PRIVACY POLICY

1. THE DATA WE COLLECT

We collect data in two ways: Directly from you (when you become a client) and from Public Sources (when we identify potential business leads).

A. Prospect Data (Public Sources)

To offer our services to relevant businesses, we may collect publicly available information from sources such as Companies House, public business directories, and online listings. This includes:

• Business Name
• Director Names (if public)
• Business Telephone Numbers & Email Addresses
• Business Address

B. Client Data (Direct)

When you subscribe to our Service, we collect:

• Your Name and Contact Details
• Payment Information (processed securely via Stripe)
• Login credentials for your provided services
• Content you provide for your website

2. WHY WE USE YOUR DATA (LEGAL BASIS)

Under GDPR, we rely on the following legal bases to process your data:

A. Legitimate Interest (Prospecting)

We process public business data for B2B Direct Marketing. It is in our legitimate business interest to identify trades and businesses that do not have a website and offer them our services. We have conducted a balancing test to ensure this does not override your fundamental rights.

B. Contractual Necessity (Clients)

We need your data to fulfill our contract with you (e.g., to register your domain, host your emails, and process your monthly payments).

C. Legal Obligation

We must keep financial records (invoices) for 6 years to comply with HMRC tax laws.

3. SHARING YOUR DATA

We do not sell your data to anyone. We share data only with trusted third-party service providers ("Sub-processors") essential to running our business:

• Hostinger / Cloud Providers: To host your website and emails.
• Stripe: To process payments (we do not see or store your full card details).
• Google Workspace: For our internal email and document storage.
• Domain Registrars: To register your domain name.

4. DATA RETENTION

• Prospect Data: We retain lead data for up to 12 months. If you ask us not to contact you, we will add you to a "Suppression List" indefinitely to ensure we do not call you again.
• Client Data: We retain your account data for the duration of your subscription plus 6 years for tax purposes (HMRC requirement).

5. YOUR RIGHTS (GDPR)

You have the following rights regarding your data:

• Right to Object: You can ask us to stop using your data for marketing (e.g., "Don't call me again"). We will comply immediately.
• Right of Access: You can ask for a copy of the data we hold on you.
• Right to Erasure: You can ask us to delete your data (unless we need to keep it for tax reasons).
• Right to Rectification: You can ask us to correct wrong numbers or names.
• Right to Complain: If you believe we are mishandling your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, email us at: info@vopoi.com

6. INTERNATIONAL TRANSFERS

Some of our third-party providers (e.g., Google, Stripe) may store data on servers located outside the UK/EEA (such as in the USA). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• The country has been deemed to provide an adequate level of protection for personal data by the UK Government; or
• We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

7. COOKIES

Our website uses essential cookies to function (e.g., to keep you logged in to a billing portal). We may use analytics cookies to see how many people visit Vopoi.com. You can disable cookies in your browser settings.

8. CONTACT US

If you have questions about this policy or your data, please contact us:

• Email: info@vopoi.com
• Company Name: Sovarius Ltd
• Registered Office: 61 Bridge Street, Kington, United Kingdom, HR5 3DJ