Privacy notice
This notice explains how Volatile Design (“we”) handles personal information in Volatile Leads. It covers two groups of people:
- Our customers and their team members: the people who sign up and use Volatile Leads. For their information, we are the controller.
- People whose details are in a customer’s workspace: business contacts our customers find, add or hear from. For that information, our customer is the controller and we process it on their behalf. See section B.
A. Our customers and their team members
| What we collect | Why | Legal basis |
|---|---|---|
| Name, email address, password (stored scrambled, never readable), and the date you agreed to our terms | To create and secure your account | Contract |
| Business name, town, email signature, the email account details you connect for sending (the password is stored encrypted) | To run the service for you | Contract |
| Billing details: plan, invoices and payment status. Card details are handled by Stripe, and we never see the full card number. | To take payment | Contract; legal obligation (accounting records) |
| Usage counts (lookups, drafts, checks), sign-in records, and technical logs including IP addresses | To apply plan allowances, keep the service secure, and fix problems | Contract; legitimate interests |
| Messages you send us | To help you | Legitimate interests |
How long we keep it: for as long as you have an account, and for 30 days after it closes so you can ask for an export. Invoices and payment records are kept for 6 years, because UK tax law requires it. Technical logs are kept for up to 14 days.
Emails from us: we send service emails, such as verification, password resets, invitations and billing. We don’t send marketing emails without your agreement.
Cookies: we only use cookies that are needed for the service to work: your sign-in session and a security token that stops forged form submissions. Our network provider, Cloudflare, may set a cookie to protect the site from bots. We don’t use advertising or tracking cookies in the app.
B. People whose details are in a customer’s workspace
Our customers use Volatile Leads to find and contact businesses. The details in a workspace usually come from public sources: the Companies House register, Google Maps listings and businesses’ own websites. They can also include emails people send to the customer. They are mainly business contact details: company name, website, business phone and email, and sometimes a contact’s name.
For this information the customer is the controller: they decide who to contact and why. We act only on their instructions, under our data processing agreement. If you’ve been contacted by someone using Volatile Leads, please contact them directly. Replying “no thanks” to their email marks you as do not contact in their workspace. If you can’t reach them, email us at [email protected] and we’ll pass your request on and help where we can.
C. Who we share information with
We use these providers to run the service. Each only gets what it needs for its task.
| Provider | What for | Where |
|---|---|---|
| dogado GmbH (server hosting) | Runs the server where the app and its database live | Germany (EU) |
| Cloudflare | Network security and delivery of the website | Global; UK/EU-adequate transfers |
| Stripe | Subscriptions and card payments (account holders only) | Ireland/USA |
| Anthropic (Claude) | Writing email drafts, only when you click Write draft | USA |
| Google (Places API) | Finding a business’s website, phone and reviews, only for lookups | USA |
| Data Soap | TPS/CTPS checks and text messages, only when you run a check or send a text | United Kingdom |
| Brevo | Service emails from us (verification, password resets, invitations) | France (EU) |
Where information goes outside the UK, it’s protected by UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. We don’t sell personal information.
D. Your rights
You can ask to see, correct or delete your information, ask us to restrict or stop using it, object to how we use it, or ask for a copy to take elsewhere. Email [email protected]. We’ll reply within one month. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint.
E. Security
Everything is sent over encrypted connections (HTTPS). Connected email passwords are stored encrypted, and access is limited to people who need it. Our server is in the EU (Germany). Each workspace’s data is kept separate from every other workspace.
Contact
Volatile Design, Ipswich, Suffolk, United Kingdom. Email [email protected].