Who we are

VorinVista Ltd (“we”, “us”, “our”) is the data controller for personal data processed through vorinvista.com and related services.

Registered office: 42 Orme Road, Kingston upon Thames, UK, KT1 3SA
Company No: 00000000
Email: [email protected]
Phone: +44 (0) 7405 338 774

Data Protection Officer (or contact responsible for privacy): [email protected] (update if applicable).

Data we collect

  • Identity & contact data: name, company, email, phone, billing address.
  • Account & usage data: login data, page views, feature usage, referral sources, support tickets.
  • Transaction data: services purchased, invoices, payment confirmations (we don’t store full card details).
  • Marketing preferences: newsletter opt-ins/opt-outs, campaign engagement.
  • Technical data: IP address, device/browser info, cookies, approximate location, error logs.
  • Content you provide: form messages, project briefs, uploaded assets.

We collect data directly from you (forms, email, phone), automatically (cookies/analytics), and from third parties (e.g., payment processors, ad platforms) where lawful.

How we use your data

  • Provide and improve our services, websites, and customer support.
  • Set up and manage accounts, proposals, contracts, and billing.
  • Send service communications (e.g., quotes, invoices, project updates, security notices).
  • Personalise content and measure site performance.
  • Send marketing (only with your consent or where allowed) and measure effectiveness.
  • Detect, prevent, and address fraud, abuse, or security incidents.
  • Comply with legal and tax obligations.

Our lawful bases (UK GDPR)

  • Contract: to deliver requested services, quotes, and support.
  • Consent: for newsletters, optional cookies, certain case studies. You can withdraw at any time.
  • Legal obligation: tax, accounting, and regulatory requirements.
  • Legitimate interests: running and protecting our business, preventing fraud, improving our site and services. We balance this against your rights and expectations.

Cookies & analytics

We use essential cookies for core functionality and, with your consent, analytics/marketing cookies.

Manage preferences anytime via Cookie Settings.

Cookie overview (example — update to match your setup)
NameTypePurposeExpiry
csrftokenEssentialSecurity token for forms1 year
sessionidEssentialUser session managementSession
_ga / _gidAnalyticsSite usage measurement2 years / 24 hours

Sharing your data

We share data with trusted processors who help us operate our services, under contracts that protect your data:

  • Hosting & infrastructure: (e.g., OVH, Railway)
  • CDN & DNS: Cloudflare
  • Email & communications: Postmark / SMTP provider
  • Payments: Stripe
  • Analytics & ads: (e.g., Google Analytics, Meta Ads) — only with consent where required
  • Professional services: accountants, legal advisors

We only disclose personal data to third parties for legal reasons, mergers/acquisitions, or with your consent.

International transfers

If we transfer personal data outside the UK/EEA, we use safeguards such as UK Addendum to the EU SCCs, ICO-approved mechanisms, or rely on adequacy regulations where available.

Data retention

We keep personal data only as long as necessary for the purposes described or to meet legal requirements.

  • Customer/account records: typically 6 years for tax/accounting (update as needed).
  • Project files and support tickets: typically 2 years after project end (unless agreed otherwise).
  • Marketing lists: until you unsubscribe or your consent is withdrawn.

Your rights

Under UK data protection law, you have the right to:

  • Access a copy of your personal data.
  • Rectify inaccurate or incomplete data.
  • Erase data (in certain circumstances).
  • Restrict or object to processing (including direct marketing).
  • Data portability (receive your data in a usable format).
  • Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact [email protected]. We aim to respond within one month.

Security

We use appropriate technical and organisational measures (encryption in transit, access controls, backups, least-privilege, employee confidentiality) to protect your data. No method is 100% secure; we continually improve our safeguards.

Children’s data

Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us to delete it.

Changes to this policy

We may update this policy to reflect legal, technical, or business changes. We’ll post updates here and, if material, notify you by email or on-site notice.

Last updated: April 18, 2026, 11:03 a.m.

Contact & complaints

Questions or complaints? Email [email protected] or write to our address above.

If you are not satisfied with our response, you have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
ico.org.uk/make-a-complaint

💬