Privacy policy
Last updated: September 25, 2026
1. Data controller
Volcanz Digital LLP (no. OC446751), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: growth@volcanz.digital or WhatsApp +44 20 4577 3932.
2. What data we process
- Data you provide via the contact form or email (name, email, company and the message content).
- Browsing data: technical and usage information collected via cookies and analytics (see Cookie Policy).
- Email engagement data: if you are in an open commercial process with us, whether our follow-up emails were opened, with the date, the IP address, the approximate location derived from it and the email client used (see section 10).
3. Purposes and legal bases (UK GDPR art. 6)
- Responding to your enquiry and providing services (pre-contractual measures / legitimate interest).
- Site analytics (your consent).
- Communications if you request them (your consent).
- Measuring whether our follow-up emails were opened, to know when a proposal is worth following up on (legitimate interest; you can object at any time).
4. Retention
We keep contact and enquiry data for the duration of the relationship and up to 24 months after your last interaction, unless you ask us to delete it sooner. Analytics data is kept according to Google Analytics' retention settings, and any data we must keep by law is retained for the applicable statutory period. After that it is deleted or anonymized.
5. Recipients and processors
We don't sell your data. The following processors may access it under contract: Vercel (hosting), Supabase (database and storage), Resend (transactional email), Google Analytics (site analytics), and Anthropic and fal.ai (AI features on the site).
6. International transfers
Some of these providers are based in the United States, so some data is transferred outside the UK and the EEA. These transfers rely on appropriate safeguards: the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses, and, where the provider is certified, the EU–US Data Privacy Framework.
7. Your rights (UK GDPR)
Access, rectification, erasure, restriction, objection, portability and withdrawing consent. To exercise them, write to growth@volcanz.digital. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk (opens in a new tab).
8. Security
We apply reasonable technical and organizational measures.
9. Cookies
This site uses cookies; see the Cookie Policy.
10. Email open tracking
When we send a follow-up email about a proposal you have open with us, that email contains a 1x1 transparent image hosted on our servers. If your email client loads images, we learn that the message was opened, along with the date and time, the IP address of the request, the approximate location derived from it and the email client used. We do not read your replies with it, we do not track what you do afterwards and we do not build a profile of you.
We only do this in follow-up emails within an open commercial process. We do not do it in our email signature, nor in emails to suppliers, or in administrative, contractual or billing correspondence. The legal basis is our legitimate interest in knowing whether a proposal is worth following up on.
You can object at any time by writing to growth@volcanz.digital: we will stop including it in our emails to you, with no further explanation needed. Blocking images in your email client also prevents it, and many clients do so by default.
11. Changes
We may update this policy and will publish the current version with its date.