Your Privacy Choices

What we “sell” or “share”

We do not sell your personal information for money. However, unless you opt out, we disclose personal information to advertising networks so that we can measure and deliver our advertising. Under the CCPA/CPRA and similar state laws, this kind of disclosure for cross-context behavioural advertising can be treated as a “sale” or “sharing” of personal information.

Whether this is on by default depends on where you are. Where we show a cookie banner (for example in the UK, the EEA and Switzerland), our advertising trackers stay off until you opt in. Where we do not show a cookie banner, they are on by default and you can opt out at any time using the switch above. If you previously declined marketing cookies on our cookie banner (including by clicking Decline), we keep treating that as an opt-out of the sale or sharing of your personal information until you change it here. If you declined only analytics, analytics stays off until you change it here, but that alone is not a sale or sharing opt-out. We also honour Global Privacy Control signals as an opt-out — see below.

The categories we disclose are identifiers (such as online and advertising identifiers), internet or other electronic network activity (such as your interactions with our site), commercial information (such as your purchases) and inferences (such as email-engagement segments). The purpose is advertising attribution, measurement and delivery. These are the third parties that receive them:

• Meta Platforms (Facebook & Instagram) — through the Meta pixel on our site and the server-side Conversions API: online identifiers, your IP address and browser information, your interactions with our store (such as viewing a product, adding it to your basket, starting checkout and purchasing), and your checkout contact details in hashed form. Meta also receives, through a sync run by Klaviyo, our email marketing provider, the hashed email addresses in two of our email-engagement segments, which it uses to build advertising audiences.
• Google (Google Ads & YouTube) — the ad-click identifier from the link you arrived on and the details of the resulting purchase, which we report to Google Ads. Google’s “Google & YouTube” app for Shopify also runs a pixel on our checkout.
• TikTok — through a pixel that TikTok’s app for Shopify runs on our checkout: online identifiers, device information and your checkout and purchase events.
• Converlay — through a pixel on our checkout: online identifiers, device information and your checkout and purchase events, which it passes on to advertising networks to measure our ads.
• Shopify (Network Intelligence) — Shopify, which runs our store and checkout, also uses information about your visits and purchases across the stores it hosts for its own “Network Intelligence” services. For this use Shopify acts as a business in its own right, not as our service provider.

Our Notice at Collection explains what we collect, why, and how long we keep it.

Opting out using the switch above tells us to stop this. It records your “do not sell or share” choice with Shopify (which powers our store), switches off our advertising trackers on this device, and stops us sending the matching server-side events to Meta and reporting purchases to Google Ads for orders placed from this device. It also switches off onsite tracking by Klaviyo, our email-marketing provider, which we treat as a service provider rather than a sale or share. The Klaviyo sync to Meta works on your email address rather than on this device, so to opt out of it, email us from the address you subscribed with (see Inferences).

If you are logged in. When you opt out while logged in to your Vochlea account — with the switch above or by sending a Global Privacy Control signal — we also save the choice to your account. It then applies on every device where you log in and we stop sending your purchases to Meta and Google Ads whichever device you buy from. A later visit without a GPC signal does not undo it; to opt back in, use the switch above while logged in.

Analytics. Separately from advertising, we use PostHog for first-party, privacy-friendly product analytics under a service-provider relationship; we do not consider that a sale or share. Where we do not show a cookie banner it is on by default, and you can turn it off at any time with the analytics switch above. Where we show a cookie banner, use its preferences dialog to manage analytics instead. We never enable PostHog session replay (recordings of how a page is used) for visitors in the United States or its territories. See our Cookies Policy for details.

Who can use this opt-out

This control is available to everyone, but the legal right to opt out of sale or sharing depends on your state (for example California, Colorado, Connecticut, Texas, Virginia and the other states with a consumer privacy law). Wherever you are, we will honour the choice you make here. You do not need an account, and you will not be asked to verify your identity simply to opt out.

Global Privacy Control (GPC)

We recognise the Global Privacy Control signal. If your browser or a browser extension sends a GPC signal, we automatically treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising — wherever you are, not only in states where the law requires it. Our advertising trackers stay off in your browser, and our servers do not send your purchase to Meta or Google Ads. (The Klaviyo email-audience sync to Meta is the one exception for now, as explained above.) Our checkout is hosted by Shopify, which applies a Global Privacy Control signal to the checkout pixels (see our Cookies Policy) only in the US states where it honours that signal; elsewhere those pixels may still run, and we are reviewing whether to remove them. You don’t need to do anything else: when we detect the signal, the control above shows “Opt-out request honored”, and for visitors in the US the “Your Privacy Choices” link in our footer shows it too. We do not show a pop-up or ask you to confirm. The signal does not switch off analytics; use the analytics switch above for that or, where we show a cookie banner, its preferences dialog.

Your other privacy rights

Depending on where you live, you may also have the right to know what personal information we collect and how we use it, to access a copy of it, to correct it and to delete it. To exercise any of these rights, email us at help@vochlea.co.uk. You may also use an authorised agent to submit a request on your behalf; we may ask for proof that the agent is authorised and, for some requests, take reasonable steps to verify your identity before we act. If we decline your request you can appeal, and we will decide your appeal within 45 days. We do not use sensitive personal information beyond the purposes the law permits, so there is no separate choice to limit it.

We won’t discriminate against you

Exercising any of these rights is free, and we will not discriminate against you for doing so. Opting out will not change the price you pay or the quality of the products and service you receive from us.

Contact us

If you have any questions about your privacy choices or how we handle your personal information, contact us at help@vochlea.co.uk. For full details of how we collect, use and share personal information, please read our Privacy Policy.