Privacy Policy

1. Introduction

CHONTECHHUB CO., LTD. ("we", "us", "our") operates QR4Tech (qr4tech.com), a URL shortening, QR Code generation, and Bio Link service. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

This policy is designed to comply with the Thailand Personal Data Protection Act (PDPA) B.E. 2562 (2019). If you are accessing our Service from outside Thailand, additional data protection laws may apply.

2. Data Controller

3. Data We Collect

3.1 Data Collected Automatically (When Creating Short URLs)

3.2 Data Collected When Clicking Short URLs

3.3 Data Stored Locally (Browser)

3.4 Data We Do NOT Collect

• We do not require registration, login, or any personal identification to use the Service.
• We do not collect your name, email, phone number, or any account information.
• We do not collect payment or financial information.
• We do not track your activity across other websites.
• We do not sell or share personal data with third parties for marketing purposes.

4. How We Use Your Data

We use collected data exclusively for:

• Providing the Service — Redirecting shortened URLs to destination URLs
• Security & Abuse Prevention — Detecting and blocking phishing, malware, spam, and other prohibited uses
• Analytics — Providing aggregate click statistics (if implemented) to link creators
• Legal Compliance — Responding to valid legal requests from law enforcement
• Service Improvement — Understanding usage patterns to improve the Service (aggregate data only)

5. Legal Basis for Processing (PDPA)

Under the Thailand Personal Data Protection Act (PDPA), we process your data based on the following legal bases:

6. Cookies & Local Storage

6.1 Cookies

QR4Tech currently uses minimal cookies:

We do not use advertising cookies, tracking cookies, or social media cookies.

6.2 Local Storage

We use browser localStorage to store your link creation history for convenience. This data:

• Is stored only on your device
• Is never sent to our servers
• Can be cleared at any time using the "Clear All" button or your browser settings
• Does not contain any personally identifiable information

7. Third-Party Services

We may use the following third-party services that may process limited data:

We only share the minimum data necessary for these services to function. We do not share data with advertising networks or data brokers.

8. Data Retention

• Short URL data (original URL, short code, creation timestamp): Retained for the lifetime of the short link, or until deleted by us.
• Security logs (IP address, User-Agent): Retained for 90 days, then permanently deleted.
• Click analytics data: IP addresses retained for 90 days, then anonymized. Aggregate statistics (click counts, country-level data) may be retained indefinitely.
• Abuse reports: Retained for 2 years for legal compliance purposes.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Cloudflare DDoS protection and Web Application Firewall
• Access controls limiting who can access server-side data
• Regular security reviews of our infrastructure
• Rate limiting to prevent abuse

While we take reasonable measures to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Your Rights (Under PDPA)

Under the Thailand Personal Data Protection Act (PDPA), you have the following rights:

Since QR4Tech does not require user registration, we may ask you to provide your IP address or specific short URLs to identify your data.

11. International Data Transfers

Our servers may be located outside of Thailand (e.g., through Cloudflare's global network). When your data is transferred internationally, we ensure appropriate safeguards are in place in accordance with PDPA requirements.

12. Children's Privacy

QR4Tech is a general-purpose tool and does not knowingly collect personal data from children under the age of 10. If we become aware that we have collected data from a child under 10, we will take steps to delete it promptly.

For children between 10-20 years of age (minors under Thai law), parental or guardian consent may be required for certain data processing activities under PDPA.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we may display a notice on the QR4Tech homepage

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, your personal data, or wish to exercise your rights under PDPA, please contact us: