Privacy and data protection

Your information, in your control

MYQER is designed to give you control over your emergency information, with limited access, a clear purpose, and privacy by design. Here is how, in plain English.

How your information works

Account storage Secure transit No data selling You stay in control
  • Your account information is stored so you can manage and update your emergency profile.
  • Your online QR points to your live profile and shows your latest information when scanned.
  • Your offline QR carries a snapshot of your information, encoded at the moment you generate your card, so it works with no signal.
  • We do not sell your information and we do not share it for advertising or resale.

The two kinds of information, in plain English

Data protection law treats some information as more sensitive than the rest. We handle the sensitive kind with extra care.

Personal data

The ordinary details that identify you.

  • Name
  • Date of birth
  • Emergency contacts
  • Phone numbers
  • Account information

Special category data

Health information, which the law protects more strongly.

  • Allergies
  • Medical conditions
  • Medications
  • Disability information
  • Accessibility needs, where relevant

MYQER processes special category data only with your explicit consent. Under the UK GDPR this is Article 9(2)(a). You give that consent when you choose to add health information to your profile, and you can withdraw it at any time by editing or deleting your information.

The lawful basis we rely on

UK GDPR and EU GDPR

We would rather set the law out clearly than hide it.

While you set up and use MYQER

We hold and process your information on the basis of your consent. For ordinary personal data this is Article 6(1)(a). For health information this is Article 9(2)(a), explicit consent. You choose what to include, and you can change or remove it whenever you wish.

During an emergency, when you cannot consent

If you are unconscious or otherwise unable to consent, the person helping you may rely on vital interests. For personal data this is Article 6(1)(d). For health information this is Article 9(2)(c), which permits processing where a person is physically or legally incapable of giving consent. Recital 46 explains that vital interests are matters essential to a person's life.

MYQER does not override data protection law, and we would never claim it does. MYQER simply makes the information you chose to share ready for when those lawful bases apply. The control stays with you.

Your rights

Access

View your information

See your information at any time through your dashboard.

Correct

Update your details

Change your information whenever it changes.

Erase

Delete your account

Ask us to delete your account and your information.

Portability

Take a copy

Request a copy of your information to take elsewhere.

Withdraw

Withdraw consent

Withdraw your consent at any time.

Object

Object or restrict

Object to or restrict certain uses of your information.

How we use your information

We use your information only to run the service. Nothing more.

  • To create and maintain your account.
  • To show your emergency information when your QR is scanned.
  • To provide support and handle your requests.
  • To keep the platform reliable and secure.

What we do not do

  • We do not sell your information.
  • We do not build advertising profiles.
  • We do not make your information publicly searchable. It is reached through your QR, not a search engine.

How we protect it

Encrypted in transit and at rest Read only emergency view Role and row level access
  • Your information travels over encrypted HTTPS connections, and is stored on secure certified infrastructure with encryption applied.
  • Account access is protected by authentication.
  • Role based and row level controls restrict access within our database.
  • Treat any printed or shared QR as visible emergency information. Anyone holding your printed offline card may read what it contains.

For the full picture, see our Security page and our Trust and Compliance Centre.

For schools, trusts and organisations

If you are considering MYQER for your organisation, privacy by design sits at the centre of how it is built. We collect only what is needed, we keep the user in control, and emergency views are read only.

Our Trust and Compliance Centre sets out the detail your safeguarding, governance and procurement teams will want, including what is in place today and what is on our roadmap. We never present a future plan as a present fact.

Where you live

We apply consistent privacy principles for everyone. Depending on where you live, additional legal rights may apply.

UK and EU

You may have rights to access, correct, delete, restrict, or object to certain uses of your information, and to request a copy of what we hold about you.

United States

MYQER is not a HIPAA covered entity. We apply privacy and security controls appropriate to the service and respect applicable US privacy laws where relevant.

Other regions

We apply consistent privacy standards globally and review local legal requirements where they apply.

International data transfers

Where data transfers are necessary to run the service, we use appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses, and we limit access to essential service providers only.

Children and families

MYQER can be used by parents and guardians on behalf of children. We expect a profile for a child to be created and managed by an appropriate adult or authorised account holder. This is one of the reasons MYQER exists, so that a child can be understood when an adult who knows them is not there.

How long we keep it

We keep your account information only for as long as it is needed to provide the service and to meet our legal obligations. When you delete your account, your information is removed from active systems straight away, and from secure backups within thirty days.

Questions, requests, or complaints

MYQER is the data controller for your account information, and is registered with the UK Information Commissioner's Office, registration ZC076886. MYQER is operated by THREEVION Ltd, Company No. 16861658.

To access, correct, delete, or ask anything about your information, contact us at hello@myqer.com. We aim to respond to valid requests within thirty days, as required by law.

You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how we handle your information.

Built around your trust

Create your free card in minutes. It is free for individuals, and it always will be.

Create Free Card Trust and Compliance Centre