Privacy Policy
Effective Date: 21 April 2025
At Voxxy Creative Lab (“Company,” “we,” “us,” or “our”), we take your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data.
This policy applies to all visitors, customers, and users of our website at https://voxxycreativelab.com (the “Site”), our digital products, and our professional services. Please read it carefully. By using the Site or purchasing our products and services, you acknowledge that you have read and understood this policy.
1. Who We Are
Voxxy Creative Lab is a performance marketing analytics and tracking solutions company registered in England and Wales.
Data Controller:
Voxxy Creative Lab 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: hello@voxxycreativelab.com
Phone: +31 6 38281870
For any questions or requests regarding your personal data, contact us using the details above.
2. What Personal Data We Collect
We collect different types of personal data depending on how you interact with us.
2.1 When You Visit the Site
We may collect technical data automatically, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, time and duration of your visit, and approximate geographic location derived from your IP address.
2.2 When You Create an Account
If you register for an account on the Site, we collect your name, email address, and password (which we store in encrypted form). You may also choose to provide additional profile information.
2.3 When You Make a Purchase
When you purchase a digital product through our WooCommerce store, we collect your full name, email address, billing address (street, city, state/province, postal code, country), phone number (if provided), order details (products purchased, transaction amount, date), download activity (timestamps, download count, IP address at time of download), and payment information. Note: We do not store your full credit card number or payment credentials on our servers. Payment processing is handled entirely by our third-party payment processors (see Section 5).
2.4 When You Contact Us
If you reach out via email, a contact form, or any other channel, we collect your name, email address, and the content of your message, along with any attachments or additional information you choose to provide.
2.5 When You Subscribe to Communications
If you opt in to receive newsletters, product updates, or marketing emails, we collect your email address and, where applicable, your name and communication preferences.
2.6 When You Engage Our Professional Services
For clients using our consulting and implementation services, we may collect business contact details (name, title, company, email, phone), platform access credentials shared with us to perform work, and project-related information and communications.
3. How We Use Your Data
We use personal data for the following purposes and on the following legal bases.
3.1 To Fulfill Orders and Deliver Products
We process your account and billing information to complete transactions, provide access to purchased digital products, and manage your account. Legal basis: Performance of a contract (GDPR Article 6(1)(b)).
3.2 To Provide Professional Services
We use contact details and project information to deliver the consulting and implementation services you have engaged us for. Legal basis: Performance of a contract (GDPR Article 6(1)(b)).
3.3 To Communicate With You
We use your contact information to respond to your inquiries, send order confirmations and transactional emails (such as download links, receipts, and account notifications), and provide customer support. Legal basis: Performance of a contract and legitimate interest in responding to inquiries (GDPR Article 6(1)(b) and 6(1)(f)).
3.4 To Send Marketing Communications
With your explicit consent, we may send newsletters, product announcements, or promotional offers. You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Legal basis: Consent (GDPR Article 6(1)(a)).
3.5 To Analyze and Improve the Site
We use analytics tools to understand how visitors use the Site, identify technical issues, and improve functionality and content. Legal basis: Legitimate interest in improving our services (GDPR Article 6(1)(f)).
3.6 To Prevent Fraud and Ensure Security
We use technical data (IP addresses, download logs, and account activity) to detect and prevent fraudulent transactions, unauthorized access, and abuse of our digital products. Legal basis: Legitimate interest in protecting our business and customers (GDPR Article 6(1)(f)).
3.7 To Comply With Legal Obligations
We may process and retain personal data as required to comply with applicable tax, accounting, and legal reporting requirements. Legal basis: Legal obligation (GDPR Article 6(1)(c)).
4. Cookies and Tracking Technologies
4.1 What Cookies We Use
We use the following categories of cookies:
Strictly Necessary Cookies. Required for the Site to function properly. These include session cookies, WooCommerce cart and checkout cookies, login authentication cookies, and cookie consent preference cookies. These cannot be disabled, as the Site will not function correctly without them.
Analytics Cookies. Used to understand visitor behavior and improve the Site. These include cookies set by Google Analytics (or similar tools) that collect anonymous usage data such as pages viewed, session duration, and traffic sources.
Marketing Cookies. Used to deliver relevant advertising and measure campaign performance. These may include cookies set by Meta Pixel, Google Ads, or similar platforms. These are only activated with your consent.
4.2 Cookie Consent
When you first visit the Site, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time through the cookie settings link available on the Site. Strictly necessary cookies do not require consent and are always active.
4.3 Managing Cookies
You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site, including the checkout process.
5. Third-Party Service Providers and Sub-Processors
We share personal data with the following categories of third-party service providers, solely for the purposes described in this policy. These providers act as data processors on our behalf or as independent data controllers where applicable.
