Privacy Policy

This policy explains how we, Vochlea Music Ltd, collect and process your personal information. If you have any questions relating to this policy, or you wish to exercise any of your data protection rights (listed below), then please contact us using the details set out at the end of this policy.

How we process your information

The below table explains how we process your personal information. It also specifies the legal bases we rely upon when carrying out that processing.

Website visitors, customers, software and forum users

Situation	Types of information	Purpose and lawful basis for processing
You make an enquiry regarding our goods, services or events.	Name, contact information, details of your enquiry.	We have a legitimate interest in responding to your enquiry. We also have a legitimate interest in keeping a record of your request as well as our response. This assists in the efficient operation of our business.
You purchase goods, software or services from us.	Name, contact information.	This processing is necessary for us to perform our contract with you. We have a legitimate interest in keeping customer records for the efficient operation of our business.
You request marketing communications from us.	Name, contact information, contact preferences.	We rely on your consent to send you marketing communications. You have the right to withdraw this consent at any time and can do so by contacting us using the details set out at the end of this policy.
You leave a product review.	Name, product purchased, details of review.	We publish product reviews on our website because we have a legitimate interest in sharing feedback from our customers with our website visitors and prospective customers.
You register an account for our forum.	Account name, contact information.	We have a legitimate interest in operating our online forum so that the Vochlea community can discuss our products and services.
We monitor how users interact with our website through the use of cookies	IP address, location (country only)	After obtaining your consent to setting the cookies, we have a legitimate interest in monitoring how you interact with our website in order to improve it and troubleshoot issues.
We monitor how users interact with our software	Account name and contact information, details of the hardware you use with Dubler, in-app usage metrics (e.g. time spent in app, features used, errors generated). The in-app metrics we collect don’t contain any personal information about you but they can be cross-referenced against the user account information we hold about you (which includes your name) so the law treats all of this information as personal data.	We have a legitimate interest in profiling you to understand how you interact with our software. We use this information to improve our user experience, to guide our software development and to send you customised in-app notifications (such as details of special offers or guidance for your particular hardware setup). You can opt-out of this in-app profiling in the app, go to the user pop up - click the radio button next to “Anonymise Analytics”. Blue indicates that only anonymised data is collected and that your personal data won’t be used for this purpose. Grey indicates that profiling is active and that your personal data is being collected for this purpose or by emailing us at help@vochlea.co.uk with your account email and request to opt out of the profiling.

Partners and suppliers

Situation	Types of information	Purpose and lawful basis for processing
You or your organisation supply, or offer to supply, us with goods and services.	Name, job title, contact information, payment details.	If you provide us with goods or services, then we process your information in order to perform the contract between us. If your organisation is providing us with goods or services, then we process your information because we have a legitimate interest in using your details to administer the contract between us and your organisation.
You or your organisation collaborate with us on any projects or events.	Name, job title, contact information.	We process your information because we have a legitimate interest in administering the relationship between you, or your organisation, and us.

How long we keep your information

We keep the personal data for as long as is considered necessary for the purpose(s) for which it was collected. As a general indication:

we keep customer information for approximately six years from the end of your contract with us.
we keep supplier information, and information relating to our suppliers’ staff and representatives, for six years from the end of your contract, or your organisation’s contract, with us.

In-app profiling

SMS Marketing Communication

Your data protection rights

Access to information:

Cookies

We use cookies on our website. For more information about the cookies we use, please see our Cookies Policy which is accessible at https://vochlea.com/legals/cookies-policy.

Complaints

European representative

Contact

This policy was last updated on 28 June 2024.

Advertising, analytics & marketing partners

This section supplements “Who we share your information with” above. When you consent to analytics or marketing cookies (see our Cookies Policy), we share limited information with the partners below — such as online identifiers, device and usage data, and your interactions with our site. What each advertising partner receives differs:

Meta (Facebook & Instagram) receives, through the Meta pixel and the server-side Conversions API, online identifiers, device and usage information, your purchase events, and the contact and order details you provide at checkout — your name, email address, phone number and postal address — in hashed (pseudonymised) form.

Google Ads receives only the ad-click identifier from the link you arrived on and the details of the resulting purchase. It receives no contact details, no hashed customer data, and no record of your browsing on this site.

We share this so that we can run and measure our marketing and operate the store. Each partner handles your data under its own privacy policy.

