Privacy Policy

Wedding QR Code is operated by D-EFFCON Pty Ltd, an Australian company (referred to in this policy as “we”, “us” and “our”). This policy applies to this website, the application in which albums are hosted, and the correspondence we send in connection with an account. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

It applies to two groups of people, and the obligations differ between them. The first is a host — a person who holds an account and has created an album. The second is a guest — a person who has scanned a QR code or followed a link in order to view or contribute photographs. Guests are not required to register, and the great majority of this policy concerns how little is asked of them.

This policy does not extend to third-party websites, applications or platforms, including any we link to. Where you follow a link away from our service, the handling of your information becomes a matter between you and the operator of that destination, and you should read the policy published there.

We collect personal information only where it is reasonably necessary for a function of the service. We do not collect information speculatively, on the basis that a use for it may emerge later.

Information reaches us in one of two ways. Information you provide is information you knowingly and actively supply — when creating an account, configuring an album, making a purchase, uploading a photograph or contacting us. Information collected automatically is information transmitted by your device in the ordinary course of accessing the service.

Information provided by hosts

• Account information — your email address and sign-in credentials, which are required to authenticate you and to correspond with you about your album.
• Event information — the names and dates entered when an album is configured. The event date is material: it is the date from which the hosting period is calculated.
• Purchase information — the plan purchased and the date of purchase. Card details are transmitted directly to our payment provider and are not received or stored by us at any point.

Information provided by guests

• The photographs and videos you elect to upload. This is the purpose of the service.
• A name, where one is supplied, so that uploads may be attributed and you are not prompted again on a subsequent visit.
• A randomly generated identifier stored in your own browser, which enables the album to recognise your uploads and permits you to withdraw them. It is not derived from your name, your email address or any characteristic of your device.

Information collected automatically

• Technical and log information of the kind received by any website — the internet protocol address of your device, browser type and version, the pages requested, and the date and time of the request. This is used to operate the service, to diagnose faults and to maintain security.
• Error information, where a fault occurs. This may include technical details of the device and of the operation being attempted at the time, and it may be recorded without notice to you at the moment of the error.
• Analytics information, but only where you have consented to it, and never within an album. Our cookie policy describes this in full.

Some of the information described immediately above will not identify an individual on its own. We acknowledge that information of this kind can, in combination with other information, become identifying, and we treat it as personal information where that is the case.

For guests, the three items listed above are the entire collection. There is no account, no password, no telephone number, no address book, and nothing that follows a guest beyond the album page.

Photographic and video content is the most sensitive category of information we hold, and the following commitments apply to it specifically.

• We do not perform facial recognition or any form of AI analysis on your content. We do not group photographs by the people in them, identify or tag individuals, score or rank content, or subject it to automated moderation.
• We do not use your content to train machine-learning models, and we do not provide it to any other party for that purpose.
• We do not use your content for marketing or advertising without first requesting your permission and obtaining it in writing.
• We do not sell your content, and we do not disclose it to any party other than the providers that store and deliver it on our behalf.
• Location data is removed from uploads as they are processed, so that a photograph taken at your venue does not carry the coordinates of that venue with it.

An album is private. It is reachable only by those to whom you have given the QR code or link, it is not indexed by search engines, and it is not listed in any public directory. You determine whether guests may view the album in full or only the content they have contributed themselves.

Should any of the above cease to be accurate, this page will be amended publicly before the relevant feature is released. We will not begin analysing content that was uploaded on the strength of these commitments.

Content uploaded by a guest is contributed to an album belonging to the host, and the host is able to view it. This is a necessary characteristic of the service, and hosts are encouraged to make their guests aware of it.

A guest who wishes to withdraw content may do so directly while the album remains live. Where the browser used no longer recognises the guest — because a different device has been used, or because storage has been cleared — the request should be directed to the host, who may remove any content from their own album at any time. A guest who would prefer to deal with us directly may contact us and we will assist.

Where you supply us with information concerning another person, you confirm that you are entitled to do so. Wedding QR Code is not intended for use by children. A guest who is a child should obtain the permission of a parent or guardian before uploading, and we do not knowingly collect personal information from children.

We use personal information for the purpose for which it was collected and for directly related purposes, namely:

• to provide the service — creating and hosting albums, receiving uploads, and making content available to those entitled to view it;
• to authenticate you and maintain the security of your account and album;
• to process purchases and to issue receipts and records of them;
• to correspond with you about your album, including reminders sent before a hosting period ends;
• to respond to support requests and to investigate faults;
• to detect, prevent and address misuse, fraud and security incidents;
• to understand which parts of our websites are used, where you have consented to analytics; and
• to comply with our legal and record-keeping obligations.

We do not use personal information for any purpose that is incompatible with those listed above, and we do not engage in automated decision-making that produces a legal or similarly significant effect on you.

Content you publish and tag us in

Where you publish material on your own social media account and tag, mention or link us in it, you permit us to re-share that material on our own social media channels. We will attribute it to you, we will not alter its substance, and we will withdraw it promptly on request. Our terms of service set this out in full.

