Privacy Policy

Last updated: February 2026

1. Who we are

VoraLink provides studio management software. We are the data controller for the personal data we process in connection with running our platform, marketing, and support. For data that studios collect about their members (e.g. names, emails, bookings), the studio is the data controller and we process it as their processor under our agreement with them.

2. Data we collect

Account and studio data: When you sign up or run a studio on VoraLink, we collect your name, email address, studio name, and other details you provide. We also store data you add about your classes, members, and payments to provide the Service.

Usage and technical data: We collect information about how you use the Service (e.g. pages visited, actions taken) and technical data (e.g. IP address, browser type) for operation, security, and improving the Service.

Communications: If you contact us (e.g. support or demo requests), we keep records of those communications.

3. How we use your data

We use your data to:

  • Provide, maintain, and improve the Service.
  • Process payments and send service-related communications.
  • Respond to support requests and enquiries.
  • Send marketing (where you have agreed); you can opt out at any time.
  • Comply with legal obligations and protect our rights.

4. Legal basis (UK GDPR)

We process personal data where: (a) necessary to perform our contract with you (e.g. providing the Service); (b) necessary for our legitimate interests (e.g. security, analytics, improving the Service), where those interests are not overridden by your rights; (c) you have given consent (e.g. marketing); or (d) we have a legal obligation.

5. Sharing data

We may share data with: (i) service providers that help us run the platform (e.g. hosting, payments, email, authentication), under strict confidentiality; (ii) professional advisers where necessary; (iii) law enforcement or regulators when required by law. We do not sell your personal data.

6. International transfers

Data may be processed in the UK and in other countries where our service providers operate. We ensure appropriate safeguards (e.g. UK adequacy decisions or standard contractual clauses) where required.

7. Retention

We keep your data for as long as needed to provide the Service and to meet legal, accounting, or regulatory requirements. After you stop using the Service, we may retain certain data for a limited period for backups, disputes, or legal obligations.

8. Your rights

Under UK data protection law you have the right to: access your data; have inaccuracies corrected; request erasure or restriction of processing; object to processing; and, where applicable, data portability. You also have the right to complain to the Information Commissioner's Office (ICO). To exercise your rights, contact us via the Contact page.

9. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No system is completely secure; we ask you to keep your login details safe.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

For any questions about this Privacy Policy, please contact us via the Contact page.