Privacy policy

# Privacy policy

_Last updated: 4 October 2026_

This policy explains what personal data VLTA LTD collects when you use **vlta.co.uk** (our shop) and **play.vlta.co.uk** (the VLTA Panic Buy game), why we collect it, and your rights.

**Who we are:** VLTA LTD (company no. 16561041, "we", "us") is the data controller. Our address is 19 Wildern Court, Hedge End, Southampton, SO30 4DT, United Kingdom, and you can email us at **info@vlta.co.uk**.

## What we collect

**When you buy something from the shop**
- Your name, email address and billing address.
- Your order details: what you bought, the price, your order number and your unlock code.
- Payments are handled by Shopify and its payment partners. We never see or store your full card details.

**When you play VLTA Panic Buy**
- **Guest games:** the name you type in to join a game. We keep it only while the game is running, and it is deleted when the game ends or after 3 hours of inactivity.
- **Ranked account (optional):**
  - your username
  - your password, which is stored only as a secure one-way hash, so we can't read it
  - your rating, rank and game stats (games played, wins, results, record signing)
  - your chosen Kev look
- **Your device:** we save small items in your browser's local storage so the game works:
  - your session in a game, so you can rejoin after a refresh
  - your ranked login token
  - signed unlock tokens for things you've bought
  - your last-used name

  These stay on your device. You can clear them by clearing your browser data.
- **Technical data:** our servers receive your IP address and basic connection details. We use them to run the game, stop abuse (for example, too many attempts to guess unlock codes) and fix problems.
- **Quick chat:** chat is made of preset phrases and emoji only. We don't store chat messages.

**Ads**
- Free games may show ads on players' phones, served by Google AdSense. Google may use cookies or similar technology to show and measure ads. Where the law requires it, Google asks for your consent first.
- If you or your host has a Host Pass, no ads are shown.
- You can learn more, and control ad personalisation, at https://policies.google.com/technologies/ads.

**When you contact us**
- Your email address and anything you send us.

## Why we use your data (and our legal basis)

| Purpose | Legal basis |
|---|---|
| Taking your order, delivering unlock codes, refunds and support | Performing our contract with you |
| Running the game, ranked accounts and leaderboards | Performing our contract with you |
| Preventing fraud, abuse and cheating; keeping the service secure | Our legitimate interests |
| Keeping tax and accounting records | Legal obligation |
| Personalised ads | Your consent (you can withdraw it at any time) |
| Marketing emails (only if you opt in) | Your consent. You can unsubscribe at any time |

## Who we share it with

We use trusted providers who process data on our behalf:

| Provider | What they do for us |
|---|---|
| **Shopify** | Shop, checkout, payments, order emails |
| **Render** | Game hosting, on servers in Frankfurt in the EU |
| **Google** | AdSense ads |
| **Email provider** | Only if you sign up for marketing |

We don't sell your personal data.

Some providers (for example Shopify and Google) may process data outside the UK. When they do, the transfer is protected by an adequacy decision or approved safeguards such as standard contractual clauses.

## How long we keep it

| Data | How long |
|---|---|
| Order and payment records | 6 years, for tax and accounting |
| Ranked accounts and stats | Until you ask us to delete them, or after 2 years of inactivity |
| Guest game data | Deleted when the game ends (at most 3 hours) |
| Server logs | Up to 30 days |

## Your rights

Under UK data protection law you can ask us to:
- give you a copy of your data
- correct or delete it
- restrict or object to how we use it
- move it to another provider

You can also withdraw consent at any time. Email **info@vlta.co.uk**; for a ranked account, include your username. We'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at https://ico.org.uk or on 0303 123 1113. We'd appreciate the chance to sort it out first.

## Children

VLTA Panic Buy is a party game for teens and adults. Ranked accounts and purchases are not intended for children under 13. If you believe a child under 13 has given us personal data, contact us and we'll delete it.

## Changes

If we update this policy, we'll change the date at the top. For significant changes, we'll let you know on the site.