Privacy Policy

1 .Overview

VTOA Ltd (trading as Valatoa) (“Valatoa”, “we”, “us”, or “our”) is a UK-based B2B software provider offering valuation and business analysis tools to professional investors and advisors.

This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our website, valuation software, and related services (collectively, the “Services”).

We are committed to handling personal data responsibly, lawfully, and transparently in accordance with applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and, where applicable, the EU GDPR.

2. Who this policy applies to

This policy applies to:

Clients – investors or advisors who subscribe to Valatoa’s valuation software
Business owners – individuals who complete valuation questionnaires at the request of a Valatoa client
Website visitors – visitors to www.valatoa.com

Valatoa does not provide consumer services and does not market directly to individual consumers.

3. Roles under data protection law

Depending on the context, Valatoa acts as:

Data Controller for:
- Website visitor data
- Client (investor/advisor) account information
Data Processor for:
- Business owner data submitted through valuation questionnaires on behalf of a client

Clients remain responsible for ensuring they have a lawful basis to invite business owners to complete valuation questionnaires.

4. Information we collect

4.1 Information provided directly

Through the valuation questionnaire and client accounts, we may collect:

Names and email addresses
Business financial information (e.g. revenue, costs, forecasts)
Free-text responses relating to business operations
Limited personal data relating to founders, directors, or employees

Completion of the questionnaire is voluntary, but required for valuation analysis.

4.2 Automatically collected data (website only)

When visiting our website, we may automatically collect limited technical data such as:

IP address
Browser type and operating system
Pages visited and access times

This data is used for site functionality and security only.

5. How we use information

Valatoa uses personal data strictly to:

Provide valuation software and reports to clients
Generate valuation analyses and reports
Maintain and administer client accounts
Ensure platform security and integrity
Comply with legal and regulatory obligations

We do not:

Use questionnaire data for marketing
Sell personal data
Share questionnaire data with advertisers, investors, or analytics providers
Use client or business owner data to train AI models

6. Access to data

Only authorised Valatoa employees have access to questionnaire and report data
Clients can access valuation outputs relating to businesses they have invited
Business owners can access valuation reports once shared by the client

All access is role-restricted and logged.

7. Sharing of information

We may share data only in the following limited circumstances:

7.1 Service Providers
We use trusted third-party service providers (such as website hosting providers) solely to operate and maintain our Services. These providers act under contractual confidentiality and data protection obligations.

7.2 Legal requirements

We may disclose information if required to do so by law, regulation, or valid legal process.

We do not share data for advertising, marketing, or unrelated analytics purposes.

8. International data transfers

Valatoa is based in the United Kingdom. Our hosting providers may process data outside the UK or EU, including in the United States.

Where international transfers occur, we rely on appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

9. Data retention

We retain personal data:

For as long as a client account remains active
As necessary to provide valuation services
For legal, accounting, or compliance purposes where required

Data is deleted or anonymised upon request, subject to legal obligations.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, and secure hosting environments.

While no system can be guaranteed 100% secure, Valatoa takes data protection seriously and responds promptly to any suspected data incidents.

In the event of a data breach affecting personal data, we will assess the risk and notify affected parties and authorities where required by law.

11. Your rights

Individuals have rights under data protection law, including the right to:

Access their personal data
Request correction or deletion
Restrict or object to processing
Request data portability
Withdraw consent where applicable

Requests can be made by contacting: contact@valatoa.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

12. Cookies

Our website uses essential cookies required for functionality. We do not use valuation questionnaire data in analytics, marketing, or tracking tools.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be available on our website and identified by its effective date.

14. Contact us

If you have questions about this policy or how we handle data, please contact:

VTOA Ltd
London, United Kingdom

contact@valatoa.com

Effective Date: 15th Jan, 2026

Bug List