Privacy Policy

Last updated: 21 October 2026

This policy explains how we collect and use personal data when you visit qr-reader.co.uk, buy from our online store, or get in touch with us. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

qr-reader.co.uk is run by Sensor Access Technology Ltd, a company registered in England and Wales under company number 03816786. We have been a UK access control global supplier since 1999.

We are the controller of the personal data described in this policy.

Contact us about privacy:

  • Post: Sensor Access Technology, Sussex Innovation Centre, Science Park Square, Falmer, Brighton, BN1 9SB

  • Email: sales@sensoraccess.co.uk

  • Phone: 01273 242355

2. What we collect

Information you give us

  • Enquiry and contact forms: your name, email address, phone number, company name and the details of your message or enquiry.

  • Orders: your name, billing and delivery addresses, email address, phone number, the products you buy and your order history.

  • Payment details: card and payment details are entered on and handled by the payment processor at checkout. We do not see or store your full card number.

  • Correspondence: anything you send us by email, phone or post.

Information collected automatically

  • Technical data such as your IP address, browser and device type, pages visited, how you arrived at our site and how you interact with it. Some of this is collected through cookies and similar technologies (see section 4), and analytics and advertising cookies are only set if you agree.

  • Signals used by Google reCAPTCHA to check that form submissions come from a person and not an automated program.

We do not knowingly collect data from children, and our products are sold to businesses and adults.

3. Why we use your data and our lawful basis

  • Purpose: Processing and delivering your order, handling returns and providing after-sales support; Lawful basis under UK GDPR: Contract

  • Purpose: Taking payment and preventing fraud; Lawful basis under UK GDPR: Contract and legitimate interests (preventing fraud)

  • Purpose: Replying to your enquiry or contact form, including quotes; Lawful basis under UK GDPR: Legitimate interests (responding to people who contact us) or steps taken at your request before entering into a contract

  • Purpose: Protecting our forms from spam and abuse with Google reCAPTCHA; Lawful basis under UK GDPR: Legitimate interests (keeping our site secure)

  • Purpose: Keeping accounting and tax records; Lawful basis under UK GDPR: Legal obligation

  • Purpose: Running and securing our website; Lawful basis under UK GDPR: Legitimate interests

  • Purpose: Measuring how our website is used (Google Analytics); Lawful basis under UK GDPR: Consent

  • Purpose: Measuring and improving our advertising (Google Ads conversion tracking and remarketing, if used); Lawful basis under UK GDPR: Consent

  • Purpose: Sending you marketing emails; Lawful basis under UK GDPR: Consent, or for existing business customers, our legitimate interests where PECR permits. You can opt out at any time.

Where we rely on legitimate interests, we have weighed our interests against your rights. You can ask us for more detail.

4. Cookies

Cookies are small files placed on your device. When you first visit, our cookie banner lets you Accept all or Manage cookies. Only strictly necessary cookies are set without your consent. Analytics and advertising cookies are only set if you opt in, and you can change your choice at any time through the "Cookie Preferences" button shown at the bottom of the page after you have made a choice.

  • Category: Strictly necessary; What it does: Makes the site and checkout work, remembers your basket and your cookie choices, and keeps the site secure; Examples: Squarespace session, basket and security cookies; Consent needed?: No

  • Category: Security (Google reCAPTCHA); What it does: Protects our enquiry and contact forms from spam and bots; Examples: Google reCAPTCHA (_GRECAPTCHA and related Google cookies); Consent needed?: No, as it is needed for the security of the forms you choose to use

  • Category: Analytics (Google Analytics 4); What it does: Tells us how visitors use the site so we can improve it; Examples: ga, ga_ZQ41KMXZ25; Consent needed?: Yes

  • Category: Advertising (Google Ads); What it does: Measures whether our Google Search and Display ads lead to enquiries or sales, and may be used to show our ads to people who have visited the site; Examples: gclau and Google advertising cookies; Consent needed?: Yes

Cookie names and lifetimes can change. For a current list, see the Squarespace cookie notice at https://www.squarespace.com/cookie-policy. You can also block or delete cookies in your browser settings, although parts of the site, such as checkout, may then not work.

More information on how Google uses data is at https://policies.google.com/technologies/partner-sites.

5. Who we share your data with

We only share personal data where needed for the purposes above:

  • Squarespace: our website, store and forms are provided by Squarespace, which processes data on our behalf, including order and form submission data.

  • Payment processors: payments at checkout are handled by Squarespace Commerce and its payment processor, Stripe. Stripe acts as an independent controller for some purposes, such as fraud prevention and meeting financial regulations.

  • Google: for Google Analytics, Google Ads and reCAPTCHA.

  • Couriers and delivery companies: your name, delivery address and contact details so they can deliver your order.

  • Professional advisers and authorities: such as our accountants, insurers or legal advisers, or where the law requires us to disclose data.

We do not sell your personal data.

6. International transfers

Some of our service providers, including Squarespace and Google, may process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. You can contact us for more information.

7. How long we keep your data

We keep personal data only for as long as we need it:

  • Data: Enquiry and contact form submissions; Retention period: 24 months

  • Data: Order and customer records; Retention period: 6 years from the end of the financial year

  • Data: Accounting and tax records; Retention period: 6 years from the end of the financial year

  • Data: Marketing preferences; Retention period: 24 months

  • Data: Google Analytics data; Retention period: 14 months (user-level data); event-level data 2 months

When data is no longer needed, we delete it or anonymise it securely.

8. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Our website and checkout use encrypted (HTTPS) connections, and payment card details are handled by payment processors that meet the Payment Card Industry Data Security Standard (PCI DSS). Access to personal data within our business is limited to staff who need it. No online service can be fully secure, so please contact us if you have any concerns.

9. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;

  • rectification of inaccurate or incomplete data;

  • erasure of your data in certain circumstances;

  • restrict how we use your data in certain circumstances;

  • object to our use of your data where we rely on legitimate interests, and to direct marketing at any time;

  • data portability, to receive data you gave us in a reusable format in certain circumstances;

  • withdraw consent at any time, where we rely on consent, for example through our cookie settings. This does not affect anything done before you withdrew it.

To use any of these rights, contact us using the details in section 1. We will respond within one month and there is normally no charge. We may need to confirm your identity first.

10. Complaints

If you are unhappy with how we use your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO):

11. Changes to this policy

We may update this policy from time to time, for example if we change how we use data or the law changes. The latest version will always be on this page, with the date at the top showing when it was last updated.