Privacy policy

Last updated: 10/2026

Who processes the data?

Each shop is responsible for its customers' information. PointRetour hosts this information and processes it only to provide the service.

What data?

• Shop: name, contact details, address and location (optional), logo, manager's email.
• Customer: name, contact numbers, reward, device; optionally IMEI, email, medical information, notes.
• Person who finds a device: only what they choose to send (message, number, location if they allow it).

What is public

The QR code contains a short random address, with no personal data. The page only shows the name, numbers, reward, shop and, if the customer agreed, their medical information. The IMEI and notes are never public. These pages are not indexed by search engines.

Security and retention

Encrypted connections (HTTPS); IMEI, notes and medical information encrypted in the database; IP addresses only stored as a fingerprint. A customer's data is deleted when the shop deletes them; a shop's data when it deletes its account.

Your rights

A customer can ask their shop (or PointRetour) to access, correct or delete their information.