How long we keep this. The click identifier stays in our own cookie on your device for up to 90 days, or until you withdraw marketing consent — whichever comes first. Where it has been recorded against an order, it is kept with that order record for as long as we keep the order itself, because it forms part of the order’s commercial record. Where a purchase cannot be reported to Google straight away, it waits in a queue on our servers and is deleted as soon as Google confirms it or it permanently fails — in no case longer than 30 days. We do not write the click identifier to our diagnostic logs: those record only the order number, an error code and Google’s reference for the request, and are kept for 90 days.

You can withdraw your consent at any time. Where we show a cookie preferences banner (for example in the UK and EU), you can reopen it with the button below; you can also manage cookies in your browser. Where a partner processes data outside the UK or EEA (PostHog is hosted in the EU; Meta, Google, Sentry, Klaviyo and Cloudflare are in the US), we rely on appropriate safeguards. For transfers from the UK, we rely on the UK Extension to the EU Standard Contractual Clauses (the “UK Addendum”), or the UK International Data Transfer Agreement, or a UK adequacy regulation where one covers the destination. For transfers from the EEA, we rely on the European Commission’s Standard Contractual Clauses, or an EU adequacy decision where one applies. You can request a copy of the safeguards that apply to a particular transfer by emailing us at help@vochlea.co.uk.

Partner	What we use them for	Lawful basis	Privacy policy
Shopify	Our commerce platform: storefront hosting (Shopify Oxygen), checkout, payment processing, store analytics and cookie-consent management.	Performance of a contract / legitimate interest	View
PostHog	Product analytics (hosted in the EU) to understand and improve how the site is used. If you subscribe to our marketing emails while analytics consent is active, we also attach your email address to your analytics profile, so that we can connect your subscription to how you use the site. If you have not accepted analytics consent, your email address is never sent to PostHog — it goes only to Klaviyo, so that we can send you the emails you asked for.	Consent	View
Meta Platforms (Facebook & Instagram)	Advertising measurement and delivery via the Meta pixel and the server-side Conversions API. To measure and attribute purchases this includes hashed customer-matching data — your email, phone number, name and address — sent in pseudonymised (hashed) form.	Consent	View
Google Ads (including YouTube ads)	Advertising measurement. When you arrive from one of our Google or YouTube ads, Google adds an ad-click identifier to the link (a “gclid” or “wbraid”). With your marketing consent we store that identifier in our own cookie for up to 90 days, and record it against your order, so that we can later report the purchase to Google Ads and attribute the sale to the ad. Google receives only the click identifier and the purchase details — no contact details, no browsing stream. We load no Google advertising script on this site, and Google sets no cookie here.	Consent	View
Sentry	Error monitoring and performance diagnostics (hosted in the US). We do not include your name, email address or IP address in the crash reports we send, though Sentry necessarily receives your IP address when your browser contacts it, and derives an approximate country from it. Each report carries a random identifier, held only in your browser’s memory and discarded when you leave the page, so that we can tell how many page views a given fault affected.	Legitimate interest	View
Cloudflare (Turnstile)	Bot-protection and abuse prevention on our login, sign-up and password-reset pages. When one of those pages loads, the Turnstile challenge runs in your browser and your IP address and limited browser characteristics (such as your user-agent and a TLS fingerprint) are sent to Cloudflare so it can tell a genuine visitor from an automated bot; when you then submit the form, our server passes the resulting token (and your IP) back to Cloudflare to confirm the check before we process the request. Cloudflare states these signals are used solely to detect and block bots — not to identify, profile or target you, and not for advertising or cross-site tracking.	Legitimate interest (security & fraud prevention)	View
Klaviyo	Email marketing: newsletter signups sent from our backend when you subscribe, and onsite tracking (a script that records your on-site activity, such as the pages you view) used to send you relevant marketing emails.	Consent	View
Google (YouTube)	Embedded video content, in privacy-enhanced mode. Loaded automatically on pages containing a video, without waiting for a cookie choice.	Legitimate interest	View
Vimeo	Embedded video content.	Consent / legitimate interest	View
Typeform	Embedded forms, quizzes and surveys.	Consent / legitimate interest	View

US residents: you can opt out of the “sale” or “sharing” of your personal information for targeted advertising, and exercise your other state privacy rights, on our Your Privacy Choices page.

This list was last reviewed on 11 August 2026.

How we process your information

The below table explains how we process your personal information. It also specifies the legal bases we rely upon when carrying out that processing.

