This Privacy Policy explains how Voraty handles personal information when you visit our website, contact our team, enquire about our services or work with us. It is intended to help you understand what we do with your information and the choices available to you.
We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Voraty provides business services and introductions relating to card payments and EPOS, business utilities, telecoms and commercial finance.
Data controller: Voraty Ltd
Registered address: 66 Paul Street, London EC2A 4NA
Privacy contact: jamie@voraty.co.uk
Where a third-party provider handles an application or delivers a service, that provider may also act as an independent data controller and issue its own privacy information.
Information we collect
Depending on how you interact with us, we may collect:
- Contact details: your name, business name, job title, email address and telephone number.
- Business and enquiry details: the services you are interested in, current arrangements, business requirements and information you choose to provide in forms, emails, calls or WhatsApp messages.
- Application and referral information: details needed to assess your enquiry or introduce you to a relevant provider. The information requested will depend on the service.
- Website and device information: IP address, browser type, pages visited, approximate location derived from technical information, and cookie preferences where applicable.
- Correspondence records: communications with our team, including enquiries, feedback and service-related messages.
Please do not send sensitive personal information through general contact forms or WhatsApp unless we have specifically requested it through an appropriate secure process.
How we use your information
We use personal information for the following purposes, where an appropriate lawful basis applies:
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and discussing services | Legitimate interests or steps taken at your request before entering a contract |
| Arranging or managing services you request | Contract or steps taken before entering a contract |
| Referring an enquiry to a suitable provider | Legitimate interests, contract or consent, depending on the circumstances |
| Keeping business and financial records | Legal obligation or legitimate interests |
| Protecting the website and preventing misuse | Legitimate interests |
| Optional analytics and marketing technologies | Consent, where required |
| Sending direct marketing communications | Consent or legitimate interests where permitted by applicable marketing rules |
Where we rely on legitimate interests, we consider the impact on individuals and whether those interests are overridden by their rights. You can object to processing based on legitimate interests in certain circumstances.
International data transfers
Some providers of hosting, communications or other technology services may process personal information outside the UK. Where a restricted international transfer takes place, we assess the destination and use an applicable lawful transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards, where required. You may contact us for information about safeguards relevant to your personal data.
How long we keep information
We keep personal information only while it is needed for the purposes described in this policy. We consider the nature of the information, the purpose for which it was obtained, whether an enquiry or customer relationship remains active, and applicable legal, accounting and dispute-resolution requirements.
Enquiry and correspondence records are reviewed in light of whether further contact or follow-up is reasonably expected. Transactional and accounting records may need to be retained for longer where the law requires it. Once a retention purpose no longer applies, we delete or anonymise the information securely. You can contact us to ask about the retention criteria applicable to your information.
How we protect information
We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, accidental loss, misuse or disclosure. Access is limited to people who need the information for legitimate business purposes.
No internet transmission or storage system is completely secure. If you believe information you have shared with us may be at risk, please contact us using the details below.
Your data protection rights
Depending on the circumstances, you may have the right to:
- Request access to personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Request deletion of information in certain circumstances.
- Ask us to restrict or object to certain processing.
- Request transfer of certain information in a portable format.
- Withdraw consent at any time where consent is the basis for processing.
- Challenge certain decisions made solely by automated means, where applicable.
These rights are subject to legal conditions and exceptions. To make a request, contact us using the privacy contact details above. We may need to verify your identity before responding.
Contact us and complaints
If you have questions about this policy or how we handle personal information, please contact Voraty or email jamie@voraty.co.uk.
You also have the right to complain to the UK Information Commissioner's Office (ICO). We would welcome the opportunity to address your concerns first.
Information Commissioner's Office: ico.org.uk/make-a-complaint/.
Changes to this policy
We may update this Privacy Policy to reflect changes in our services, technology, legal requirements or data handling practices. The latest version will be published on this page with an updated date.