Privacy Policy

Last updated: 15 April 2026

1. Introduction

VoltaServices Limited ("we", "us", "our"), a company registered in England and Wales (Company Number: 16178827), is the data controller for personal data collected through the VoltaRaffel platform ("Platform"). We are registered with the Information Commissioner's Office (ICO Registration Number: ZB874097).

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

2.1 Account Registration

  • Full name
  • Email address
  • Password (stored as a secure hash — we never store plain text passwords)

2.2 Raffle Entries

  • Full name
  • Email address
  • Mobile phone number (only when SMS notifications are enabled for the raffle)
  • Payment information (processed by Stripe — we do not store card details)

2.3 Organiser Accounts

  • Business name
  • Contact email
  • Subscription and billing information (processed by Stripe)

2.4 Automatically Collected Data

  • IP address
  • Browser type and version
  • Pages visited and timestamps
  • Session cookies (required for authentication)

3. How We Use Your Data

We process your personal data for the following purposes:

Purpose Lawful Basis
Account creation and authentication Contract performance
Processing raffle entries and payments Contract performance
Notifying winners by email Contract performance
Notifying winners by SMS Consent (provided at entry)
Organiser subscription management Contract performance
Fraud prevention and platform security Legitimate interest
Compliance with legal obligations Legal obligation

4. Data Sharing

We share your personal data only with the following third parties, and only as necessary:

  • Stripe — payment processing (card details are handled directly by Stripe and never touch our servers)
  • Vonage — SMS delivery for winner notifications (phone number only, when SMS is enabled)
  • Our mail server — transactional emails (entry confirmations, winner notifications)

We do not sell, rent, or trade your personal data to any third party. Raffle Organisers receive entrant names and email addresses solely for the purpose of managing their raffle and fulfilling prizes.

5. Data Retention

  • Account data: retained for as long as your account is active, plus 6 years after deletion for legal and financial record-keeping.
  • Raffle entry data: retained for 6 years from the date of the raffle draw for audit and dispute resolution purposes.
  • Payment records: retained for 6 years as required by HMRC.
  • Session cookies: expire when you close your browser or log out.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Passwords hashed using bcrypt
  • HTTPS encryption for all data in transit
  • Restricted access to personal data on a need-to-know basis
  • Regular security reviews

7. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate data.
  • Right to erasure: request deletion of your data (subject to legal retention requirements).
  • Right to restrict processing: request that we limit how we use your data.
  • Right to data portability: request your data in a machine-readable format.
  • Right to object: object to processing based on legitimate interest.
  • Right to withdraw consent: where processing is based on consent (e.g., SMS notifications), you may withdraw at any time.

To exercise any of these rights, contact us at support@voltaservices.uk. We will respond within 30 days.

8. Cookies

The Platform uses essential session cookies to keep you logged in. These are strictly necessary for the Platform to function and do not require consent. We do not use tracking, analytics, or advertising cookies.

9. International Transfers

Your data is primarily processed within the United Kingdom. Where data is transferred to service providers outside the UK (e.g., Stripe), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk

13. Contact Us

For any questions about this Privacy Policy or your personal data, contact:

VoltaServices Limited
Email: support@voltaservices.uk