privacy policy.

last updated 9 May 2026 · GDPR + UK GDPR compliant

1. who is the controller

vøiddo is the controller for data collected on urweb.voiddo.com and for direct communication about urweb jobs. contact: urweb@voiddo.com.

2. what data we collect

• contact data — name, business name, email, phone (when you contact us, request a preview, or buy a Job).
• billing data — handled by Paddle.com (our merchant of record); we never see full card details.
• communication content — emails you exchange with our team.
• website analytics — anonymised request logs (IP truncated, no cookies for analytics).
• publicly available business info — name, public phone, public site URL, public reviews — gathered from open directories before we contact a prospect.

3. legal basis

• contract — to deliver the Job you purchased.
• legitimate interest (GDPR Art. 6(1)(f)) — to contact small business owners listed in public directories with a low-volume, single-recipient, manually-reviewed message describing how their site could be improved. Each message includes a one-click unsubscribe and the data is purged on opt-out within 24 hours. UK PECR §22(2) corporate-subscriber carve-out applies for UK businesses.
• legal obligation — to keep accounting records as required by applicable tax law.

4. how long we keep data

• contact + communication: 24 months from last interaction, then deleted.
• billing records: 7 years (statutory).
• opt-out / suppression list: forever (so we never email you again).

5. who we share with

• Paddle.com Market Ltd — payment processing (UK; SCC + UK IDTA in place).
• mailcow self-hosted email — runs on our own server; no third-party email provider.
• internal drafting and quality tools — used only by the vøiddo team while preparing drafts; we do not sell or share your data.
• tax authorities in the buyer.s home jurisdiction when required by law.

we do not sell your data, ever.

6. your rights (GDPR)

• right to access — what data we hold about you.
• right to rectification — fix wrong data.
• right to erasure — be forgotten.
• right to restriction + portability.
• right to object to processing for direct marketing.
• right to lodge a complaint with your home-country data protection authority.

to exercise any right, email urweb@voiddo.com with the subject "GDPR request". we respond within 30 days.

7. cookies + tracking

see our cookie notice. short version: we use only essential session cookies on the checkout flow. no third-party analytics, no pixels.

8. security

data is encrypted in transit (TLS 1.3) and at rest (LUKS on the database server). access is restricted to the 5 named team members on /about. backups are stored encrypted in a separate datacentre.

9. children

this is a B2B service. we do not knowingly collect data from anyone under 16.

10. changes

we will notify you by email at least 14 days before any material change.