Payment Processing:
Stripe, Inc. — Processes credit/debit card payments. Privacy policy: https://stripe.com/privacy
PayPal Holdings, Inc. — Processes PayPal payments. Privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full
Website Hosting and Infrastructure:
Our hosting provider stores Site data, including customer accounts and order records, on secure servers. Details of our current hosting provider are available upon request.
Analytics:
Google Analytics (Google LLC) — Collects anonymous Site usage data. Privacy policy: https://policies.google.com/privacy
You can opt out of Google Analytics at: https://tools.google.com/dlpage/gaoptout
Email Services:
We use third-party email services to send transactional and, where applicable, marketing emails. These providers process your email address and name for delivery purposes only.
Advertising Platforms:
Where marketing cookies are enabled, data may be shared with advertising platforms such as Meta (Facebook/Instagram) and Google Ads for the purpose of campaign measurement and retargeting.
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
6. International Data Transfers
Voxxy Creative Lab is based in the United Kingdom. Some of our third-party service providers (including Stripe, PayPal, and Google) are located in the United States and other countries outside the UK and European Economic Area (EEA).
When personal data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place, including transfers to countries recognized as providing an adequate level of data protection by the UK Government or the European Commission, reliance on the EU-US Data Privacy Framework (where the recipient is certified), and use of Standard Contractual Clauses (SCCs) approved by the European Commission or the UK’s International Data Transfer Agreement (IDTA) where no adequacy decision applies.
You may request a copy of the relevant transfer safeguards by contacting us at hello@voxxycreativelab.com.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following guidelines.
Order and transaction data: Retained for a minimum of 6 years from the date of the transaction, as required under UK tax and accounting regulations (including HMRC requirements).
Customer accounts: Retained for as long as your account remains active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.
Analytics data: Aggregated and anonymized analytics data may be retained indefinitely, as it does not constitute personal data.
Marketing consent records: Retained for as long as you remain subscribed, plus a reasonable period after unsubscription to demonstrate compliance with consent requirements.
Communication records: Emails and support correspondence are retained for up to 3 years unless a longer period is required for legal or contractual reasons.
Professional services data: Client project data is retained for the duration of the engagement plus 3 years, unless a different period is agreed in the applicable service agreement.
8. Your Rights
8.1 Rights Under GDPR (EU and UK Residents)
If you are located in the European Union or the United Kingdom, you have the following rights under the General Data Protection Regulation and the UK Data Protection Act 2018:
Right of Access. You have the right to request a copy of the personal data we hold about you.
Right to Rectification. You have the right to request that we correct any inaccurate or incomplete personal data.
Right to Erasure. You have the right to request that we delete your personal data, subject to any legal obligations requiring us to retain it.
Right to Restriction of Processing. You have the right to request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
Right to Object. You have the right to object to the processing of your personal data based on legitimate interest, including for direct marketing purposes.
Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) at https://ico.org.uk. In the EU, you may contact your local data protection authority.
8.2 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:
Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom the information is shared.
Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions (such as legal compliance or completing a transaction).
Right to Correct. You have the right to request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing. We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising purposes. If this practice changes in the future, we will provide a clear opt-out mechanism.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing, service levels, or quality as a result of making a privacy request.
8.3 How to Exercise Your Rights
To exercise any of the rights described above, contact us at hello@voxxycreativelab.com. Please include enough information for us to verify your identity (such as your name, email address, and order number if applicable). We will respond to all legitimate requests within 30 days (or within the timeframe required by applicable law). If a request is particularly complex, we may extend this period by an additional 60 days, in which case we will notify you.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit via SSL/TLS, secure payment processing through PCI-DSS compliant providers, access controls limiting employee and contractor access to personal data on a need-to-know basis, and regular security updates and monitoring of our systems.
While we take reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.
10. Children’s Privacy
Our Site, products, and services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected personal data from a person under 18, we will take steps to delete it promptly. If you believe a minor has provided us with personal data, please contact us at hello@voxxycreativelab.com.
11. Third-Party Links and Embedded Content
The Site may contain links to third-party websites or embed content from external services (such as videos, social media widgets, or maps). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit. Embedded content from external websites behaves as if you visited those sites directly, and they may collect data about you, set cookies, and track your interaction with the embedded content.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or regulatory guidance. When we make changes, we will update the “Effective Date” at the top of this page. For material changes that significantly affect how we process your personal data, we will make reasonable efforts to notify registered users and customers via email. We encourage you to review this page periodically.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us:
Voxxy Creative Lab 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: hello@voxxycreativelab.com
Phone: +31 6 38281870