This concerns only material you have chosen to publish yourself. Content uploaded to an album is never used for our marketing under any circumstances, and the commitments recorded under Photographs and video content above are not qualified by anything in this section.

We collect and use personal information only where we are permitted to do so. In practice this will be on one of the following bases.

• Performance of our agreement with you — where the handling is necessary in order to provide the service you have purchased or requested. Hosting an album and processing uploads fall into this category.
• Your consent — where you have expressly agreed, as with analytics cookies or optional marketing correspondence. Consent may be withdrawn at any time, although withdrawal does not affect anything already done on the strength of it.
• Our legitimate interests — where the handling is necessary to operate, secure and improve the service, and is not outweighed by your interests or rights. Fault diagnosis and abuse prevention fall into this category.
• Compliance with law — where we are required to collect or retain information, most commonly in connection with taxation and business records.

You are not obliged to provide personal information to us. Where information is necessary to a particular function, however, declining to provide it may prevent us from making that function available to you.

We engage a small number of service providers to perform functions on our behalf — hosting and storage, authentication, payment processing, email delivery, and analytics where it has been accepted. Each receives only the information required to perform its function, each is bound to use that information for no other purpose, and none is permitted to disclose it onward.

Album content and account data are stored in Australia. Certain providers on which we rely operate internationally, and elements of the supporting infrastructure — content delivery, email transmission and error reporting — may therefore be located overseas. We select providers subject to privacy standards comparable to those that bind us, and we remain accountable for information disclosed to them.

We may also disclose personal information where disclosure is required by law, or where it is genuinely necessary to prevent a threat to the life, health or safety of a person. These are the only additional circumstances in which disclosure occurs.

Change of control

If our business or its assets are acquired, merged or otherwise transferred, personal information held by us may be transferred as part of that transaction. Any acquirer would be required to continue handling that information in accordance with this policy, and we would give notice of such a transfer to hosts with a live album before it took effect, wherever we were reasonably able to do so.

We do not sell personal information, and we never have. There is no data broker, no advertising network, no remarketing, and no list that anyone has been placed on.

An album and its contents are retained for the hosting period applicable to the plan purchased, together with a grace period following it during which the hosting may be extended. The dates applicable to a particular album are shown in the host’s dashboard and are stated in the reminder correspondence we send. At the conclusion of that period the content is permanently deleted and cannot be recovered.

A host may delete an album or close an account at any time, which removes the content held within it. We retain records of purchases for the period required by taxation and business law, as we are not permitted to dispose of them earlier. Information that is no longer required for any purpose is deleted or irreversibly anonymised.

We recommend that you retain your own copy of any content that matters to you. No online service should be the only place in which your wedding photographs exist.

Information is transmitted over encrypted connections and stored subject to access controls that isolate each album from every other. Internal access is restricted to those personnel who require it in order to operate the service or to respond to a support request. Payment card details are handled exclusively by our payment provider and are not stored on our systems.

You are responsible for maintaining the confidentiality of your own sign-in credentials, and for the security of the devices on which you access the service.

No method of electronic transmission or storage is entirely secure, and we do not represent otherwise. Where an incident affecting your personal information occurs, we will inform you promptly and candidly, and will notify the Office of the Australian Information Commissioner where we are required to do so.

You may request access to the personal information we hold about you, request the correction of information that is inaccurate, out of date, incomplete or misleading, or request its deletion. These rights are available to hosts and guests alike, and an account is not required in order to exercise them.

Requests should be directed to [email protected] and will be handled by a person — ordinarily within one or two business days, and in every case within the period allowed by law. We may first require verification of your identity, particularly where deletion is requested. Where we are unable to give effect to a request, we will explain why.

We will not treat you less favourably for having exercised any of these rights. We will not refuse you service, alter the price or quality of what we provide, or withdraw any benefit on that basis.

Correspondence concerning your own album — notice that a hosting period is ending, receipts, and anything else required in order that content is not lost — forms part of the service purchased rather than marketing, and cannot be unsubscribed from while an album remains live. Correspondence that is genuinely marketing carries an unsubscribe facility, and we will act on it.

What is stored on your device, and the analytics choice presented to you — once on this website, and separately within the application — are addressed in full in our cookie policy. In summary: nothing optional is loaded until you have accepted it, and nothing measures activity within an album.

Cookies may also be refused or removed through your browser settings, although some functions of the service will not operate correctly if cookies are blocked entirely. Browsers additionally offer a “Do Not Track” signal; there is no agreed standard for responding to it and we do not act on it, but the analytics choice described above governs our conduct regardless of the setting.

We may amend this policy to reflect changes to the service, to our practices, or to the law. The date on which the current version took effect is shown at the top of this page. Where an amendment materially affects you, we will notify hosts with a live album before it takes effect, wherever we are reasonably able to do so.

Enquiries concerning privacy, or any other matter, should be directed to [email protected]. A person will respond.

If you are dissatisfied with the manner in which we have handled a privacy matter, please raise it with us in the first instance and we will seek to resolve it. Should you remain dissatisfied, you are entitled to refer the matter to the Office of the Australian Information Commissioner, the Australian privacy regulator.

Our terms and conditions govern all other aspects of your use of Wedding QR Code.