QPANO

Privacy Policy

Last Updated: 23 Sept 2026

This Privacy Policy explains how your personal data is used and shared when you browse the Website, use visual design, 3D rendering, 3D interactive visualisation, contact us, or otherwise provide your personal data through the Website or the System. It also contains important information about your privacy rights. Please read it carefully. If you provide personal data on behalf of someone else, you are required to inform them about the processing of their data and to refer them to this Privacy Policy.

Our Website is: https://www.qpano.io/

The Data Controller of the Website is: QPANO LTD, Reg. No. SC831410, address: Orbital House 3 Redwood Crescent, Peel Park, East Kilbride, Glasgow, United Kingdom, G74 5PR.

Our contact e-mail address is: support@qpano.io

The terms mentioned herein, if not explicitly stated otherwise, have the same meaning as defined in the Terms and Conditions.

  1. INFORMATION WE COLLECT AND HOW WE USE IT

    1. Account opening for individuals. Customers may create an account with the Service Provider by providing their name, surname, personal email address and phone (optional). The Service Provider has the capability to determine the location of the Customer's device and connection used for the registration process. In the event of the Customer trying to log in from restricted countries, we may block access to an account, cancel all orders and refuse to provide any Services to the Customer. Customers are only permitted to create a single account and must not use a VPN connection while accessing the Website. The Service Provider may verify the Customer's information by requesting appropriate documentation, such as identification documents, payment method documentation and alternative contact information. The Customer is required to provide the requested documentation or scans within three (3) business days of the request being made. Failure to provide the requested documentation within the specified timeframe may result in the suspension or termination of your account, as well as the cancellation of any pending orders.

      Legal basis for processing: Performance of a Contract and our Legitimate Interests.

    2. Content. We may collect Personal Information from Customer Content, file uploads, and feedback during the use of our Services.

      Legal basis for processing: Performance of a Contract.

    3. Usage data. The Service Provider may also collect information about how the Website or particular Service is accessed and used (hereinafter Usage Data). This Usage Data may include information such as Your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of the Website that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. This information is used by the Service Provider for the operation to increase the quality of the service, and to provide general statistics and analysis regarding use of the Website and the Services as well as for checking unauthorized access.

      Legal basis for processing: Our Legitimate Interests and your Consent (for non-essential analytics tracking).

    4. Change of purpose. We will generally only use your personal data for the purposes for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

  2. COOKIES AND TRACKING

    A cookie is a small data file that the Website writes to your device when you browse it. A cookie enables the Website to remember your actions and preferences over a period, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. We may use the following cookies and tracking methods:

    1. Essential. These technologies are required to activate the core functionality of our service.

    2. Functional. These technologies enable us to analyse usage behavior in order to measure and improve performance.

    3. Marketing. These technologies are used by advertisers to serve ads that are relevant to your interests.

    4. Third-Party Cookies. Some of the cookies on our Website are placed by trusted third-party providers from domains outside of our control. We use these third-party cookies mainly for analytics and advertising. Analytics tools help us understand how you interact with our platform so we can improve your experience, while advertising cookies allow us to show you relevant ads when you visit other websites. Please note that we do not control how these external cookies operate; they are governed entirely by the privacy policies of the companies that provide them.

    5. Web Beacons and Pixel Tags. Tiny graphics files with unique identifiers that enable us to recognize when someone has visited our Website or opened an email we sent them.

    Session cookies expire when the browser is closed. Persistent cookies remain stored on the device for a pre-defined period or until you manually delete them.

    You have the right to choose whether or not to accept non-essential cookies. You can change or withdraw your consent at any time in the Cookie Settings.

  3. WHO WE SHARE YOUR DATA WITH

    1. Trusted service providers. We may share your personal data with our trusted services providers when they provide services to us, to you on behalf of us and under our instructions. We will control and shall remain responsible for the use of your personal data at all times. These are the categories of entities that may have access to your personal data:

      1. Providers of information technology services such as hosting services;

      2. Providers of KYC and fraud prevention services;

      3. Other professional service providers such as accountants, legal consultants, audit firms etc.

    2. Independent data controllers. In some cases, where you provide your personal data to third parties, those third parties may process your personal data as independent data controllers. In such cases, we are not responsible for processing of your personal data performed by third parties. To protect your privacy, we urge you to carefully read privacy notices of any such third parties.

    3. Payment Processing. The Service Provider offers sale of visual design, 3D rendering, 3D interactive visualisation and other Services that can be processed through third-party payment processing services. To ensure the security of payment information, the payment card details are not collected or stored by the Service Provider and are directly processed by third-party payment processors, who are governed by their own privacy policies. Transaction information may be retained for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, accounting, tax, fraud prevention and dispute resolution requirements. Our payment processors comply with the PCI-DSS standards established by the PCI Security Standards Council, which is a collaboration of leading brands such as Visa, Mastercard, American Express, and Discover, as well as the requirements of the local financial regulatory authorities in the country of operation. These standards and regulations guarantee the secure handling of payment information. Your payment card information is used only for the purpose of payment for Services and is not stored by the Service Provider.

    4. Advertisement. If you have so selected on the Website, you will receive periodic newsletters and advertisements on a weekly basis. The content of these emails will exclusively relate to services and content available on the Website. If you wish to discontinue receiving these emails, you may do so by clicking the unsubscribe link located in the footer of each email.

    5. International transfers. We may share personal data internally within Data Controller’s subsidiary, affiliated and partner companies or with third parties for purposes described in this Privacy Policy. Personal data collected within the European Economic Area (“EEA”) may, for example, be transferred to countries outside of the EEA for the purposes as described in this Privacy Policy. Where required, we use appropriate safeguards for international transfers of personal data in accordance with applicable data protection laws, including the UK GDPR and, where applicable, the EU GDPR.

