Privacy & Cookie Policy

Last updated: 7 December 2025

This Privacy & Cookie Policy explains how LOGIX360 STUDIO W.L.L, trading as “TableQR” (“we”, “us”, “our”), collects, uses and protects personal data and how we use cookies and similar technologies.

It applies when you:

Visit the TableQR website at https://tableqr.co.
Communicate with us by email, phone, WhatsApp or forms.
Use the TableQR service as a client.
Scan a QR code and view a menu hosted by us.

Additional company and contact information is available in our Legal Notice.

1. Who we are and how to contact us

LOGIX360 STUDIO W.L.L
Brand: TableQR
Address: Park Place, Road 2831, Block 428, Kingdom of Bahrain
Email: [email protected]
Phone: +973 3798 9445

For personal data that we collect and decide how to use, we act as a “controller”. For personal data that we process on behalf of our clients about their guests, we usually act as a “processor” as explained in our Data Processing Addendum.

2. What data we collect

2.1 Data you provide to us

We collect personal data that you choose to give us, for example:

When you request information, a call back or a demo.
When you become a client or contact us as a client.
When you send us support or general enquiries.

This may include:

Your name.
Job title and company name.
Business email address and phone number.
Information about your business and locations.
Billing and invoicing details.
The content of your messages and any feedback you send.

2.2 Data we collect automatically

When you visit our website or when guests access a menu hosted by us, we and our service providers may automatically collect:

IP address and approximate location.
Device type, operating system and browser type.
Dates and times of access.
Pages or menu screens viewed and basic usage patterns.
Referrer information, for example the page where you scanned a QR code.

We use cookies and similar technologies as explained in the Cookie section below.

2.3 Data about guests of our clients

In most cases, guests scan a QR code and view the menu without entering any personal details.

Some clients may include links or forms on their menus that collect guest data, for example reservations or feedback. In those cases:

The client is responsible for informing guests and complying with data protection laws.
We process such data on behalf of the client under our agreement and our Data Processing Addendum.

When we process guest data on behalf of our clients, we do so under their instructions and under our Data Processing Addendum, which describes these processing activities in more detail.

3. How we use personal data

We use personal data:

To operate and provide the TableQR service.
To design, configure and update digital menus for clients.
To respond to enquiries and provide support.
To manage billing, invoices and payments.
To monitor and improve the performance, security and usability of our website and services.
To send service related communications, such as important updates or changes to this policy.
Where permitted, to send marketing communications about our services, which you can opt out of at any time.

We do not sell personal data.

4. Legal bases for processing

Depending on the situation and applicable law, we rely on one or more of the following legal bases:

Contract: where we need to process data to perform a contract with you or to take steps at your request before entering into a contract.
Legal obligation: where we must process data to comply with legal requirements, for example accounting or tax rules.
Legitimate interests: where we process data for a legitimate business interest, such as improving our services or preventing abuse, and this interest is not overridden by your rights.
Consent: where we rely on your consent for a specific purpose, for example for certain marketing or non essential cookies.

5. Sharing of personal data

We may share personal data with:

Hosting and infrastructure providers.
Providers of analytics, monitoring and security tools.
Communication and email service providers.
Payment and accounting service providers.
Professional advisers such as lawyers and accountants.
Authorities where required by law or to protect our rights or the rights of others.

These recipients may be located in Bahrain or in other countries.

6. International transfers

Some of our service providers may be located outside the country where you are based. This means that personal data may be transferred and stored in other countries.

We will comply with applicable data protection laws in relation to such transfers and will use appropriate safeguards where required.

7. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy and:

As long as required by law.
As long as needed to resolve disputes or enforce contracts.

After the relevant retention period ends, we will delete or anonymise personal data in a secure way.

8. Your rights

Depending on the laws where you are located, you may have some or all of the following rights:

To request access to your personal data.
To request correction of inaccurate or incomplete data.
To request deletion of your personal data in certain circumstances.
To object to or request restriction of processing in certain circumstances.
To withdraw consent where processing is based on consent.
To lodge a complaint with a data protection authority.

If we process your data on behalf of a client, we may need to refer your request to that client and support them in responding.

To exercise your rights, contact us at [email protected]. We may need to verify your identity before acting on your request.

9. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, taking into account the nature of the data and the risks involved.

No system can be guaranteed to be completely secure but we aim to reduce risks to a reasonable level.

10. Cookies and similar technologies

10.1 What cookies are

Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work, improve user experience and provide information to site owners.

Similar technologies include local storage, pixels and tags. In this policy we refer to all of these as “cookies”.

10.2 Types of cookies we use

We may use the following categories of cookies:

Strictly necessary cookies
Required for basic site functions, such as security, session management and load balancing.
Preference cookies
Used to remember choices such as language or display settings.
Analytics cookies
Used to understand how visitors use our website and menus so we can improve them.
Marketing or tracking cookies
Used to track visitors across websites in order to show relevant advertising. If we use such cookies on our marketing site, we will obtain consent where required.

10.3 Third party cookies

Some cookies are set by third party services, such as analytics providers or embedded content. They may use the data they collect in line with their own privacy and cookie policies.

10.4 Cookie choices

Depending on your location, we may show a cookie banner or preference tool when you first visit our website. This allows you to:

Accept or reject non essential cookies.
Change your cookie preferences later.

You can also manage cookies through your browser settings. If you block or delete cookies, some parts of our website or menus may not work properly.

11. Third party sites and services

Our website and menus may contain links to third party websites and services, including WhatsApp, social media or client sites. We are not responsible for the privacy or cookie practices of these third parties.

12. Children

Our services are intended for businesses and their customers. We do not knowingly collect personal data directly from children. If you believe that a child has provided personal data to us, please contact us and we will take appropriate steps.

13. Changes to this Privacy & Cookie Policy

We may update this policy from time to time. The latest version will always be available on our website with a new “Last updated” date. In some cases we may also inform clients through email or the service.