Privacy Policy.

The short version: we collect only what we need to reply to you, send the newsletter you asked for and see which articles help. We never sell your data, and you can see, correct or delete it at any time.

Last updated

Who we are

Voomplaa (“we”, “us”) runs the website at voomplaa.com. We are responsible for the personal data described in this policy. You can reach us about anything in it at [email protected].

This policy is written to meet the EU and UK General Data Protection Regulation (GDPR), India’s Digital Personal Data Protection Act 2023 (DPDP Act), and US state privacy laws including the California Consumer Privacy Act as amended by the CPRA (CCPA).

What we collect and why

We only collect what we need for the purposes below.

  • Contact form and email. Your name, email address, the subject you choose and your message. We use them to reply to you and to handle your request.
  • Newsletter. Your email address, stored on our website so we can send you the newsletter you signed up for.
  • Comments. The name, email address and website you enter, your comment, and your IP address and browser details, which help us detect spam. Your email address is never shown publicly.
  • Guest contributors. Your name, email address, short biography, and the drafts and messages you send us, so we can edit, publish and credit your work.
  • Analytics. We use Google Analytics to understand which articles are useful. If you accept analytics cookies, it records the pages you visit, how you arrived, your device and browser type, and an approximate location derived from your IP address. If you don’t, it sets no cookies and receives only limited signals, such as that a page was viewed, which cannot be linked to you.
  • Server logs. Our hosting provider automatically records IP addresses, browser details and the pages requested. These logs keep the site secure and working.

We do not ask for sensitive information such as health, financial or identity documents. Please don’t include it in messages.

Cookies

Cookies are small files stored by your browser. We use:

  • Your cookie choice (newstheme_cookie_consent): remembers whether you accepted or rejected optional cookies. Lasts one year.
  • Analytics (_ga, _ga_*): set by Google Analytics only after you accept analytics cookies, to tell visits apart. Last up to two years.
  • Comments: if you tick the box when commenting, your name, email and website are saved so you don’t have to type them again. Last one year.
  • Sign-in: only for editors and contributors who log in. Last up to two weeks.

You can change your choice at any time with Cookie settings at the bottom of every page, or by clearing cookies in your browser.

Under the GDPR we rely on:

  • Consent for analytics cookies and the newsletter. You can withdraw it at any time.
  • Legitimate interests for replying to messages, moderating comments, and keeping the site secure.
  • Contract for working with guest contributors.
  • Legal obligation where a law requires us to keep or disclose information.

Under the DPDP Act, we process your personal data on the basis of the consent you give when you submit a form, subscribe, comment or accept cookies, and for the legitimate uses the Act allows.

Who we share it with

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We only share it with:

  • Service providers who run parts of the site for us: our web host, our email provider, and Google (Analytics). They may only use the data to provide their service to us.
  • Gravatar (Automattic): when you comment, a scrambled version of your email address may be checked against Gravatar to show your profile picture.
  • Authorities, when the law requires it, or to protect our rights or someone’s safety.

Articles may embed content such as videos from other websites. Those sites can collect data about you as if you had visited them directly.

International transfers

Some of our providers process data outside your country, including in the United States. Where data leaves the EU, UK or India, we rely on safeguards recognised by those laws, such as adequacy decisions, the EU–US Data Privacy Framework, or standard contractual clauses.

How long we keep it

  • Contact messages: until your request is resolved, and no longer than 24 months.
  • Newsletter: until you unsubscribe or ask us to remove you.
  • Comments: for as long as the comment stays published.
  • Contributor records: for as long as your articles are published, plus any period the law requires.
  • Analytics: 14 months in Google Analytics.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, correct it, or delete it. Depending on where you live, you also have these rights:

  • EU and UK: access, correction, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent. You can complain to your local data protection authority (in the UK, the Information Commissioner’s Office).
  • India: a summary of your personal data and how it is processed, correction, completion, updating and erasure, grievance redressal, and nominating someone to exercise your rights if you die or become unable to. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
  • United States: under the CCPA and similar state laws, the right to know what we collect and how we use it, to correct and delete it, and to opt out of its sale or sharing (we do neither). We will not treat you differently for using these rights.

How to make a request

Email [email protected] or use our contact form and choose “Privacy request”. We may ask you to confirm your identity before we act. We reply within one month, or within 45 days for California requests, and tell you if we need longer and why.

Grievances under the DPDP Act go to the same address, which is monitored by the person responsible for data protection at Voomplaa.

Security

We use HTTPS across the site, limit who can access personal data, and keep our software up to date. No website can promise perfect security, so please tell us straight away if you think your data has been put at risk.

Children

Voomplaa is written for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of the page. If a change significantly affects how we use your data, we will say so on the site before it takes effect.