How to Make a vCard QR Code for Business Cards and Booths

The short answer: what the code holds and which type to print

A contact-card QR code is a standard contact file turned into a square pattern. The format is the vCard, a text format defined by the Internet Engineering Task Force in RFC 6350, published in August 2011. Because the format is a common standard, the phone recognises it without an app. A person points the camera at the code, taps the banner, and chooses to save the contact.

Put in the fields a person needs to reach you and nothing more. A card for a trade-show booth usually needs five or six fields. Anything personal, such as a home address or a private social account, adds risk without adding value for a stranger who has just met you.

Use a static code when the details are settled and will stay the same for the life of the print run. Use a dynamic code when the number, title or company may change before the cards are used up. The rest of this guide explains how to make each one, test it, and avoid the errors that cause a code to fail on the day.

What a contact-card QR code should contain

Each field you add makes the pattern denser. A denser pattern is harder to read at small print sizes, so the best code is the shortest one that still gives the caller a usable contact. The table below sets out the fields most business cards need and the reason for each.

The format allows more properties than these. Keep to the core list unless a booth has a specific need. The more data you encode, the more the reader's camera must work to decode it.

How to build the code, step by step

1. Write the contact details in a plain text list first. Check spelling, the country code on the phone number and the exact company name as it appears on your website.
2. Choose one person's record as the source. If several people share a booth, make one code per person. A shared code that lists the company switchboard is a common shortcut, but it sends callers to a line that may not reach the person they want.
3. Enter the fields into the free QR code generator on this page. Leave blank any field you do not want to share.
4. Choose static or dynamic (see the section below). If you pick dynamic, create the code under a company account, not a personal login, so it survives a change of staff.
5. Download the code as a vector file such as SVG or PDF if your printer accepts it. A vector file keeps the edges sharp at any size. If only a PNG is available, use the largest size the generator offers.
6. Print one sample card on the same paper and printer as the run, then test it as described in the next section.

Testing on iPhone and Android before you print

Test the printed sample, not the file on your screen. A code that scans well from a monitor can fail on glossy card stock under booth lights. Use real phones. Ask a colleague to scan with a personal phone as well, because a different device can react differently.

On an iPhone, Apple's own support page explains that the Camera app reads QR codes. Open the Camera app, hold the phone so the whole code is in the frame, and tap the link that appears. You can also add the Code Scanner to Control Centre from Settings. A contact card should open a prompt to create or add a contact. If the prompt is missing, check that the phone has camera access for QR scanning turned on.

On Android, most current phones read QR codes through the camera or through Google Lens. The exact button labels depend on the maker and the Android version, so test on the phone your own team uses. The check is the same on any phone: the scan should show a contact preview, the fields should be in the right place, and the save action should work without an app.

Run this check on at least two phones from different makers, and include one older phone if your team has one. Scan from about 20 to 30 centimetres, at the angle a person would hold a card. Scan under the lights of the room where you will use it. Delete the test contacts afterwards so your own address book does not fill with copies.

Static or dynamic: how to choose

A static QR code holds the final content inside its pattern. Once printed, the content cannot change. A dynamic QR code holds a short redirect link. The provider's server forwards each scan to the destination you set, so you can edit that destination without reprinting. This difference is described in general terms on the Wikipedia entry for dynamic QR codes, which explains that the target can be updated on the server side without altering the printed code.

Choose static when the card will be in use only briefly, when the details are settled, or when you want no third party in the chain. A static code keeps working as long as the phone can read it. It needs no account and no subscription.

Choose dynamic when you expect a change: a new mobile number, a promotion, or a new company name after a merger. Dynamic codes also let you see how many times the code was scanned, but that data is a privacy question in its own right, covered in the legal section below. The trade-off is dependency. If the redirect account lapses, every printed copy stops working at once. Keep the login in a shared company account, and set a reminder to renew it before the print run ends.

