Privacy Notice — Volorai

Information we collect automatically

When you visit this website, our web server and application infrastructure automatically processes certain technical information as a necessary consequence of how the internet works. This includes:

IP address — your IP address is treated as personal data under UK GDPR. It is processed transiently on our server to derive a geographic region and to identify the organisation associated with your visit (see section below). The raw IP address is never written to any log, database, or third-party service; it is irreversibly hashed within our server process immediately upon receipt and only the hash is retained.
Browser and device type — we derive a coarse category from your browser's User-Agent header (e.g. "Chrome / desktop / Windows"). We do not attempt to construct a detailed device fingerprint.
Pages viewed — the path within our website that was visited (e.g. /services/audit/).
Referring page — the URL of the page you visited immediately before ours, if your browser supplies it.
Campaign parameters — standard UTM query-string parameters (source, medium, campaign, term, content) if present in the URL.

We do not use cookies, browser local storage, device fingerprinting, or any other persistent client-side identifier for this purpose. Each daily hash is computationally independent — we cannot link visits across calendar days.

The lawful basis for this processing is our legitimate interests (Art. 6(1)(f) UK GDPR) in operating a functioning website and in understanding the aggregate volume and nature of traffic to our services.

Identifying organisations that visit our site

We use reputable IP-intelligence services (IPinfo and Leadinfo) to identify the organisation or business network associated with a visit. The purpose is to understand which types of businesses engage with our services so that we can improve our content, prioritise our outreach, and make our sales and marketing activity more relevant. We identify organisations only — never individuals.

The way this works in practice:

Server-side (IPinfo): your IP address is sent over an encrypted connection to IPinfo solely to retrieve the associated organisation name, domain, network type (e.g. business, residential ISP, mobile), country, and region. We receive back a company-level record, not any data about you as an individual.
In your browser (Leadinfo): we also use Leadinfo (Leadinfo B.V.), a European business-to-business visitor-identification service. A small cookieless script on our pages transmits your IP address and the page URL to Leadinfo (hosted exclusively in the EU — Ireland and Frankfurt) to match the IP to an organisation in its company database. Leadinfo identifies organisations only, sets no cookie, does not fingerprint your device, and processes data under its own privacy notice at leadinfo.com.
We never store your raw IP address. Our identification providers (IPinfo and Leadinfo) receive it solely to perform the organisation lookup and process it under their own privacy notices.
The organisation-level record (name, domain, approximate location) may be forwarded to our internal customer-relationship management system for commercial follow-up. If Volorai contacts your organisation as a result of a visit, we do so at the organisational level and in a manner consistent with our obligations under UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

The lawful basis for this processing is our legitimate interests (Art. 6(1)(f) UK GDPR) in understanding which businesses engage with our website and in conducting business-to-business marketing. We have assessed that this interest is not overridden by your rights and freedoms because: (a) the processing is limited to organisations, not individuals; (b) no cookie or persistent identifier is used; (c) the raw IP is never retained; and (d) you can object at any time (see below).

Your right to object: You have the right to object to processing based on legitimate interests at any time. To do so, please contact us at [email protected] or use the contact form. We will stop processing within one calendar month of receipt of a valid objection.

Contact forms and enquiries

When you submit an enquiry via our contact form or AI readiness assessment, we collect the information you provide (name, work email, company, and message or assessment result). This is processed on the basis of your consent (Art. 6(1)(a) UK GDPR) and is used solely to respond to your enquiry and, with your knowledge, to record your interest in our services. We use Postmark (ActiveCampaign, Inc.) to deliver notification emails.

Cookies and analytics

This website uses Google Analytics 4 in a cookieless configuration (client_storage: 'none', anonymize_ip: true, Google Signals disabled). No persistent cookie is set by Google Analytics on this site.

Our business-identification provider Leadinfo also operates without cookies — it identifies organisations from the IP address alone and stores nothing on your device. We therefore use no cookies, and the site continues to operate without a consent banner.

Data retention

Daily-rotating visit hashes are retained for up to 90 days and then deleted. Enquiry submissions are retained for up to two years or until the enquiry is concluded, whichever is sooner. We review and delete stale data on a rolling basis.

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, or port personal data we hold about you, the right to object to processing based on legitimate interests, and the right to withdraw consent where that is the lawful basis. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, contact [email protected].

Changes to this notice

We may update this notice from time to time. The date at the foot of every page reflects the last time any content on the site was updated; material changes to this notice will be noted here explicitly.

Last reviewed: June 2026 — Leadinfo added as a cookieless, company-level visitor-identification provider.