Website visitors, customers, software and forum users

Situation	Types of information	Purpose and lawful basis for processing
You make an enquiry regarding our goods, services or events.	Name, contact information, details of your enquiry.	We have a legitimate interest in responding to your enquiry. We also have a legitimate interest in keeping a record of your request as well as our response. This assists in the efficient operation of our business.
You purchase goods, software or services from us.	Name, contact information.	This processing is necessary for us to perform our contract with you. We have a legitimate interest in keeping customer records for the efficient operation of our business.
You request marketing communications from us.	Name, contact information, contact preferences.	We rely on your consent to send you marketing communications. You have the right to withdraw this consent at any time and can do so by contacting us using the details set out at the end of this policy.
You leave a product review.	Name, product purchased, details of review.	We publish product reviews on our website because we have a legitimate interest in sharing feedback from our customers with our website visitors and prospective customers.
You register an account for our forum.	Account name, contact information.	We have a legitimate interest in operating our online forum so that the Vochlea community can discuss our products and services.
We monitor how users interact with our website through the use of cookies	IP address, location (country only)	After obtaining your consent to setting the cookies, we have a legitimate interest in monitoring how you interact with our website in order to improve it and troubleshoot issues.
We monitor how users interact with our software	Account name and contact information, details of the hardware you use with Dubler, in-app usage metrics (e.g. time spent in app, features used, errors generated). The in-app metrics we collect don’t contain any personal information about you but they can be cross-referenced against the user account information we hold about you (which includes your name) so the law treats all of this information as personal data.	We have a legitimate interest in profiling you to understand how you interact with our software. We use this information to improve our user experience, to guide our software development and to send you customised in-app notifications (such as details of special offers or guidance for your particular hardware setup). You can opt-out of this in-app profiling in the app, go to the user pop up - click the radio button next to “Anonymise Analytics”. Blue indicates that only anonymised data is collected and that your personal data won’t be used for this purpose. Grey indicates that profiling is active and that your personal data is being collected for this purpose or by emailing us at help@vochlea.co.uk with your account email and request to opt out of the profiling.

Partners and suppliers

Situation	Types of information	Purpose and lawful basis for processing
You or your organisation supply, or offer to supply, us with goods and services.	Name, job title, contact information, payment details.	If you provide us with goods or services, then we process your information in order to perform the contract between us. If your organisation is providing us with goods or services, then we process your information because we have a legitimate interest in using your details to administer the contract between us and your organisation.
You or your organisation collaborate with us on any projects or events.	Name, job title, contact information.	We process your information because we have a legitimate interest in administering the relationship between you, or your organisation, and us.

How long we keep your information

We keep the personal data for as long as is considered necessary for the purpose(s) for which it was collected. As a general indication:

we keep customer information for approximately six years from the end of your contract with us.
we keep supplier information, and information relating to our suppliers’ staff and representatives, for six years from the end of your contract, or your organisation’s contract, with us.

We may disclose your personal information to third parties where it is necessary to:

comply with legal obligation;
perform a contract between us;
enforce an agreement between us or to manage a dispute;
operate our business in a safe and efficient manner;
protect our rights, property, or the safety of our staff and visitors, or any other person; or
seek advice from our professional advisers.

In the above situations, we may share your personal information with the following categories of people. Where practicable, we will anonymise your information before sharing:

our outsourced service providers, who are contractually bound to protect your information;
potential purchasers of our business or shares in our company, subject to them signing a confidentiality agreement which protects your information; and
our professional advisers, such as our solicitors or accountants. Our advisers have professional duties to protect your information.

In the above situations, we may share your personal information with the following categories of people. Where practicable, we will anonymise your information before sharing:

our outsourced service providers, who are contractually bound to protect your information;
potential purchasers of our business or shares in our company, subject to them signing a confidentiality agreement which protects your information; and
our professional advisers, such as our solicitors or accountants. Our advisers have professional duties to protect your information.

Where the recipient of your personal data is based outside of the UK and is not in a country which has received an adequacy regulation from the UK government, we will safeguard the transfer of your personal data. If the recipient does not have binding corporate rules in place then we enter into the standard contractual clauses (SCCs) with them to ensure your data is protected to the same high standard as under UK law.

In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.

