Last updated: March 2026
QTouch collects information from three main user groups: venue operators, brand partners, and consumers. From venues, we collect contact details, business information, and operational data such as WiFi analytics and user engagement metrics. This allows us to provide targeted insights and optimize venue experiences. We also collect data about the types of services offered and venue capacity to facilitate better brand-venue matching.
From brands, we collect company information, campaign objectives, and advertising preferences. This enables us to match brands with appropriate venues and deliver targeted campaigns. We also track campaign performance data to provide analytics on reach, engagement, and conversion metrics. From consumers, we collect data such as location information, engagement history, interaction preferences, and demographic information (where permitted). This data is collected through direct interactions, device identifiers, and behavioral signals to create personalized experiences within venues.
We use collected information to deliver and improve our marketplace platform. For venues, this includes enabling campaign management, providing real-time engagement analytics, and optimizing operational efficiency. We use venue data to generate insights that help brands understand audience behavior and refine their activation strategies. For brands, we use campaign data to measure performance, identify high-performing venues, and recommend optimization opportunities.
For consumers, we use interaction data to personalize engagements, track campaign participation, and improve the relevance of brand activations. We also conduct analytics and research to understand marketplace trends, consumer preferences, and venue performance patterns. This helps us continuously enhance the platform experience for all users. Additionally, we may use data for legitimate business purposes such as fraud prevention, security, customer support, and compliance with legal obligations.
QTouch uses cookies, pixels, and similar tracking technologies to enhance platform functionality and track user engagement across the marketplace. Essential cookies enable core features such as user authentication, session management, and security protections. Performance cookies allow us to analyze how users interact with our platform, helping us identify improvements and optimize user experience.
Marketing cookies may be used to deliver targeted brand campaigns and personalize content based on user interests. You have the right to accept or decline non-essential cookies through our cookie preference center. Some analytics cookies may be subject to your explicit consent depending on your jurisdiction and applicable privacy laws. We also deploy tracking pixels in brand campaigns within venues to measure brand awareness, foot traffic conversion, and consumer engagement metrics in real-time.
The QTouch marketplace operates as a data processor and controller serving multiple parties. We share venue performance data and consumer engagement insights with brand partners to enable informed campaign decisions and optimize brand-venue matching. Venue operators receive aggregated analytics about consumer interactions, campaign performance, and revenue opportunities. This data sharing is essential to the marketplace function and is governed by transparent data processing agreements.
We work with third-party service providers including cloud infrastructure providers, analytics platforms, email service providers, and payment processors. These partners process data only under our instructions and are bound by strict confidentiality and security obligations. We may also disclose data when required by law, to protect our legal rights, or in response to valid government requests. We do not sell consumer personal data to third parties for commercial purposes. All data sharing is conducted in compliance with applicable data protection regulations including GDPR.
QTouch implements comprehensive security measures to protect user data against unauthorized access, alteration, disclosure, or destruction. We employ industry-standard encryption protocols (TLS/SSL) for data transmission, end-to-end encryption for sensitive communications, and AES-256 encryption for data at rest. Our infrastructure is hosted on secure cloud providers with redundancy and backup systems to ensure data availability and integrity.
We maintain strict access controls, limiting employee access to personal data on a need-to-know basis and implementing role-based permissions. Our security team conducts regular vulnerability assessments, penetration testing, and security audits to identify and remediate potential threats. We have incident response procedures in place and maintain cyber insurance coverage. While we are committed to protecting your data, no system is completely secure. We encourage users to maintain strong passwords and use secure networks when accessing our platform.
Under the General Data Protection Regulation (GDPR) and similar privacy laws, you have the following rights: Right of Access allows you to request a copy of all personal data we hold about you in a structured, commonly used format. Right of Rectification enables you to correct inaccurate or incomplete personal data. Right to Erasure (Right to be Forgotten) allows you to request deletion of your personal data, subject to legal obligations. Right to Restrict Processing lets you limit how we use your data while we address your concerns.
Right to Data Portability permits you to receive a copy of your personal data and transmit it to another service provider. Right to Object allows you to object to certain data processing activities, including marketing communications. Right not to be subject to Automated Decision Making means you have the right to object to decisions based solely on automated processing that could affect you. To exercise any of these rights, please contact our privacy team at privacy@qtouch.ai with your request. We will respond within the timeframe required by applicable law (typically 30 days). You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
The QTouch marketplace operates as a unique ecosystem connecting multiple stakeholder groups. Venue Analytics Data provides operators with insights into consumer foot traffic patterns, engagement rates, device connections, and demographic composition of visitors. This aggregated data helps venues understand their audience and optimize operations without revealing individual consumer identities. Brand Campaign Performance Data includes reach metrics, conversion rates, engagement per impression, and consumer demographic insights that enable brands to measure ROI and refine targeting strategies.
Consumer Engagement Profiles are created through interactions with venue activations, brand campaigns, and platform features. These profiles are used to personalize future experiences and match consumers with relevant brand offers. Consumer engagement is entirely voluntary and consumers can opt out of certain data collection activities. All marketplace data is subject to strict data minimization principles—we collect only the data necessary to deliver platform value and comply with applicable regulations.
QTouch operates globally with offices in Dubai and Hong Kong. When data is transferred across international borders, we implement safeguards to ensure continued protection equivalent to your home jurisdiction. For transfers from the EU/EEA to non-adequate countries, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. We ensure that international transfers comply with GDPR requirements and other applicable privacy laws.
Where necessary, we also implement supplementary technical and organizational measures to address any residual risks associated with international transfers. Users from the EEA should note that their personal data may be transferred to and processed in the UAE, Hong Kong, and other jurisdictions where we operate. By using our platform, you consent to such transfers subject to the protections outlined in this privacy policy.
QTouch does not intentionally collect or process personal data from children under the age of 13 (or the age of digital consent in their jurisdiction). Our marketplace is designed primarily for business users (venue operators and brand partners). If a consumer under 13 interacts with in-venue activations, we limit data collection to non-identifiable information such as engagement metrics and interaction timestamps.
Parental oversight is encouraged for all youth accessing our platform. Parents or guardians who believe their child's data has been collected may contact us at privacy@qtouch.ai to request removal. For users aged 13-18, we provide additional privacy protections and limit targeted marketing based on behavioral data. We comply with COPPA (Children's Online Privacy Protection Act) in the United States and equivalent regulations in other jurisdictions.
We may update this Privacy Policy periodically to reflect changes in our data practices, technology, legal requirements, or other factors. Material changes will be communicated through prominent notice on our platform or by direct email notification to registered users. We will maintain the version history of our policies so you can review changes over time. Your continued use of the QTouch platform following the effective date of any policy changes constitutes your acceptance of the updated terms.
If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact our Data Protection Team at privacy@qtouch.ai. You can also reach out to us through our website's contact form or by mail at our registered offices in Dubai or Hong Kong. We will respond to all privacy inquiries within 30 days. For EU users, you may also contact our designated Data Protection Officer directly.
Email: privacy@qtouch.ai