Privacy Policy
Last updated 15 October 2026
This policy explains what personal information BarcodeFast collects, why, who it is shared with and the choices you have. BarcodeFast is run by EKN Consultant Ltd, which is the controller of this information under UK data protection law.
What we collect
- Your account: your username, email address and password. Passwords are stored only in scrambled (hashed) form, so we cannot read them.
- Your plan and payments: your plan, billing period and a record of each payment (amount, date and status). Card details go straight to Stripe; we never see or store them.
- What you make: the content you encode, the codes and files made from it, bulk jobs, and any logo or colours you choose.
- How you use BarcodeFast: what you did and when (for example, made or downloaded a code, or called the API), with the IP address and browser details of the request. We also record when you accepted a barcode compliance notice, and from which IP address.
- Teams, API keys and webhooks: the email addresses of people you invite, your API keys and how much they are used, and the webhook addresses you add.
- When you sign up: Google reCAPTCHA checks that you are not an automated program, using information about your browser and how you use the page.
Why we use it
- To provide BarcodeFast under our agreement with you: running your account, making your codes, keeping count of your allowance, taking payment and sending the emails the service needs, such as verifying your address, confirming a plan, a failed payment or a finished bulk job.
- To keep BarcodeFast secure and fair, which is in our legitimate interests: stopping abuse and fraud, such as one person opening many free accounts, and investigating problems.
- To meet legal duties, such as keeping payment records for tax.
We do not send marketing emails, sell your information, or use it for advertising.
Who we share it with
We use these providers to run BarcodeFast. They handle your information only on our instructions:
- Stripe: payments and billing (privacy policy)
- Railway: hosting the website and its database (privacy policy)
- Cloudinary: storing the code images you make (privacy policy)
- Resend: sending our emails (privacy policy)
- Google reCAPTCHA: checking sign-ups (privacy policy)
- Cloudflare and jsDelivr: delivering the page's fonts, icons and styles, which means they receive your IP address when a page loads
Webhooks send event details to the addresses you choose. We may also share information where the law requires it, or to protect our rights or other people's safety.
Some of these providers process information outside the UK, including in the United States. Where they do, it is protected by safeguards UK law recognises, such as the UK's data bridge with the US or the standard contract clauses approved for UK transfers.
Cookies
BarcodeFast uses only the cookies it needs to work: one that keeps you signed in, and one that protects forms against forgery. Stripe sets its own cookies on payment pages to prevent fraud, and Google reCAPTCHA does so on the sign-up page. We use no analytics or advertising cookies.
How long we keep it
- Your account, codes and usage records are kept while your account is open. When you ask us to close it, we delete them within 30 days.
- Payment records are kept for six years after the payment, as tax law requires.
- Our providers' backups may keep copies for a short time after deletion before they are overwritten.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. To use any of these rights, or to close your account, email emmanuel.nunoo@outlook.com. We will reply within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.
Keeping it safe
The site is served only over an encrypted connection, passwords are hashed, and access to our systems is limited to the people who run BarcodeFast. No system is perfectly secure; if a breach affects your information, we will tell you and the ICO where the law requires.
Children
BarcodeFast is not meant for children, and we do not knowingly collect information about anyone under 18.
Changes to this policy
We may update this policy as BarcodeFast changes. The date at the top shows when it last changed, and we will email you about changes that matter to you.
Contact
Questions about this policy or your information: emmanuel.nunoo@outlook.com.