Privacy Policy
What this covers
This notice explains how we collect and use personal data when you use this website or contact us. It applies to visitors and enquirers in the UK and, where UK GDPR / GDPR applies, to those individuals. Data controller: Envoy (a general partnership).
What we collect
Contact and enquiry data: name, email address, and anything you include in messages when you use our contact form or email us.
Technical data: IP address, browser type, and similar data sent by your device and recorded in server or security logs when you browse the site.
Why we use it and lawful bases
To respond to your enquiry and manage our relationship we rely on legitimate interests (and, where relevant, pre-contract steps at your request).
Where you tick a consent box (e.g. confirming you have read this notice alongside your enquiry), we rely on that consent where required.
To operate, secure, and improve the site we rely on legitimate interests (e.g. preventing abuse).
Retention
We keep enquiry and related correspondence only as long as needed for those purposes and ordinary business records, and longer if the law requires.
Who sees your data
We use trusted service providers (e.g. website hosting and email delivery) who process data on our instructions. We do not sell your personal data.
International transfers
If personal data is processed outside the UK/EEA, we ensure appropriate safeguards (e.g. UK IDTA / adequacy / SCCs) as required by applicable law.
Your rights
Subject to exemptions, you may have rights to access, rectify, erase, restrict processing, data portability, and to object. You may withdraw consent where we rely on it. You can complain to the UK ICO (ico.org.uk).