UK GDPR Statement

01Controller and contact

Voltia Ltd, 14 Cricketers Close, Stewkley, Leighton Buzzard, Bedfordshire, LU7 0FX, is the controller for customer, supplier and applicant data. We are not required to appoint a statutory Data Protection Officer; the company director is accountable for data protection and is reachable at hello@voltia.uk.

02Lawful bases

We record a lawful basis for every processing activity in our record of processing: contract for quoting and installing, legal obligation for safety certificates and tax records, legitimate interests for complaints handling, website security and service improvement, and consent for marketing email.

Website analytics run on a cookieless, aggregate basis and do not identify individuals, so they do not rely on consent for device storage.

03Data minimisation and accuracy

We ask only for what a quotation or installation needs. Engineers record model and serial numbers rather than free-text notes about occupants. Customers can ask us to correct a record at any time and corrections are applied within five working days.

04Processors and international transfers

Every processor works under a written contract that mirrors Article 28 requirements. Where data is processed outside the UK we rely on adequacy regulations or the UK International Data Transfer Addendum, and we complete a transfer risk assessment before onboarding a new supplier.

Members of our remote team access customer data through hosted systems under the same contractual terms; data is not stored on local machines.

05Breach response

Suspected breaches are reported internally the same day and assessed within 24 hours. Reportable breaches are notified to the ICO within 72 hours of becoming aware, and affected individuals are told directly where there is a high risk to their rights.

06Requests

Subject access, erasure, rectification, restriction, objection and portability requests should go to hello@voltia.uk. We verify identity before releasing data and respond within one calendar month, extendable by two months for complex requests with notice to you.