Privacy Policy
1. Introduction
This privacy policy explains how Volta Plugins Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit voltaplugins.com, subscribe to our mailing list, contact us, participate in our beta programme, or use Voltaverb and any associated software.
We are committed to protecting your privacy and processing your personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who we are
Volta Plugins Ltd is a company registered in England and Wales. Registered address: 66 Paul Street, London, England, EC2A 4NA. We are the data controller responsible for your personal data.
- Company name: Volta Plugins Ltd
- Company number: 16810029
- Registered office: 66 Paul Street, London, England, EC2A 4NA
- ICO registration reference: ZC124422
- Contact email for privacy matters: legal@voltaplugins.com
3. Information we collect
3.1 Information you provide directly
- Newsletter signups: your name and email address, when you subscribe to our mailing list.
- Contact form submissions: your name, email address, and the contents of your message.
- Beta programme participation: your email address, beta feedback you submit, and any additional information you choose to share in your feedback.
- Support correspondence: any information you include when emailing us for support, such as your email address, the nature of your query, and technical details about your system or configuration.
3.2 Information we receive about purchases
All purchases of Voltaverb are processed by Gumroad, which acts as the merchant of record for sales to UK and EU buyers. This means Gumroad is the party that sells the software to you, collects payment, and is responsible for collecting and remitting applicable VAT and other taxes.
Gumroad shares limited information with us about each sale, which typically includes your name, email address, country, and order details. Gumroad does not share your full payment card details with us. For information about how Gumroad handles your personal data during the purchase transaction, please see Gumroad's privacy policy.
3.3 Information we collect when you use Voltaverb
When you activate Voltaverb using your license key, our license activation service processes:
- The license key associated with your activation
- A unique machine identifier for each computer on which the software is activated (this is used solely to enforce the three-machine activation limit set out in the EULA)
- Activation timestamps
- The IP address from which activation requests are made
- The version of the software being activated
This information is necessary to verify that your licence is valid and to prevent unauthorised use of the software.
3.4 Information collected automatically when you visit the website
When you visit voltaplugins.com, our hosting provider and content delivery network automatically collect standard web server log information, including your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your visit. This is used for security, performance, and to diagnose technical issues.
4. How we use your information and our legal bases
Under UK GDPR, we must have a lawful basis to process your personal data. The following table sets out how we use your data and the legal basis we rely on for each purpose.
| Purpose | Legal basis |
|---|---|
| Sending you our newsletter and product announcements after you subscribe | Your consent (which you can withdraw at any time) |
| Responding to messages you send via our contact form or by email | Our legitimate interest in providing a responsive service to people who contact us |
| Managing your participation in the beta programme and processing your feedback | Our legitimate interest in improving the software, with your consent for communications |
| Fulfilling our contract with you when you buy a licence, including licence activation and support | Performance of a contract with you |
| Verifying licence validity and enforcing the three-machine activation limit | Our legitimate interest in protecting our intellectual property and preventing unauthorised use |
| Maintaining records required for tax and accounting purposes | Legal obligation |
| Monitoring the security and performance of the website | Our legitimate interest in operating a secure and reliable service |
Where we rely on legitimate interests, we have carried out a balancing test to ensure our interests are not overridden by your rights and freedoms. You can object to any processing based on legitimate interests (see Section 9).
5. Who we share your information with
We do not sell your personal data. We share it only with the third-party service providers listed below, and only to the extent necessary for them to perform services on our behalf. Each of these providers is contractually bound to process your data only in accordance with our instructions and to protect it appropriately.
| Service provider | Purpose | Location |
|---|---|---|
| Gumroad | Processing purchases of Voltaverb (as merchant of record) and providing limited order information to us | United States |
| Mailchimp (Intuit) | Managing our mailing list and sending newsletters to subscribers | United States |
| Formspree | Processing submissions from our contact form and beta feedback form | United States |
| Railway | Hosting our licence activation service | United States |
| Cloudflare | Content delivery network, DNS, and website security | United States (with global edge infrastructure) |
| Namecheap | Website hosting | United States |
We may also disclose your personal data to regulatory authorities, law enforcement, or other parties where we are required to do so by law or where disclosure is necessary to protect our rights, property, or safety, or that of others.
6. International data transfers
Several of the service providers listed above are based in the United States. When we transfer personal data outside the United Kingdom, we ensure it is protected by an appropriate transfer mechanism, which may include:
- The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses
- The UK Extension to the EU–US Data Privacy Framework, where the recipient has self-certified
- Any other mechanism permitted under UK data protection law
You can request further information about the safeguards applied to any specific transfer by contacting us at legal@voltaplugins.com.
7. Cookies and similar technologies
Our website uses a small number of cookies that are strictly necessary for the website to function securely and reliably. These include:
- Cloudflare may set cookies such as
__cf_bmandcf_clearanceto protect the site from malicious traffic and to verify that visitors are legitimate. - Mailchimp may set cookies when you interact with our newsletter signup form.
We do not currently use any analytics, advertising, or tracking cookies that require your consent. If we introduce such cookies in the future, we will update this policy and display a cookie banner to request your consent before any non-essential cookies are set.
8. How long we keep your data
| Data type | Retention period |
|---|---|
| Newsletter subscriber records | Until you unsubscribe, after which we retain a suppression record to ensure we do not contact you again |
| Contact form correspondence | Up to 24 months after the matter is resolved, unless we need to keep it longer for legal reasons |
| Beta programme records and feedback | For the duration of the beta programme plus 12 months |
| Licence activation records | For as long as your licence is active, plus up to 24 months thereafter for support and fraud prevention |
| Purchase and tax records | Six years from the end of the relevant financial year, as required by UK tax law |
| Web server logs | Short rolling retention (typically no longer than 90 days) managed by our hosting and CDN providers |
9. Your rights under UK GDPR
You have the following rights in respect of your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to ask us to correct inaccurate or incomplete data.
- Right to erasure: to ask us to delete your personal data in certain circumstances.
- Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
- Right to data portability: to receive your data in a structured, commonly used format, or to have it transferred to another controller.
- Right to object: to object to processing based on legitimate interests, or to processing for direct marketing purposes (which you can do at any time).
- Right to withdraw consent: where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Right not to be subject to automated decision-making: we do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please email legal@voltaplugins.com. We will respond within one month of receiving a valid request. There is normally no fee for exercising your rights, but we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.
10. Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit, access controls, and regular review of our security practices. Our third-party service providers are likewise contractually required to maintain appropriate security measures.
No method of transmission or storage is completely secure. If we become aware of a breach likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where the risk is high, notify you as well.
11. Children
Voltaverb is intended for use by adults and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe we may have collected data from a child, please contact us and we will delete it.
12. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Significant changes will be communicated by email to subscribers where appropriate.
13. How to complain
If you have any concerns about how we handle your personal data, please contact us first at legal@voltaplugins.com and we will do our best to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection authority:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
14. Contact us
For any questions about this privacy policy or our data practices:
- Email: legal@voltaplugins.com
- Post: Volta Plugins Ltd, 66 Paul Street, London, England, EC2A 4NA