Privacy Notice

Qless ("we", "us") provides the QLESS virtual queuing service. For the personal data described here, Qless is the data controller.

What we collect and why

• Business account data — email address, login credentials and business details (name, category, opening hours, logo). Used to create and run your account and your public queue page. Legal basis: performance of our contract with you.
• Queue data — the first name a customer enters and, if they choose, a phone number, plus ticket times and status. Used to run the queue and show the customer their position. Legal basis: our legitimate interest, and the business's, in providing the queue the customer asked to join.
• Feedback — an optional rating after a visit, visible only to the business that served the customer. Legal basis: consent.
• Technical data — IP address, device and browser information, and error or usage logs. Used for security, fraud prevention and improving the product. Legal basis: legitimate interests.
• Support messages — what you send us when you ask for help. Legal basis: legitimate interests.

Who we share data with

• Service providers who host and operate the platform on our behalf.
• Paddle, our Merchant of Record, for the sale of subscriptions, payments, invoicing, tax compliance and subscription management.
• Professional advisers such as legal and accounting, where needed.
• Authorities where we are required to by law.

International transfers

Some of our providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to protect the data.

Retention

Completed and cancelled queue tickets are deleted 30 days after the visit. Account and business data is kept while your account is active and deleted or anonymised when it is no longer needed. Billing records are kept as long as tax law requires.

Your rights

You have the right to access, correct, erase, restrict or port your data, to object to processing, and to withdraw consent. Contact us and we will respond within one month. You can also complain to your local data protection authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls in the database, and private unguessable ticket links so a customer ticket is only visible to the person holding it.

Cookies

We use only essential cookies and local storage to keep you signed in and to remember your current ticket. We do not use advertising cookies. You can clear them at any time in your browser settings.