In-app profiling

As mentioned in the table at the start of this Policy, we additionally and separately profile our software users. We do this to understand how users interact with our software and the information we gather helps improve our user experience, guides our software development and is used to send you customised in-app notifications (such as details of special offers or guidance for your particular hardware setup). The in-app metrics we collect don’t contain any personal information about you but they can be cross-referenced against the user account information we hold about you (which includes your name) so the law treats all of this information as personal data.

You can opt-out of this in-app profiling at any time by doing the following:

In the user pop up - click the radio button next to “Anonymise Analytics”. Blue indicates that only anonymised data is collected and that your personal data won’t be used for this purpose. Grey indicates that profiling is active and that your personal data is being collected for this purpose.

Or by emailing us at help@vochlea.co.uk from your account email and request to opt out of the profiling.

SMS Marketing Communication

We collect phone numbers when they are provided to us by our users. These numbers may be used to send you promotional messages, updates, news, and other marketing communications related to Vochlea Music.

Consenting to receiving SMS communication, by providing us with your phone number, you consent to receive SMS messages from Vochlea Music. We obtain explicit consent before sending any SMS marketing messages.T hese messages may include promotions, offers, updates, and other marketing communications.

If you wish to stop receiving promotional SMS messages from Vochlea Music, you can opt-out at any time by following the instructions provided within each SMS message or by contacting our support team. Once you opt-out, you will no longer receive promotional SMS messages from us, though you may still receive other types of communications.

Your data protection rights

Under data protection law you have the following rights:

the right to be informed about what we do with your information. This policy provides you with this information;
if we are processing your personal information on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by contacting us using the details set out below;
the right to access a copy of your information which we hold. This is sometimes called a 'data subject access request' or ‘DSAR’. Additional details on how to exercise this right are set out below;
the right to prevent us using your information for direct marketing purposes. We will inform you (before collecting your information) if we intend to use your personal information for marketing purposes. You can exercise your right to prevent this processing by leaving unchecked certain boxes on the forms we use to collect your data or by contacting us using the details set out below;
the right to object to decisions being made about you by automated means. We will inform you if your information is subject to automated processing;
the right to object to us processing your personal information in certain other situations;
the right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law; and
the right, in certain circumstances, to request that we erase, rectify, cease processing and/or delete your information.

Access to information:

Under data protection law you can exercise your right of access by making a written request to receive copies of some of the information we hold on you. We may ask for proof of your identity, and/or proof of authority if you are making the request on behalf of someone else, before we supply the information to you. Requests should be sent to us using the contact details set out below.

You do not need to pay a fee to exercise this right unless you are requesting copies of documents you already have, in which case we may charge our reasonable administrative costs. We are also allowed to charge you for our reasonable administrative costs if your request is clearly unfounded or excessive.

In very limited circumstances, data protection law allows us to refuse to comply with your request. If we refuse to comply then we will notify you of that fact.

In certain circumstances, you are entitled to receive the information in a structured, commonly used and machine-readable form.

Cookies

We use cookies on our website. For more information about the cookies we use, please see our Cookies Policy which is accessible at https://vochlea.com/legals/cookies-policy.

Complaints

If you have a complaint about how we handle your data then please email or write to us using the contact details below.

You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner's Office (“ICO”). For further information on your rights and how to complain to the ICO, please refer to the ICO website https://ico.org.uk/concerns.

European representative

Our European representative is PrighterGDPR-Rep - Maetzler Rechtsanwalts GmbH & Co KG. Their contact details are as follows: (Please add the following reference to all correspondence: ID-13381311452)

Address: Schellinggasse 3/10, 1010 Vienna, Austria
Email: info@prighter.com
Website portal: https://prighter.com/q/13381311452

Contact

Vochlea Music Ltd Limited is registered in England and Wales with company number 10569561. You can contact us:

By email to info@vochlea.co.uk
By post to Data Protection, Vochlea Music Ltd, 85 Great Portland Street, First Floor, London, W1W 7LT

Privacy Policy

How we process your information

Website visitors, customers, software and forum users

Partners and suppliers

How long we keep your information

In-app profiling

SMS Marketing Communication

Your data protection rights

Access to information:

Cookies

Complaints

European representative

Contact

Advertising, analytics & marketing partners

Privacy Policy

How we process your information

Website visitors, customers, software and forum users

Partners and suppliers

How long we keep your information

In-app profiling

SMS Marketing Communication

Your data protection rights

Access to information:

Cookies

Complaints

European representative

Contact

Orders

Dubler

Company