Privacy Policy
Last updated: May 5, 2026
Effective date: May 5, 2026
1. Who We Are
QLIO is a reservation panel software for hourly-rental venues (karaoke bars, escape rooms, bowling alleys, golf ranges, and similar businesses).
QLIO is operated by Cherry Crow sp. z o.o., ul. Domaniewska 37/2.43, 02-672 Warsaw, Poland.
Email: privacy@qliopanel.com | Website: qliopanel.com
2. Our Two Roles
| Role | Description |
|---|---|
| Data Controller | For data you provide when signing up for and using QLIO as a business customer. We decide how and why this data is processed. |
| Data Processor | For data your end-customers enter when making reservations through your QLIO-powered booking panel. We process this data solely on your instructions, under our DPA. |
3. Data We Collect (as Controller)
Account & Identity Data
- Full name, job title
- Business name, registered address, VAT/tax number
- Email address, phone number
Payment & Billing Data
- Billing address
- Payment method details (processed by Przelewy24 – we do not store raw card data)
- Transaction history, invoices
Usage & Technical Data
- Log data (IP address, browser type, pages visited, timestamps)
- Device information, panel configuration settings, feature usage patterns
Communications
- Emails, chat messages, and support tickets you send us
4. How We Use Your Data
| Purpose | Legal Basis (GDPR) | Legal Basis (US/other) |
|---|---|---|
| Provice and operate the service |
Contract performance (Art. 6(1)(b)) |
Contractual necessity |
| Process payments and invoices |
Contract performance (Art. 6(1)(b)) |
Contractual necessity |
| Send service notifications |
Legitimate interest (Art. 6(1)(f)) |
Legitimate interest |
| Product updates and marketing |
Legitimate interest (Art. 6(1)(f)) |
Consent / opt-out |
| Improve and develop the product |
Legitimate interest (Art. 6(1)(f)) |
Legitimate interest |
| Comply with legal obligations |
Legal obligation (Art. 6(1)(c)) |
Legal obligation |
| Respond to support requests |
Contract performance (Art. 6(1)(b)) |
Contractual necessity |
| Prevent fraud and exsure security |
Contract performance (Art. 6(1)(b)) |
Legitimate interest |
5. Sub-processors and Third Parties
| Sub-processor | Purpose | Location |
|---|---|---|
| Legitimate interest | Payment processing | Poland (EU) |
| [HOSTING PROVIDER EU] | Cloud hosting — EU customers | Poland / EU |
| [HOSTING PROVIDER US] | Cloud hosting — US customers | United States |
| [HOSTING PROVIDER US] | Transactional emails | [TBC] |
| [ANALYTICS PROVIDER] | Transactional emails | [TBC] |
6. International Data Transfers
EU/UK customers: Your data is hosted on servers in Poland (EU). Any transfer outside the EEA or UK is covered by EU Standard Contractual Clauses (SCCs) or UK IDTAs.
US customers: Your data is hosted on servers in the United States. Transfers from the EU to the US are governed by EU Standard Contractual Clauses.
7. Data Retention
| Data type | Retention period |
|---|---|
| Account data | Duration of contract + 3 years after termination |
| Payment records | 5 years (Polish accounting law) |
| Support communications | 2 years after ticket resolution |
| Log/technical data | 12 months |
8. Data Security
We implement appropriate technical and organizational measures:
- Encryption in transit (TLS/HTTPS)
- Encrypted storage for sensitive data
- Access controls — staff access limited to those who need it
- Regular security reviews and incident response procedures
9. Your rights
EU and UK residents (GDPR / UK GDPR):
You have the right to: access, rectification, erasure, restriction, portability, and to object to processing. To exercise any right, email privacy@qliopanel.com. We will respond within 30 days.
You may also lodge a complaint with your national supervisory authority (Poland: UODO — uodo.gov.pl; UK: ICO — ico.org.uk).
California residents (CCPA/CPRA):
You have the right to know, delete, correct, and opt out of the sale of personal information. We do not sell or share personal information. To submit a request, email privacy@qliopanel.com with “CCPA Request” in the subject line.
French, Spanish, and German residents:
Your rights are governed by GDPR as implemented in your country. Contact privacy@qliopanel.com or your national data protection authority (France: CNIL; Spain: AEPD; Germany: your Bundesland authority).
10. Cookies
We use cookies and similar tracking technologies on qliopanel.com. For full details, see our Cookie Policy at qliopanel.com/cookies.
11. Children
QLIO is a B2B service intended for business use only. We do not knowingly collect personal data from individuals under the age of 18.
12. Change to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 30 days before the change takes effect.
13. Contact Us
| Company: | Cherry Crow sp. z o.o. |
| Address: | ul. Domaniewska 37/2.43, 02-672 Warsaw, Poland |
| Email: | privacy@qliopanel.com |