    6. Aggregated data. We may create aggregated data for internal use or for improving Services and creating new features for our prospective products. Aggregated data is anonymous and is not linked to any personal data. Aggregated information helps understand trends and customer needs so that new products and services can be considered and so existing products and services can be tailored to customer desires. We may share such aggregated data with our partners, without restriction, on commercial terms that we can determine in our sole discretion.

    7. Automated decision making (“ADM”). ADM is used when a decision is made solely on automated processing (including profiling) which produces legal effects or significantly affects an individual. We do not use ADM when a decision has a legal or similar significant effect on an individual unless (a) you provide us with your consent, (b) ADM is authorized by law or (c) ADM is necessary for the performance of or entering into a contract you have with us. We use ADM for:

      1. Recommending additional Services to you.

      2. Blocking or limiting features for the Customers when we detect prohibited behaviour under our Terms and Conditions.

      3. Chargeback fraud alert and prevention, based on the information about conflicting location and engagement in fraud.

      4. Some of our support functions, like requests to change your profile information, update your payment method, actualise profile details, etc., may be processed by our AI-based chatbot. The chatbot will always request for your consent for a particular action, and its activities will be logged in our files.

      If you believe that ADM acted inappropriately or want to be serviced by a human, please contact our support team via the email address indicated above.

    8. AI Functions. Our Service primarily offers you visual design, 3D rendering, 3D interactive visualisation and other Services. We may provide you with other AI-based functions, like suggesting possible design patterns, answers in chat, automatic information verification or translation of live conversations. This list may be enlarged in future.

    9. Cross-device tracking. If you login to your account with us using multiple devices (for instance, your phone and laptop), we will link your devices to your account. This allows us to provide a seamless user experience to you. We also work with third parties to employ technologies, including the application of statistical modeling tools, which attempt to recognize you across multiple devices so that we understand how you use our Services across various devices, to ensure the safety and security of your data and the Services, to show you targeted advertising (with your consent) tailored to your interests and experience, and to measure the performance of advertising campaigns.

    10. Transfer of business. We may transfer or share a copy of your personal data in cases where the Data Controller or one of its properties, affiliates, or subsidiaries is part of a business transition, such as a merger, being acquired by another company, or selling part of its assets, or in the event of bankruptcy, dissolution, divestiture or any related or similar proceedings.

    11. Legal defense. We may share your personal data to, in our discretion, (i) satisfy any applicable law, regulation, subpoena/court order, legal process or other government request, (ii) enforce our Terms and Conditions, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third party claims or allegations, (iv) protect against harm to the rights, our property or safety, our users or the public as required or permitted by law and (v) detect, prevent or otherwise address criminal (including fraud or stalking), security or technical issues.

  4. HOW LONG WE RETAIN YOUR DATA

    1. We retain personal data only for as long as necessary for the purposes for which it was collected and processed, in accordance with the UK GDPR, the Data Protection Act 2018 and other applicable legal and regulatory requirements.

    2. Retention periods may vary depending on the type of personal data, the purpose for which it is processed, and applicable legal, accounting, tax, fraud prevention and dispute resolution requirements.

    3. Where applicable law requires certain records to be retained for a specific period, we will retain the relevant personal data for the period required by law.

    4. When personal data is no longer required and there is no legal or legitimate reason to retain it, it will be deleted or anonymised.

  5. YOUR RIGHTS

    In the United Kingdom, as a data subject (a person whose personal information is collected, stored and processed) you have several rights under UK GDPR and the Data Protection Act 2018:

    1. You have the right to obtain confirmation if your personal information is being processed by us. If that is the case, you can access your personal information and the following information:

      1. The purposes of the processing;

      2. The categories of personal information;

      3. To whom the personal information has been or will be disclosed;

      4. The envisaged period for which the personal information will be stored, or the criteria used to determine that period.

    2. You have the right to obtain a copy of your personal information processed by us. We may request additional information to verify your identity where reasonably necessary. The right to obtain a copy shall not adversely affect the rights and freedoms of others.

    3. You have the right to demand that we erase your personal information, and we shall erase it without undue delay where one of the following grounds applies:

      1. This personal information is no longer necessary in relation to the purposes for which they were processed;

      2. You withdraw consent if the processing was based on your consent, and where there is no other legal ground for the processing;

      3. You object to the processing and there are no overriding legitimate grounds;

      4. Your personal information has been unlawfully processed;

      5. Your personal information has to be erased for compliance with a legal obligation.

      6. The right to erasure does not apply where the processing of personal information is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

    4. You have the right to receive your personal information which you provided us with in a structured, commonly used and machine-readable format and have the right to transmit those data to another company, where: (a) the processing is based on your consent or on a contract; and (b) the processing is carried out by automated means.

    5. You have the right to withdraw your consent for processing of your personal information at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

    6. You have the right to lodge a complaint with the Information Commissioner’s Office if you consider that the processing of your personal information infringes the UK GDPR or the Data Protection Act 2018.

    7. You can exercise the above rights by contacting our support team via the email address indicated above.

  6. CHANGES IN THIS PRIVACY POLICY

    1. We regularly review this Privacy Policy and reserve the right to modify it at any time in accordance with applicable laws and regulations. Any changes and clarifications will take effect immediately upon their publication on our Website. Please review this Privacy Policy from time to time to stay updated on any changes. In the event of material changes that substantially impact your rights, the Service Provider will employ reasonable efforts to provide you notice.

This website uses cookies

We use cookies to keep you signed in and to remember your language and currency. With your permission we also measure how the site is used and how our campaigns perform. Choose the categories you are happy with — you can change your mind at any time. Read more in our Privacy policy.