge a data-protection complaint within 30 days, make appropriate enquiries, keep you informed and communicate the outcome without undue delay. This complaint process is separate from the assessment and deadlines for an individual rights request. You also have the right to complain to the UK Information Commissioner's Office (ICO). Visit the ICO complaints service.

Questions can be sent to info@easytagz.co.uk.

Back to EasyTagz