Back to Home

Privacy Policy

Last updated: January 2026

1. Introduction

VOWCH ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information

We may collect the following personal information:

  • Name and contact details (email address, phone number)
  • Account credentials
  • Payment information (processed securely by Stripe)
  • Business information (for salon partners)
  • Communication preferences

Automatically Collected Information

When you access our Service, we automatically collect:

  • Device information (browser type, operating system)
  • IP address and location data
  • Usage data (pages visited, features used)
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

  • To provide and maintain our Service
  • To process voucher purchases and redemptions
  • To send transactional emails (purchase confirmations, gift notifications)
  • To communicate with you about your account
  • To improve our Service and develop new features
  • To detect and prevent fraud
  • To comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

  • Contract: Processing necessary to fulfill our contract with you
  • Legitimate Interest: Processing for our legitimate business interests
  • Consent: Where you have given explicit consent
  • Legal Obligation: Processing required by law

5. Data Sharing

We may share your information with:

  • Salon Partners: To facilitate voucher redemption
  • Payment Processors: Stripe processes all payments securely
  • Service Providers: Third parties that help us operate our Service
  • Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Secure authentication mechanisms
  • Regular security assessments
  • Access controls and employee training

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Voucher transaction records are retained for 7 years for accounting and legal purposes.

8. Your Rights

Under UK GDPR, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request limitation of processing
  • Portability: Request transfer of your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at our support page.

9. Cookies

We use cookies and similar technologies to enhance your experience. These include:

  • Essential Cookies: Required for the Service to function
  • Analytics Cookies: Help us understand how you use our Service
  • Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings.

10. International Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with UK GDPR requirements.

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at our support page.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.