Privacy
We keep this simple and collect as little as we can.
Who we are
Spoken Massage is operated by Voll Studios Ltd (company no. 09302803, registered office 5 Brayford Square, London, E1 0SG), the data controller for the information described here. Email hello@spokenmassage.com with any privacy question.
What we store
- Your email address, so we can send your downloads and, if you ask, launch news.
- What you bought, so you can re-download it later.
- Basic technical details (your browser type and the network address your request came from) to prevent abuse.
Cookies and analytics
We ask before setting any analytics cookie, and nothing is loaded until you accept. You can change your answer at any time with the Cookies link in the footer, which brings the question back and stops analytics straight away.
- Necessary, no consent needed. Your basket and your cookie answer are kept in your browser’s local storage, not in a cookie, and never leave your device. Stripe sets its own cookies during payment to prevent fraud.
- Analytics, only if you accept. Google Analytics 4 sets two cookies,
_gaand one starting_ga_, which tell repeat visits apart. They last up to two years. We use them to see which pages people find useful. Advertising features, ad personalisation and Google Signals are all switched off. - Visit counts, no cookies. Vercel Web Analytics and Speed Insights count page views and measure loading speed without cookies and without identifying you.
We also record our own page views and button clicks in our database. That record holds the page, the event and your browser type. It does not hold the network address the request came from. No cookie is involved and nothing is shared with anyone else.
Decline and none of the Google cookies are set. If you accept and later change your mind, we delete them and stop sending data.
Payments
Card payments are handled by Stripe. We never see or store your card details.
Who processes your data for us
We use a small number of trusted providers to run the store, and share only what each needs:
- Stripe, for payment processing.
- Resend, for sending your download and account emails.
- Supabase, the database that stores your email, orders, and download entitlements.
- Vercel, for hosting the website and for privacy-friendly visit counts that use no cookies.
- Google Analytics, for measuring how the site is used. Only if you accept cookies.
Some of these providers process data outside the UK/EU. Where they do, that transfer is covered by appropriate safeguards (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses).
How long we keep it
We keep your purchase and download records for six years after the end of the financial year they fall in, which is the period HMRC requires for tax and accounting records, and which also keeps your downloads available to you for that long. Google Analytics data is deleted after 14 months. Our own record of page views and button clicks keeps your browser type for 90 days, after which it is removed automatically; what is left is anonymous and is deleted after 14 months. Records written before 9 September 2026 also held a network address, and it is removed on the same 90-day schedule. Marketing sign-ups are kept until you unsubscribe, after which we keep only the fact that you opted out, so we do not email you again by mistake.
Transactional emails (your downloads) are sent via Resend. Marketing emails are opt-in only, and every one has an unsubscribe link.
Your rights
You can ask us what we hold about you, correct it, or have it deleted. Email hello@spokenmassage.com and we will take care of it. If you are unhappy with how we handle your data, you can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
We do not sell your data.