Privacy Policy

Last Updated: June 11, 2026

ART Media Sales is a privacy-first platform for branded QR Codes and measurable campaign engagement. This policy explains how we collect and use data when you create QR Codes, share links, and when audiences scan your QR Codes or click your short URLs. We designed our reporting to focus on campaign performance, not personal profiling.

Our Privacy-First Approach

• We do not run third-party advertising cookies or third-party tracking pixels on your campaigns.
• We do not fingerprint devices and we do not attempt to identify your audience as individuals.
• We do not build profiles of visitors or accumulate patterns of an individual’s activity across unrelated websites.
• We aim to collect only what is necessary to provide redirection services, security, and performance reporting.

Compliance

We support privacy principles aligned with South Africa’s POPIA as well as global best practices (including GDPR/CCPA concepts) where applicable. Because laws and use-cases differ, this policy is provided as a practical description of what we do and how we protect data, not as legal advice.

What Information We Collect

When someone scans a QR Code or clicks a campaign link, ART Media Sales may capture and store the following campaign event data:

• Visit date & time (timestamp).
• Approximate location (typically derived from IP-based geolocation).
• Device information (device type, operating system, browser), based on the user agent string.
• Language/locale settings where available.
• Campaign metadata needed to route the redirect (QR token, schedule/geo rules, and related settings).

IP Address & Location

IP addresses can be considered personal information under some privacy regimes. We use IP-based location to generate campaign location reporting and to help detect abuse or bot traffic. Location derived from IP addresses is generally accurate to city/region level. In some cases it may be less accurate (for example, VPNs, carrier-grade NAT, or intermediate services).

For certain campaign experiences, we may offer an optional device GPS location prompt. GPS location is only collected when the device owner explicitly opts in. If permission is not granted, we fall back to IP-based location.

What We Do Not Collect

• We do not collect sensitive personal information (health, financial status, biometrics, etc.).
• We do not collect user IDs from third-party sites, and we do not facilitate cross-domain tracking.
• We do not sell personal data.

How We Use This Information

• To provide intelligent redirection services (schedule rules, geo targeting, and device/locale routing where configured).
• To generate campaign reports (time, device, approximate location, scans/clicks).
• To detect and reduce non-human traffic, bots, spam, and abuse patterns.

Third Parties

We may use trusted infrastructure and service providers to operate the platform (for example: email delivery, IP-based geolocation, and map tile providers). We do not permit third parties to use your campaign traffic data for their own advertising. Where maps are shown, we use location data to plot approximate scan distribution, not to identify individuals.

Customer Responsibility (No PII in URLs)

It is against our Terms of Service to create or use QR destinations or short URLs that include personal information in the path, slug, or query string. If you choose to pass personal data through a URL (for example, in campaign parameters), you are responsible for notifying your users and complying with applicable laws.

Security

We use reasonable administrative, technical, and physical safeguards to protect data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. We continuously improve our controls to reduce risk.

Your Choices

• You can request access, correction, or deletion of your account information (where applicable).
• You can manage cookies through your browser settings. Some cookies are essential for login/session security.
• Where GPS location prompts are enabled, you may deny permission and the campaign will use IP-based location instead.

Contact

For privacy questions or requests, please contact us via the contact page.