This Privacy Policy explains how VouldSoft ("VouldSoft", "we", "us") collects, uses and protects personal information when you visit vouldsoft.com (the "Website") or contact us about our software development services. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and US state privacy laws including the California Consumer Privacy Act as amended by the CPRA (CCPA).
Who we are
VouldSoft is the controller of the personal information described in this policy. You can contact us about privacy at any time using our contact page.
Information we collect
Information you give us
- Enquiry details: when you use our contact form we collect your name, work email, company, country, the service you are interested in, your budget range, your message and whether you asked for an NDA.
- Communications: emails, call notes and files you send us while discussing a project.
- Client and contract information: if you become a client, the contact, billing and contract details needed to deliver and invoice our services.
Information collected automatically
- Technical data: our hosting provider records server logs such as IP address, browser type, pages requested and the date and time of the request, to keep the Website secure and working.
- Cookies: the Website uses only cookies that are needed for it to work. See our Cookie Policy.
We do not knowingly collect sensitive personal information through the Website, and we ask you not to send it through the contact form.
How and why we use your information
| Purpose | Information used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Replying to your enquiry and preparing a proposal | Enquiry details, communications | Steps at your request before entering a contract; legitimate interests |
| Delivering services and managing our client relationship | Client and contract information, communications | Performance of a contract |
| Invoicing, accounting and tax records | Client and billing information | Legal obligation |
| Keeping the Website secure and preventing spam or abuse | Technical data | Legitimate interests |
| Sending occasional updates about our services to business contacts | Name, email, company | Legitimate interests or consent where required; you can opt out at any time |
How we share information
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We share it only with:
- Service providers who help us run our business, such as website hosting, email, cloud storage, project management and accounting tools. They may use the information only to provide services to us.
- Professional advisers such as lawyers and accountants, under confidentiality obligations.
- Authorities when required by law, or to protect our rights, our clients or the public.
- A buyer or successor if our business is reorganised, merged or sold, under this policy.
International transfers
We work with clients and service providers in several countries, so your information may be processed outside the country where you live, including outside the UK and the European Economic Area. When we transfer personal information from the UK or EEA, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to countries with an adequacy decision.
How long we keep information
- Enquiries that do not become a project: up to 24 months after our last contact, then deleted.
- Client and contract records: for the length of the relationship and up to 7 years afterwards for legal, tax and accounting purposes.
- Server logs: kept by our hosting provider for a limited period for security purposes.
How we protect information
We use encryption in transit (HTTPS), access controls, strong authentication and the principle of least privilege. Only people who need the information to do their work can access it. No system is completely secure, so if we become aware of a breach that affects you we will notify you and the relevant authorities as the law requires.
Your rights (UK, EU and EEA)
If the GDPR or UK GDPR applies to you, you have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- restrict or object to our use of your information, including for direct marketing;
- receive your information in a portable format;
- withdraw consent at any time where we rely on consent.
You also have the right to complain to a data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In the EU it is the authority in your country.
Your rights (United States)
Residents of California and other US states with consumer privacy laws may have the right to:
- know what personal information we collect, use and disclose, and to get a copy of it;
- ask us to delete or correct it;
- opt out of the sale or sharing of personal information (we do not sell or share it);
- limit the use of sensitive personal information (we do not use it for purposes that require this right);
- not be discriminated against for using these rights.
In the last 12 months we have collected the categories of information described above (identifiers, professional information, internet activity from server logs and the content of your messages) for the purposes described in this policy. We do not sell or share personal information and have not done so in the last 12 months.
How to use your rights
Contact us using our contact page. We may need to confirm your identity before we act on a request. We reply within one month (GDPR and UK GDPR) or 45 days (CCPA), and tell you if we need more time. You may use an authorised agent; we may ask for proof of their authority.
Personal information we process for clients
When we build or support software for a client, we may process personal information on the client's behalf (for example, data in a client's database). In that case the client is the controller, we act as processor or service provider, and the client's own privacy notice and our data processing agreement with the client apply.
Children
The Website and our services are for businesses. They are not directed at children under 16 and we do not knowingly collect their personal information.
Links to other websites
The Website may link to other websites. We are not responsible for their privacy practices, so please read their policies.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. If the changes are significant we will make that clear on the Website.
Contact us
Questions about this policy or your information: our contact page.