Your data, handled properly.

Voltic Pro is a trading name of Voltico Ltd, registered in England and Wales under company number 17224558, registered office 27 Beverley Close, Normanton, WF6 1BU.

We are the data controller for personal data you share with us through volticpro.co.uk. Questions about your data can be sent to privacy@volticpro.co.uk.

• Account data — name, email address, hashed password, addresses you save, and any preferences you set.
• Order data — items ordered, delivery and billing addresses, order history, personalisation choices, and the last 4 digits of the payment card used (full payment details go straight to Stripe and never touch our systems).
• Contact data — the email address and message you send via our contact form or to hello@volticpro.co.uk.
• AI design data — when you use our AI design tool, the text prompt you type, any reference image you upload, and the resulting generated image. We also store metadata about the call (duration, model used, success/failure) for quality monitoring and abuse prevention.
• Technical data — IP address, browser type, device and basic usage information. IP addresses are stored briefly for rate-limiting and fraud-prevention; they are not shared with our AI providers.

We process your data to:

• Take, fulfil and deliver orders, and handle returns or refunds.
• Run your account, password resets, and loyalty rewards.
• Send transactional emails (order confirmation, shipping updates, receipts).
• Reply to enquiries you send us.
• Generate AI designs you request, store them so you can re-use them, and review community-submitted designs before publishing them to the gallery.
• Prevent abuse — rate-limiting, spotting prompt-injection or content that breaches our Acceptable Use Policy.
• Send marketing only where you’ve opted in — you can unsubscribe from any such email in one click.
• Meet legal obligations (accounting, tax, consumer-rights and fraud-prevention).

The lawful bases we rely on are contract (to fulfil your order), legitimate interests (running and securing the shop, abuse prevention), consent (marketing emails, optional cookies) and legal obligation (tax, accounting, fraud reporting).

We share the minimum needed with trusted processors who help run the shop. They’re contractually bound to handle your data only on our instructions and under equivalent data-protection terms:

• Stripe (Ireland / US) — payment processing and fraud screening. Card details go to Stripe directly and never touch our servers.
• Zoho Mail (EU / Amsterdam) — mailbox hosting and SMTP outbound for transactional emails (order confirmations, password resets, shipping updates).
• Neon (EU / London region) — database hosting.
• Netlify (US — Functions in `us-east-1` by default; global CDN with UK PoPs for static assets) — web hosting.
• Google Cloud Storage (EU region) — image hosting for product photos, uploaded reference images and AI-generated designs.
• Google Gemini (US) and Google Vertex AI (US) — AI image generation. We send only the prompt text you typed and any reference image you uploaded. We do not send your name, email, IP address or order history.
• Print-on-demand fulfilment partner (US / Latvia) — fulfilment for certain custom products. Where you order such a product we share your name, delivery address, contact email, item details and the design file with this partner so they can produce and ship it. Personalised in-house items (printed by us in the UK) are not sent to this partner.
• Couriers — Royal Mail, DPD, Evri or similar. We share your delivery address and phone number with the carrier handling your parcel.

We never sell your data and never share it with advertisers. HMRC or UK law enforcement can compel disclosure; we comply only when legally obliged.

Our AI design tool sends the prompt you write — and the reference image you upload, when applicable — to Google's Gemini / Vertex AI image-generation APIs. The provider returns a generated image which we then store in our own bucket so you can re-order or favourite it.

Don’t put personal information into prompts. Anything you type is sent to and processed by a third party. Avoid putting names, addresses, phone numbers, child names or anything else identifying into the prompt unless you’re comfortable with that data being processed by the AI provider.

We retain the prompt text alongside the generated image so admins can review flagged or reported designs and so that you can re-use a design you previously made.

Our primary database (Neon, London), mailbox host (Zoho, Amsterdam) and image bucket (Google Cloud Storage, EU region) all sit in the EU. The Netlify Functions that render and serve the site run in the US by default — every server request that touches personal data therefore involves a UK-to-US transfer. Other US sub-processors are Stripe, Google (Gemini / Vertex AI) and our print-on-demand fulfilment partner. International transfers rely on the UK Extension to the EU-US Data Privacy Framework or the Standard Contractual Clauses (UK IDTA) where required.

Account and order records are kept for as long as your account is active and for 6 years after the last order (HMRC record-keeping rules). AI-generation telemetry is kept for 90 days for quality monitoring. AI-generated images you’ve favourited or ordered are kept indefinitely so you can re-order them; rejected community submissions are deleted within 30 days. You can ask us to close your account at any time — we’ll anonymise your personal data while retaining the underlying order rows our books require.

Under UK GDPR you can ask us to:

• Send you a copy of the personal data we hold about you.
• Correct anything that’s wrong.
• Delete your data (subject to records we must keep for tax and fraud-prevention).
• Stop processing it for marketing.
• Withdraw any consent you’ve previously given.
• Object to processing based on our legitimate interests.
• Receive a portable copy of data you’ve provided to us.

Email privacy@volticpro.co.uk and we’ll act within 30 days. You can also complain to the Information Commissioner’s Office at ico.org.uk — we’d appreciate a heads-up first so we can try to resolve things.

See our cookie policy for the details of what we set and why.

The shop is not directed at children under 16 and we don’t knowingly collect data from them. If you believe a child has given us personal data, email privacy@volticpro.co.uk and we’ll remove it.

If we change this policy in a material way we’ll update the date at the top and, for bigger changes, email account holders.