LEGAL
PRIVACY POLICY
Last updated: April 2026
WHAT WE COLLECT
When you place an order, we collect your name, email address, shipping address, and payment details. Payment data is processed by Stripe — we never see or store your card number.
When you use our contact form, we collect your name, email, and message content.
We collect standard website analytics (page views, referrers, device type) via Vercel Analytics. No personally identifiable information is stored in analytics.
HOW WE USE IT
Your data is used solely to process and fulfil your order, send order confirmation and shipping updates, respond to your enquiries, and improve the website.
We do not sell, rent, or share your data with third parties for marketing purposes.
THIRD-PARTY PROCESSORS
Each processor operates under their own privacy policy and GDPR-compliant data processing agreements.
COOKIES
We use the following cookies:
Remembers your cart between sessions
Remembers your language and currency preference
Fraud prevention during payment
Anonymous page view data
DATA RETENTION
Order data is retained for 7 years in line with UK accounting and tax requirements. You may request deletion of your personal data outside of legally required records at any time.
YOUR RIGHTS
Under GDPR and the UK Data Protection Act 2018, you have the right to access, correct, or erase your personal data. To exercise any of these rights, email us at:
hello@envol.artWe will respond within 30 days.
SOCIAL MEDIA PUBLISHING APPS
ENVOL operates first-party publishing applications registered with TikTok, Meta and Pinterest to publish brand-owned content from our admin dashboard at www.envol.art/admin to our public social media accounts.
TikTok — "envol" app (App ID 1561340)
The envol application registered with TikTok for Developers is used solely by ENVOL's brand operator to publish brand-owned video content (artwork reveals, product walkthroughs) from www.envol.art/admin to ENVOL's public TikTok account @envol.art. We use the following TikTok scopes:
- user.info.basic — confirms the connected TikTok account belongs to ENVOL before any publish action
- video.upload — uploads brand-owned MP4 video files to TikTok
- video.publish — publishes the uploaded videos to @envol.art with caption and hashtags
We do not collect, store or process data from any TikTok user other than the ENVOL brand account itself. No end-user TikTok data is read or retained. The integration is web-only; we do not use TikTok Share Kit or any mobile-only product.
Instagram — Meta Graph API
The ENVOL admin app uses Meta's Instagram Graph API to publish brand-owned imagery to our public Instagram account @envol.art. Only the ENVOL business account is accessed.
Pinterest — ENVOL Publisher app
The ENVOL Publisher application uses the Pinterest API v5 to publish brand-owned pins to our public Pinterest account EnvolArt1. Scopes used: pins:write, pins:read, boards:write, boards:read, user_accounts:read. Only the ENVOL brand account is accessed.
EMAIL MARKETING
ENVOL uses MailerLite (UAB "MailerLite", Paupio g. 46, Vilnius, Lithuania) to manage email subscriptions and send marketing communications. MailerLite is GDPR-compliant and processes subscriber data on servers within the European Union.
When you subscribe via our website, we collect your email address only. We use this to send you new destination announcements and occasional offers. We never sell or share your data with third parties for marketing purposes.
You may unsubscribe at any time via the link in any email we send. To request access, correction, or deletion of your data, contact us at hello@envol.art.
mailerlite.com/legal/privacy-policyJURISDICTION
ENVOL operates under UK law. This policy is governed by the UK GDPR and the Data Protection Act 2018.