PRIVACY POLICY

WHAT WE COLLECT

When you place an order, we collect your name, email address, shipping address, and payment details. Payment data is processed by Stripe — we never see or store your card number.

When you use our contact form, we collect your name, email, and message content.

We collect standard website analytics (page views, referrers, device type) via Vercel Analytics. No personally identifiable information is stored in analytics.

HOW WE USE IT

Your data is used solely to process and fulfil your order, send order confirmation and shipping updates, respond to your enquiries, and improve the website.

We do not sell, rent, or share your data with third parties for marketing purposes.

THIRD-PARTY PROCESSORS

Each processor operates under their own privacy policy and GDPR-compliant data processing agreements.

COOKIES

We use the following cookies:

DATA RETENTION

Order data is retained for 7 years in line with UK accounting and tax requirements. You may request deletion of your personal data outside of legally required records at any time.

YOUR RIGHTS

Under GDPR and the UK Data Protection Act 2018, you have the right to access, correct, or erase your personal data. To exercise any of these rights, email us at:

We will respond within 30 days.

JURISDICTION

ENVOL operates under UK law. This policy is governed by the UK GDPR and the Data Protection Act 2018.