VOXA · LEGAL

Privacy Policy

April 2026 · v2.0

This Privacy Policy explains how Boichenko Ventures LTD (Company No. 17125279, registered in England and Wales) collects, uses, and protects your personal data when you use the Voxa platform or submit an application through this website. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is Boichenko Ventures LTD, Company No. 17125279, registered in England and Wales. We are registered with the Information Commissioner's Office (ICO) under registration number ZC115081. For all data protection enquiries, contact: [email protected]

2. What Data We Collect

When you submit an application through our website, we collect the following personal data: your full name, email address, organisation name, country, role type, and any optional information you provide in the message field. We also automatically collect your IP address and browser user agent for security and legal compliance purposes.

3. Legal Basis for Processing

We process your personal data on the legal basis of your explicit consent (UK GDPR Article 6(1)(a)). You provide this consent by checking the consent checkbox on our application form. You may withdraw your consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. How We Use Your Data

Your personal data is used solely for the following purposes: (a) to review and respond to your application for early access to the Voxa platform; (b) to contact you regarding your application and updates about the Voxa platform; (c) to maintain a legally required record of your consent.

5. Data Retention

We retain your application data for a maximum of 24 months from the date of submission, or until you request deletion, whichever occurs first. After this period, your data is securely deleted.

6. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following eight rights: (1) Right of access — to obtain a copy of your personal data; (2) Right to rectification — to correct inaccurate or incomplete data; (3) Right to erasure ('right to be forgotten') — to request deletion of your data; (4) Right to restriction of processing — to limit how we use your data; (5) Right to data portability — to receive your data in a structured, machine-readable format; (6) Right to object — to object to processing based on legitimate interests; (7) Right to withdraw consent — at any time, without affecting prior lawful processing; (8) Rights related to automated decision-making — not to be subject to solely automated decisions that significantly affect you. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

7. International Data Transfers

Your email address is processed by Resend Inc. (USA), acting as our data processor, solely for the purpose of delivering email notifications related to your application. As the USA is not subject to a UK adequacy decision, this transfer is protected by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as applicable. No other international transfer of your personal data occurs.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted transmission (HTTPS/TLS), server-side validation, rate limiting, and strict access controls.

9. Cookies

We use strictly necessary cookies to operate this website. With your consent, we may also use analytics cookies (Google Analytics 4) to understand how visitors interact with the site. Google Analytics is configured with IP anonymisation and no advertising features. You can manage your cookie preferences at any time using the cookie consent panel at the bottom of the page. We do not use cookies for advertising or profiling. For international transfers of data to Google LLC (USA), we rely on the UK IDTA framework.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the 'Last Updated' date at the top of this page. We will notify you of material changes by email where we hold your contact details.

11. Contact

For all privacy-related enquiries or to exercise your data rights, contact: [email protected] — Boichenko Ventures LTD, Company No. 17125279, ICO No. ZC115081, registered in England and Wales.

Privacy Policy | Voxa