Worked example: one team, two trade shows

Suppose a four-person sales team at a Berlin trade show orders 1,200 cards, which is 300 per person. Each card carries a static vCard code with the person's mobile number, email and job title. Three months later, the lead's mobile number changes because the company moves to a new carrier. Every one of the 1,200 cards still holds the old number. The team can cross out the number by hand, or put a sticker over it, or stop using the cards and print a new run.

Now suppose the same team had used a dynamic code. The code on each card points to a short link. The lead changes the number in the generator, and the same printed cards now give the new contact card. The only cost is the redirect account, which must stay active.

A second show in Mumbai with two people and 400 cards works the same way, with +91 numbers in the code. The arithmetic is simple. The question is how many cards will be in circulation after the first change. If that number is high, the dynamic code earns its place.

Cases that change the answer

A few situations change the choice of code or the content.

When someone leaves the company, a static code keeps their details in circulation for as long as the cards last. A dynamic code can be redirected to the successor or to the company switchboard, which is a better outcome for the business and for the former employee. Remove the old person's contact details from the code as part of the offboarding checklist.

When a booth uses large banners or a screen, the code can be larger and carry the same content. The size makes it easier to scan. Test it from the distance visitors will stand.

When a team shares one code, for example a general sales contact, use a dynamic code. That lets the team change the destination when the staff rota changes.

When the card goes to people in the European Union, the contact details fall under the GDPR, as explained below. When the card goes only to people in another region, check that region's own data protection rules before you print the personal details of staff.

Finally, a QR code does not replace a follow-up. It saves a contact, but it does not tell you whether the person wants to hear from you. Record the contact in your customer system after the show, with the date and the event name.

Common mistakes

• Printing a phone number without a country code. A caller in another country then dials a number that does not work.
• Encoding a home address or personal accounts because the template offered the field.
• Testing only on the design screen and never on a printed sample.
• Choosing static for a card that will be printed for a year, then discovering a changed job title with no way to fix it.
• Creating a dynamic code under one employee's personal login. When that person leaves, the code can stop working.
• Putting a long promotional URL in the same code. The longer the content, the denser the pattern.
• Forgetting that the code can be scanned by anyone. A vCard has no built-in protection. The standard notes that a vCard carries no inherent authentication or confidentiality, so anyone who scans it reads the data.

Privacy: the rule behind the contact data

In the European Union, the General Data Protection Regulation sets the rule. Article 4(1) of Regulation (EU) 2016/679 defines personal data as any information relating to an identified or identifiable natural person. A name, a mobile number and a work email in a contact card all fall within that definition. The European Commission gives a name, a home address and an email address as examples of personal data on its own guidance page. The regulation applies to businesses that process such data, and it does not apply to data used purely for personal reasons with no professional link.

In practice, this means a business that prints staff contact details on cards and encodes them in a QR code is processing personal data. Before you print, decide which staff details are needed, confirm that each person has agreed to their details being shared, and record the reason for sharing. A dynamic code adds another layer, because a scan log may be personal data too.

This explains the rule in general terms; it is not legal or tax advice for your case.

What to check with HR or a lawyer

Before you roll out cards for a whole team, check a few points with your HR or data protection lead, and with a lawyer where the contact data crosses borders.

• Whether each employee has agreed to their work number and email appearing on a printed card and in a code.
• Who owns the dynamic code account, and what happens to it when someone leaves.
• Whether your provider stores scan data, where it is stored, and how long it is kept.
• What the card says when a person leaves, changes role, or moves to a part-time schedule.

The rules on consent, retention and cross-border transfers come from the law of each country where the cards are used. The official text of the GDPR and the regulator's page in your country are the places to confirm them.

Where AI workers fit in

Employers can take the routine upkeep of staff contact data off their HR and admin teams with AI workers. An AI worker can watch the HR system for changes to a job title or phone number, prepare an updated contact card, and place it in a review queue. A person approves the change before the code is updated, and a person decides which staff member's details may appear on a card at all. The same approach can handle offboarding, so the old details are removed in one step rather than left on a box of unused cards.