Privacy Policy

Sketches Int Ltd ("we", "us", "our") operates VoucherMaker at vouchermaker.io. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with the website and platform (the "Service").

Related documents: Terms of Service, Data Processing Agreement, and Refund Policy.

1. Controller and processor roles

Controller (account and platform data): Sketches Int Ltd
Address: Unit D4, Braintree Industrial Estate, Braintree Road, South Ruislip, London, HA40EJ, United Kingdom
Email: hello@vouchermaker.io

When a business customer uploads recipient contact details or instructs us to send voucher emails, that business is the controller of those recipient records. We act as processor for that processing under our DPA.

2. Personal data we collect

• Account data: name, email address, authentication identifiers (including Google account identifiers where Sign-In is used), business details, and password credentials where set
• Campaign data: designs, settings, redemption records, and analytics
• AI design inputs (only if you use Create with AI): brief answers, offer/headline text, optional brand logo, and related instructions you submit to generate concepts
• Recipient data (uploaded or selected by you): email addresses, optional names, and send status metadata
• Team and location data: staff names, branch details, and validation PIN assignments
• Billing data: transaction and invoice records (card data is handled by our payment provider and is not stored by us in full)
• Delivery data: shipping addresses for print fulfilment orders
• Technical data: IP address, device/browser information, logs, and security events
• Support communications and compliance acknowledgements (for example, lawful-use confirmations for email lists)

3. Purposes of processing

We process personal data to:

• provide, operate, secure, and improve the Service;
• authenticate users (including via Google Sign-In where enabled);
• generate vouchers, process payments, and fulfil print or digital delivery;
• where you use Create with AI, send your design brief and submitted brand assets to our AI provider to generate design concepts;
• send service emails to account holders;
• send voucher emails to recipients only on the business customer’s instruction;
• prevent fraud and misuse; and
• comply with legal obligations.

We do not use recipient lists uploaded by business customers for VoucherMaker’s own marketing.

4. Legal bases

Depending on applicable law in United Kingdom and where you are located, we rely on one or more of: performance of a contract; legitimate interests in operating and securing the Service; legal obligation; and consent where required (including certain cookies or optional communications).

For recipient data you upload or send to, you determine the lawful basis as controller. We process that data on your instructions as processor.

5. Sharing and sub-processors

We do not sell personal data. We share data with service providers who assist in operating the Service, including categories such as:

• hosting and infrastructure providers;
• payment processors (for example, Stripe);
• email delivery providers (for example, Postmark);
• AI providers for Create with AI where you use that feature (currently OpenAI), which receive the brief and brand assets you submit for image/text generation — not your recipient email lists;
• identity and analytics providers where enabled (for example, Google Sign-In, Google Analytics, or advertising tags); and
• print production and fulfilment partners, where print delivery is ordered (including name and delivery address as required to complete the order).

We may disclose data where required by law or to protect rights, safety, and security. Further processor terms for customer recipient data are set out in the DPA.

6. International transfers

Personal data may be processed in United Kingdom and in other countries where we or our providers operate. Where required by applicable law, we use appropriate transfer safeguards.

7. Retention

We retain account and campaign data while your account is active and as needed for service delivery, dispute resolution, and legal compliance. Customer-group recipient data is retained while the group exists; deletion of a group removes member contacts from active storage, subject to residual copies on paid campaigns, logs, and backups retained for a limited period for delivery, support, and audit purposes.

8. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure. No method of transmission or storage is completely secure.

9. Your rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. Account holders may contact hello@vouchermaker.io. End recipients of voucher emails should contact the business that collected their details; we will assist that business as processor where appropriate.

You may also have the right to lodge a complaint with a competent data protection authority in your jurisdiction.

10. Cookies and similar technologies

We use essential cookies to operate authentication and security features. Where enabled, we may use analytics or advertising technologies. You can control non-essential cookies through browser settings and any consent tools we provide.

11. Children

The Service is intended for business users and is not directed to children. We do not knowingly collect personal data from children for platform accounts.

12. Changes

We may update this Privacy Policy from time to time. The current version will be published on this page with an updated date.

13. Contact

Privacy enquiries: Sketches Int Ltd, hello@vouchermaker.io, or our Contact page.