1. Who we are
Virtual Voice and Virtual Voice Office are trading names of Cyber Fits Solutions Limited, a company registered in England and Wales (Company No. 12345678), with a registered office at Sunderland, Tyne and Wear. We are the data controller for personal information collected through this website and our services.
2. What information we collect
We collect information you give us directly when you:
- Sign up for a plan (name, email address, billing address, payment card details via Stripe)
- Port an existing number (current provider details, address)
- Contact us or submit a support ticket (name, email, message content)
- Log in to your customer portal (usage logs, session data)
We also collect information automatically when you visit our website, including your IP address, browser type, pages visited and time spent. This is used for security, fraud prevention and service improvement.
3. How we use your information
We use your personal information to:
- Provide and manage your VoIP service
- Process payments and issue invoices
- Register your emergency address with the emergency services
- Send service emails (receipts, account alerts, password resets)
- Handle number porting requests with your current provider
- Respond to support queries
- Comply with our legal and regulatory obligations
We do not sell your personal information to third parties and we do not use it for profiling or automated decision-making.
4. Legal basis for processing
Under UK GDPR, we rely on the following lawful bases:
- Contract — to deliver your subscription and number service
- Legal obligation — to register your emergency address and comply with Ofcom requirements
- Legitimate interests — for security monitoring, fraud prevention and service analytics
- Consent — for optional analytics cookies (you can withdraw consent at any time via our cookie settings)
5. Who we share your information with
We share your information only where necessary:
- Stripe — payment processing (your card details are handled entirely by Stripe and never stored on our servers)
- Our VoIP carrier — to provision your number and route calls
- BT/Openreach and receiving carriers — for number porting
- Emergency services — your registered address is provided to emergency services when you call 999
- Mailgun — transactional email delivery
All processors are contractually required to protect your data and may not use it for their own purposes.
6. How long we keep your information
We keep your account data for the duration of your subscription plus 6 years (to meet our financial record-keeping obligations). Call records and usage logs are retained for 12 months. You may request deletion of data that we are not legally required to retain.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion (where no legal obligation to retain exists)
- Object to or restrict certain processing
- Data portability — receive your data in a machine-readable format
- Withdraw consent for optional processing at any time
To exercise any of these rights, email us at privacy@virtualvoice.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We protect your data with TLS encryption in transit, bcrypt password hashing, and access controls that limit who within our organisation can see customer data. Payment information is tokenised by Stripe and never touches our servers.
9. Changes to this policy
We may update this policy from time to time. We will notify active customers of material changes by email. The date at the top of this page always shows when the policy was last updated.
10. Contact us
Cyber Fits Solutions Limited
Email: privacy@virtualvoice.uk
