Privacy policy

This is the plain-English version of how Voll handles your personal data. If you have any questions after reading it, email steffen@voll.co.uk and you’ll get a real answer from a real person.

Who we are

Voll is a UK small business growth consultancy, founded and run by Steffen Hoyemsvoll. Voll is the data controller for any personal information collected through this website. You can reach us at steffen@voll.co.uk.

What we collect

We only collect the information you give us, and only for the reason you gave it.

Newsletter signups. Just your email address, whether you sign up through the footer form, the audit tool, or a guide download.

Business audit tool. Your email, the name and type of your business, and your answers to the twelve diagnostic questions. We use this to generate your results and to follow up if you ask us to.

Guide downloads. Your email address and which guide you asked for.

Contact form. Your name, email, phone number if you provide one, business type, the message you wrote, and which contact method you prefer.

Proposals. If you approve a proposal from us: your name, email, the time you approved it, your IP address and browser details, and the proposal and terms as you approved them. That is the record of our agreement, and you get a signed copy by email.

Client checklist. Once work starts, your proposal page carries a task list. Your answers, and any documents you upload to it, are used to set your company up: forming it at Companies House, registering it with HMRC for VAT, Corporation Tax and PAYE, and opening the bank account. That can include your date of birth, National Insurance number, address history, photo ID and proof of address. Only Steffen sees them. The answers sit in the same EU database as everything else here; the documents sit in a private store that nothing can reach without a signed link we issue.

Payments.Growth Kit purchases and proposal deposits are paid through Stripe. We keep your email, what you paid for, the amount and the Stripe payment reference. Card details are entered on Stripe’s checkout page and held by Stripe.

Website analytics. We use two providers. Plausible gives us cookie-free, aggregated page counts for every visitor. Google Analytics gives us more detailed behavioural data, and only collects identifying information if you accept the cookie banner.

How it’s stored

Form submissions are stored in Supabase, a GDPR-compliant database hosted in the European Union. Emails are delivered through Resend. Introductory calls are booked through Cal.com, which holds the name, email address and time you give it when you book. Payments are taken by Stripe, which also uses payment details for its own fraud prevention, as set out in Stripe’s privacy policy. Aggregated page-view counts are collected by Plausible, an EU-hosted, cookie-free analytics provider. Google Analytics (operated by Google LLC) loads for every visitor: before you choose, and if you reject, it receives cookieless pings that feed modelled totals only, and it collects usage data tied to you only once you accept. Transfers to Google in the United States are covered by the UK Extension to the EU-US Data Privacy Framework. That’s the full list of processors. No third-party marketing tools, no ad pixels, no data brokers.

How we use it

We use your information to send you what you asked for, such as a guide, your audit results, or a reply to your message. If you’ve subscribed to the newsletter, we’ll also occasionally email you with things we think are genuinely useful for running a small UK business. That’s it.

We never sell your data. We never share it with third parties for marketing. You can unsubscribe from the newsletter at any time with one click.

Cookies and similar technology

Voll itself sets no cookies. The site is static and doesn’t need them to work. Plausible runs cookie-free for every visitor, identifies nobody, and does not fingerprint.

If Google Analytics is enabled and you’ve accepted the cookie banner, GA sets two cookies (_ga and _ga_<ID>) so it can tell returning visitors apart from new ones. If you reject, GA operates in Google’s Consent Mode v2 and sets no cookies, sends no identifiers, and only contributes to modelled, aggregate totals.

Your consent choice is remembered in your browser’s localStorage under the key voll-cookie-consent. That key is never sent to any server; it just keeps the banner from reappearing on every page.

What’s stored and why

• _ga: cookie set by Google Analytics only if you accept. Distinguishes unique visitors. Retention: 2 years.
• _ga_<ID>: cookie set by Google Analytics only if you accept. Holds GA4 session state. Retention: 2 years.
• voll-cookie-consent: localStorage value set by Voll (not a cookie). Remembers your consent choice. Kept until you clear your browser storage.

How to change your choice

Scroll to the bottom of any page and click Manage cookies. The banner reappears; click Accept or Reject, and your new choice replaces the old one immediately.

Your GDPR rights

Under UK GDPR you have the right to access the personal data we hold about you, correct anything that’s wrong, ask us to delete it, receive a copy in a portable format, and object to the way we’re using it. To exercise any of these rights, email steffen@voll.co.uk and we’ll respond within a working day.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you think we’ve handled your data badly. We’d obviously rather you told us first so we can fix it, but it’s your right either way.

Retention

Newsletter subscribers: we keep your email for as long as you’re subscribed. Unsubscribe and it’s removed.

Audit results: kept for two years from submission, then deleted.

Contact form submissions: kept for three years, then deleted. This is so we can look back at a prior conversation if a client comes back to us.

Guide downloads: the email and which guide you took are kept while you remain subscribed to the newsletter.

Approved proposals and their signing record: kept for six years after the work ends, then deleted.

Documents you upload to a client checklist: deleted within 30 days of handover. Your written answers stay with the proposal record for the same six years, because they are the record of what we set up and why.

Payment records: kept for six years from the end of the financial year they fall in, as HMRC requires.

Changes to this policy

If anything important changes we’ll update this page and update the “last updated” date at the top. Nothing here is locked in stone, but we won’t start doing anything sneaky without telling you first.

Contact

Any questions, corrections, or data requests go to steffen@voll.co.uk. You can also read our termsif you’re after the other half of the legal picture.