Privacy Policy

1. Who we are

Revlink.eu is operated by Revlink UAB (company code: 000000000), registered in Lithuania. We provide an online service that generates customised Google review QR-code cards for businesses.

Data controller contact: privacy@revlink.eu

2. Data we collect

When you place an order or create an account, we collect:

• Contact information — name, email address, phone number (optional).
• Business information — business name, Google Place ID, address, website.
• Order data — quantity, template selection, payment reference, coupon codes used.
• Technical data — IP address, browser user-agent, device type, page visits.

We do not store full card numbers or CVV codes. Payment processing is handled entirely by Stripe and PayPal.

3. How we use your data

• To fulfil your order (generate QR codes, render PDF cards, send download links).
• To send transactional emails (order confirmation, download links, password resets).
• To detect and prevent fraud, and to enforce our Terms of Service.
• To improve the service based on aggregate, anonymised usage patterns.

We do not sell your personal data to third parties.

4. Legal basis (GDPR)

• Contract performance — processing your order.
• Legitimate interest — fraud prevention, service improvement.
• Legal obligation — retaining transaction records as required by Lithuanian and EU law.

5. Third-party processors

Provider	Purpose	Privacy policy
Stripe	Payment processing	stripe.com/privacy
PayPal	Payment processing	paypal.com/privacy
Google	Places API (business lookup)	policies.google.com
P9.lt	URL shortening & QR generation	p9.lt

6. Data retention

• Order records and associated data are retained for 7 years for accounting and legal compliance.
• Download files (PDFs, QR images) are deleted after 30 days past their expiry date.
• API and email logs are pruned after 90 days and 180 days respectively.
• Inactive accounts with no orders may be deleted after 2 years of inactivity.

7. Your rights (GDPR)

If you are in the EEA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten") — subject to legal retention requirements.
• Object to processing based on legitimate interest.
• Data portability (receive your data in a structured, machine-readable format).
• Lodge a complaint with your national data protection authority.

To exercise any of these rights, email privacy@revlink.eu. We will respond within 30 days.

8. Cookies

We use only essential session cookies required to operate the service (login state, CSRF protection, shopping session). We do not use advertising, analytics, or third-party tracking cookies.

9. Security

All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed using Argon2id. Access to production systems is restricted to authorised personnel. We perform regular security reviews.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. Continued use of the service after changes constitutes acceptance.

11. Contact

Questions about this policy? Contact us at privacy@revlink.eu.