Privacy
Voivey customer privacy notice
Registered name: Digestible Tech Ltd, trading as Voivey
We are the controller of your personal data.
Contact details
Post Crown House, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom
Email stefan@voivey.com
We are registered with the ICO under registration reference ZB194893.
Our role
When you sign up for an account and create surveys, we are the controller of your account information. This notice covers that.
When people answer a survey you have sent, you decide who to ask and why, so you are the controller of their answers. We are your processor. We do not use those answers for our own purposes. How they are handled is set out in the privacy information shown to your respondents and in our data processing terms.
What information we collect, use, and why
To provide services and goods:
- Names and contact details
- Account information
For the operation of customer accounts and guarantees:
- Names and contact details
- Account information, including registration details
- Information used for security purposes
- Marketing preferences
For service updates or marketing purposes:
- Names and contact details
- Addresses
- Marketing preferences
- IP addresses
- Records of consent, where appropriate
For dealing with queries, complaints or claims:
- Names and contact details
- Account information
- Correspondence
If you start a survey before signing in
You can build a survey from the website before you have an account. We ask your name and your email in the process. We hold them, with the survey, so that a sign-in with that email can claim the survey, on any device. A survey never claimed is deleted after 30 days, with your name and email. The email is used to send you the sign-in link when you ask for it. Its domain, the part after the @, is used the moment you type it to look up your company and read your company’s website for context, exactly as it is when you sign up. A survey you start is only attached to that email once you ask for the link.
If you write to us
The contact page uses a form run by a provider on our behalf. Whether or not you have an account, we hold your name, email address and the message you send, so we can reply.
The lawful basis is our legitimate interest in answering people who get in touch. We keep that correspondence for 3 years, as set out below.
Lawful bases and data protection rights
Your rights: access, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent where consent is our basis. We respond within one month.
To provide services and goods. Contract.
For the operation of customer accounts and guarantees. Contract, and legitimate interests: keeping accounts secure. We keep records of sign-ins, including the time, IP address and browser, so that we can detect unauthorised access, investigate suspicious activity and protect our customers’ accounts and the surveys held in them. This is in the interests of the account holder and of us as the provider, and it involves no more information than is needed to spot misuse.
For service updates or marketing purposes. Consent, which you can withdraw at any time. And legitimate interests: telling customers about changes to the service they pay for. We email account holders about changes that affect how the product works, security updates and planned downtime, because someone running a survey needs to know if something is changing underneath it. We use only the email address they signed up with, we send these rarely, and the message is always about the service rather than a sales offer. Marketing emails are separate and go only to people who have given consent.
For dealing with queries, complaints or claims. Contract, and legitimate interests: answering questions and sorting out problems. When someone contacts us about a fault, a complaint or a billing query, we keep the correspondence and enough account detail to look into it, put it right and show what we did if the question comes back later. We do not use these records for anything else.
Where we get personal information from
- Directly from you
- Publicly available sources. Where the domain you sign up with belongs to a company, we read a short description of what that company does from its public website, so that your survey questions have context. You can edit it or switch it off.
How long we keep information
| What | How long |
|---|---|
| Account information | While your account is open, and deleted 12 months after you close it |
| Surveys, briefs and questions you create | While your account is open, deleted with the account |
| Sign-in and security records | 12 months |
| Marketing consent records | While your consent stands, and for 2 years after you withdraw it, so we can show we had it |
| Correspondence about queries and complaints | 3 years |
| Records of how a conversation ran, holding none of the words | 24 months |
| Business and accounting records | 6 years from the end of the accounting period they relate to |
Answers given by people responding to your surveys are yours, not ours. We keep them until you delete them or close your account.
Who we share information with
Like most companies, we use other providers to run the service. These cover speech to text, artificial intelligence models, hosting, our database, transactional email, sign-in, and the form on our contact page.
We have data processing agreements in place with these providers, and they act only on our instructions.
We do not sell your data and we do not share it for advertising.
Sharing information outside the UK
Some of our providers are outside the UK, so personal information reaches them there.
Every one of those transfers rests on one of two things.
- The country has UK adequacy regulations, meaning the UK government has decided its protection is equivalent to ours. This includes the UK extension to the EU-US Data Privacy Framework, where a United States provider is certified under it.
- Or we have the UK’s International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, in place with that provider, together with a transfer risk assessment.
You can ask us for a copy of the safeguards that apply. Write to us at the address above.
Security
Keeping your data secure matters to us.
No audio is ever recorded or stored. While a person talks, their browser sends the audio straight to our speech provider and gets the words back. The audio never passes through our servers and no recording is kept anywhere.
Data is encrypted in transit and at rest. Access is limited to the people who need it. Workspaces are separated so that one customer cannot read another’s data.
What happens if our business changes hands
We may expand or reduce our business, which could involve the sale or transfer of all or part of it. Where your personal data is relevant to the part being transferred, it will transfer with it, and the new owner will be permitted to use it only for the purposes it was originally collected for. We will contact you in advance if this happens.
Changes to this notice
We may change this notice from time to time, for example if the law changes. Where we make a material change to how we use your personal data, we will contact you where possible.
How to complain
Email stefan@voivey.com, or write to Digestible Tech Ltd, Crown House, 27 Old Gloucester Street, London, WC1N 3AX.
If you remain unhappy, you can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint.
Answering a survey rather than sending one? Read the notice for people answering a survey.