Privacy notice

Short version: we collect as little as we can, we run no advertising trackers, and we do not sell anything to anybody.

Last updated: 4 September 2026

Before you publish this site: this notice is accurate for the setup as built. If you add analytics, a mailing list, a CRM or a different form provider, this page must be updated to match — under UK GDPR the notice has to describe what you actually do.

Who we are

Voyage Systems, United Kingdom. For anything about your data, email [email protected]. We are the data controller for the information described here.

The enquiry form

What you type is sent to our email inbox so we can reply. We keep enquiries for as long as we need to answer them, and where they turn into work, for as long as we need to keep business records — normally six years for tax purposes. We do not add you to a mailing list, because there is not one.

Our lawful basis is legitimate interests: you asked us a question and we are answering it. Where it becomes a subscription, the basis is performance of a contract.

If you become a customer

We will hold your name, business contact details, billing records, and the contents of your request board. We are given a staff account on your Shopify store, which means we can see store data including, depending on the permissions you grant, orders and customer records.

In that respect we act as a processor and you remain the controller: we only use that access to carry out the requests you give us, we do not export or retain your customers' personal data, and we do not use it for anything else. Grant us the least access that does the job, and revoke it when you leave.

Payments

Subscriptions are handled by our payment provider. Your card details go to them and never to us — we never see or store a card number. They hold the data needed to take payment, under their own privacy notice.

Cookies and analytics

This site sets no cookies and runs no analytics. There is no tracking pixel, no advertising tag, and no consent banner, because there is nothing to consent to.

Fonts are served by Google Fonts, so your browser makes a request to Google and Google will see your IP address as part of that. If you would rather that did not happen, the fonts can be self-hosted instead.

Hosting

This site is hosted on Cloudflare Pages. Cloudflare processes requests in order to serve the site and protect it from attack, and keeps limited security logs.

Your rights

Under UK GDPR you can ask us to:

  • tell you what personal data we hold about you
  • correct it if it is wrong
  • delete it
  • restrict or object to how we use it
  • give you a copy in a portable format

Email [email protected] and we will respond within one month. If you are unhappy with the response you can complain to the Information Commissioner's Office at ico.org.uk.