Privacy policy

Last updated: 7 July 2026

This policy explains how Vorpela Ltd (“Vorpela”, “we”, “us”) collects, uses and protects your personal data when you contact us or book a consultation, and sets out your rights under the UK GDPR and the Data Protection Act 2018. Vorpela Ltd is the data controller for the personal data described below.

Who we are

Vorpela Ltd is a company registered in England and Wales, company no. 17307891.

If you have any questions about this policy or how we handle your data, please email us at [email protected].

What personal data we collect and why

We only collect the personal data we need to respond to you and to run our engagements:

• When you book a consultation. Our booking link uses Google Calendar’s appointment scheduling. When you book, Google collects your name, email address and the appointment details you provide, and shares them with us so we can hold the meeting. We use this data to prepare for and attend the consultation.
• When you email us. If you email us directly, we receive your name, email address and whatever you choose to tell us in your message. We use this to respond to your enquiry.
• During an engagement. If you become a client, we process the business contact details and the operational data needed to deliver the agreed automation, under the terms of a signed Data Processing Agreement.
• When you visit this website. Our hosting provider keeps standard server logs (such as IP address, browser user agent and request timestamps) to keep the site running securely. This site sets no tracking cookies and uses no analytics (see “Cookies” below).

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects.

Lawful bases for processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Legitimate interests: to respond to enquiries and bookings, and to run and secure this website. Our legitimate interest is communicating with people who contact us and operating our business. You can object to this processing (see “Your rights”).
• Contract: to take steps at your request before entering into a contract, and to perform an engagement once you become a client.

Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract and on our instructions:

• Google (Google Workspace / Google Calendar): for the booking flow and our business email. Google processes your data in accordance with its own privacy policy.
• DigitalOcean: our hosting provider, which serves this website and keeps the standard server logs described above.

Some of these providers may process data outside the UK. Where that happens, we rely on recognised UK GDPR transfer safeguards (such as adequacy regulations or the UK’s international data transfer mechanisms) to keep your data protected. We may also disclose personal data where required by law.

How long we keep your data

• Enquiry and booking correspondence: while your enquiry is live and for up to 12 months after our last contact, unless you ask us to delete it sooner.
• Client engagement records: for the duration of the engagement and then for up to 6 years, to meet our legal, tax and accounting obligations and limitation periods. Your operational data is deleted at the end of the engagement.
• Server logs: retained by our hosting provider for a short period in line with its standard practice.

Your rights

Under the UK GDPR you have the right to:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: ask us to delete your data in certain circumstances.
• Restriction: ask us to limit how we use your data.
• Portability: receive your data in a portable format, or have it transferred.
• Objection: object to processing based on our legitimate interests.

To exercise any of these rights, email us at [email protected]. We will respond within one month.

Complaints

If you have a concern about how we handle your data, please contact us first at [email protected] so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk.

Cookies

This site sets no tracking cookies and uses no analytics or advertising technologies. Our fonts are self-hosted, so visiting the site makes no third-party requests from your browser. Because we set no non-essential cookies, no consent banner is needed.