Privacy Policy
Last updated: January 2025
1. Who We Are
GetVoucha Ltd ("GetVoucha", "we", "us", "our") operates the getvoucha.com platform — a voucher marketplace connecting buyers with local businesses. Our registered address is 10 Tech Square, London, EC1A 1BB. For privacy matters, contact our Data Protection Officer at privacy@getvoucha.com.
2. Information We Collect
We collect: (a) Account data — name, email address, password (hashed), country, and role (buyer or seller) provided at registration; (b) Purchase data — voucher codes, deal IDs, payment amounts, transaction timestamps; (c) Vendor data — business name, address, bank account details for payout processing, and KYC documents; (d) Usage data — pages visited, searches performed, deals clicked, redemption events; (e) Location data — city/country either detected via GPS or IP address, stored only in your browser's local storage.
3. How We Use Your Information
We use your data to: process and deliver voucher purchases; send order confirmations, voucher PDFs and redemption receipts; personalise deal recommendations based on your location; process seller payouts; verify seller identities via KYC; detect and prevent fraudulent transactions; improve platform performance; and comply with our legal obligations.
4. Legal Basis for Processing (GDPR)
For users in the UK and EU, our legal bases are: Contract performance — for processing purchases and seller payouts; Legitimate interests — for fraud prevention and platform improvement; Consent — for optional analytics and marketing emails (you can withdraw at any time); Legal obligation — for retaining financial records for 7 years as required by HMRC.
5. Sharing Your Information
We share your data only with: (a) Stripe — our payment processor (PCI-DSS Level 1 certified) for secure payment handling; (b) Vendors — we share your buyer name and voucher code with the relevant vendor solely to enable redemption; (c) Supabase — our cloud database provider; (d) Law enforcement or regulators — only when required by law. We never sell your data to third parties or share it for advertising purposes.
6. International Data Transfers
Our platform infrastructure is hosted in the EU (Supabase EU region). Stripe may process data in the United States under Standard Contractual Clauses. We take appropriate safeguards to protect your data during any international transfers.
7. Data Retention
Account data: retained while your account is active and for 30 days after deletion. Transaction and financial records: retained for 7 years as required by UK tax law. KYC documents: retained for 5 years after the vendor relationship ends, as required by anti-money-laundering regulations. Location data: stored only in your browser's local storage and never sent to our servers.
8. Cookies
We use essential cookies for authentication and session management, and optional analytics cookies. For full details, see our Cookie Policy. You can manage cookies through your browser settings at any time.
9. Your Rights
Under GDPR, UK GDPR, and other applicable laws, you have the right to: access a copy of your personal data; correct inaccurate data; request erasure of your data (subject to legal retention requirements); object to processing; restrict processing; and data portability. To exercise any of these rights, email privacy@getvoucha.com. We will respond within 30 days.
10. Security
We use TLS/SSL encryption for all data in transit. Passwords are hashed using bcrypt. Payment card data is never stored on our servers — all payments are handled by Stripe. We conduct regular security reviews and access is restricted to authorised personnel only.
11. Children's Privacy
GetVoucha is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email (if you have an account) and by updating the "Last updated" date on this page. Continued use of the platform constitutes acceptance of the updated policy.
13. Contact & Complaints
For privacy questions, contact our DPO at privacy@getvoucha.com or write to GetVoucha Ltd, 10 Tech Square, London, EC1A 1BB. UK users may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.