Privacy Policy

1. Controller

The operator of the VOCAIA24 website and service, trading as VOCAIA24. Privacy contact: info@vocaia24.com. We have not appointed a Data Protection Officer.

2. Data we collect

• Messages you send us — name, email and message content when you email us (including via the contact page, which opens your own email app; the website itself does not store the form).
• Customer and billing data — name, email, billing address, country, and payment details collected by Stripe at checkout. We receive transaction details from Stripe (amount, date, last four card digits, status) but never your full card number.
• Project and support data — content, materials, credentials and correspondence needed to build, host and support your website.
• Technical data — server logs (IP address, browser, pages requested, time) generated by our hosting provider for security and operation.
• Your cookie choice — stored in your browser's local storage.

Data from visitors to customer websites

When we host and maintain a customer's website, visitors to that website may provide personal information directly to our customer, for example through forms or other features, and hosting logs may record technical data about those visits. In these cases our customer is generally the controller of that information and we process it on the customer's behalf only to provide hosting, maintenance and technical support. The exact roles depend on the actual processing and the arrangements agreed with each customer; where the law requires a data-processing agreement, it is agreed separately with that customer. Visitors to a customer's website should read that website's own privacy policy.

This website does not currently use analytics, advertising pixels or tracking cookies.

3. Purposes and legal bases

• Providing the contracted service, billing and support — performance of a contract (GDPR Art. 6(1)(b)).
• Accounting, tax and legal record-keeping — legal obligation (Art. 6(1)(c)).
• Answering enquiries, security, fraud prevention and keeping evidence of agreements — legitimate interests (Art. 6(1)(f)).
• Optional marketing emails — only with your consent (Art. 6(1)(a)), which you can withdraw at any time. We currently do not send marketing emails.

4. Service providers

• Stripe — processes payments and collects card and billing details at checkout. See stripe.com/privacy.
• Lovable and Cloudflare — host and deliver this website and customer websites, and generate technical logs. See lovable.dev/privacy and cloudflare.com/privacypolicy.
• Our email provider — hosts our business mailbox, so emails you send us are stored there.
• Google Fonts — delivers the fonts used on this website from Google's servers, which receive your IP address and browser information when a page loads.

5. International transfers

Some of our service providers are based in, or process data in, countries outside the EU/UK, including the United States. Personal data may therefore be transferred internationally through those providers. The legal mechanism for each transfer depends on the destination, the provider and the circumstances; depending on the case, it may be an adequacy decision (such as the EU-US Data Privacy Framework for certified providers) or Standard Contractual Clauses offered in the provider's terms. You can ask us at info@vocaia24.com for more information about the safeguards used for a particular transfer.

6. Retention

We keep personal data only as long as needed for the purpose it was collected for, taking into account legal obligations and the time limits for possible claims.

• Contract, billing and accounting records — for the period required by applicable accounting and tax requirements, and otherwise as long as needed to handle claims arising from the contract.
• Enquiries that do not lead to a contract — only as long as reasonably necessary to respond and follow up.
• Website files after termination or expiry — 30 days, as set out in the Terms of Service, unless the law requires otherwise.
• Credentials, support correspondence, technical logs and other project information — depending on their purpose, applicable obligations and the retention settings of the provider that holds them. Credentials are kept only while needed to provide the service.

7. Your rights

Which rights you have depends on the law that applies to you.

EU/UK: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You can complain to your local data protection authority, including the UK ICO.

US residents: depending on your state, you may have rights to know, access, correct, delete and opt out of sale or sharing. We do not sell personal information, and this website does not use advertising pixels or share personal information for targeted advertising.

Canada: you may access and correct your personal information and withdraw consent under PIPEDA or applicable provincial law, and complain to the Office of the Privacy Commissioner of Canada.

To exercise any right, email info@vocaia24.com. We may need to verify your identity.

8. Security and breaches

We use reasonable technical and organisational measures to protect personal data, and this website is served over an encrypted (HTTPS) connection. No system can be guaranteed to be completely secure. Where applicable law requires it, we will notify the competent authority and affected individuals of a personal data breach.

9. Children

Our services are for businesses and adults; we do not knowingly collect data from children.

10. Automated decisions

We do not make decisions with legal or similarly significant effects based solely on automated processing.

See also our Cookie Policy.