Client-scoped data collected, accessed, transmitted, processed or retained by QR Planet may fall into the following legal classifications:
- Personal Information (name and adress) of private customers, thus falling under applicable U.S. State Privacy Regulations or any National or International Privacy Regulation, depending on the client's location and kind of legal entity (e.g. GDPR for customers located within the EU, PIPEDA for Canada, etc).
- If necessary, employee data of business customers (e.g. for the implementation of SSO).
- As QR Planet has no age-limitation, it may also be the case that data of minors is collected.
We never collect:
- Protected Health Information (PHI) or other higher healthcare classifications of privacy data under the U.S. Health Insurance Portability and Accountability Act (HIPAA).
- Nonpublic personal information or personally identifiable financial information under the Gramm-Leach-Bliley Act (GLBA) and related Privacy and Security Safeguards Rules.
- Sensitive Personal Data (e.g. racial, ethnic, biometric or health data, criminal history, sexual orientation).