Privacy Policy

This Privacy Policy explains how Evology Ltd collects, uses, stores, and protects personal data when you visit or use our website. We are committed to handling your personal data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as updated by the Data (Use and Access) Act 2025.

About Us

Evology Ltd (company number 13074938) is registered in England and Wales with its registered office at 124 City Road, London, EC1V 2NX. We are the data controller responsible for your personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: commercial@evology.co.uk
Post: Evology Ltd, 124 City Road, London, EC1V 2NX

What Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data:

  • Identity data: your name
  • Contact data: email address, phone number, postal address, and postcode
  • Technical data: IP address, browser type and version, pages accessed, and time of access
  • Usage data: information about how you use our website, including behavioural and analytics data
  • Communications data: any information you provide when contacting us via forms or email

We will not collect, store, or process special category (sensitive) data as defined under Article 9 of the UK GDPR unless we have an explicit lawful basis to do so and have informed you accordingly.

Lawful Basis for Processing

Under the UK GDPR and the Data (Use and Access) Act 2025, we rely on the following lawful bases for processing your personal data:

  • Contract: where processing is necessary to respond to an enquiry or fulfil an obligation arising from a contract with you
  • Legal obligation: where we are required to process data to comply with a legal requirement
  • Legitimate interests: for website security, fraud prevention, improving our services, and B2B marketing analytics, where your interests and rights do not override ours
  • Consent: where we have obtained your specific, informed, and freely given consent for example, for non-essential cookies or direct marketing emails

Where we rely on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

  • To respond to enquiries and provide our services
  • To maintain internal records and manage our business relationship with you
  • To improve and personalise our website and services
  • To send you promotional communications about our products or services, where you have consented or we have a legitimate interest in doing so
  • To contact you for market research purposes, where appropriate
  • To detect and prevent fraud, hacking attempts, and unauthorised access to our systems
  • To comply with legal and regulatory obligations

We will not use your personal data for any purpose that is incompatible with the purposes described in this policy without first notifying you.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device by your browser when you visit a website.

Types of cookies we may use

Essential cookies

Essential cookies are required for the website to function properly.

These may be used for purposes such as:

  • enabling core website functionality
  • maintaining website security
  • remembering cookie notice preferences
  • supporting contact forms and other basic website features

These cookies are usually necessary and cannot be disabled through the website itself.

Analytics cookies

Analytics cookies help us understand how visitors interact with our website, including which pages are visited, how users move around the site, and how the website is performing.

Where analytics tools are used, the information helps us improve our website and services.

Marketing and tracking cookies

Marketing and tracking cookies may be used to understand visitor activity on our website and to help us assess the effectiveness of our marketing.

Third-party cookies

Some cookies may be set by third-party services used on our website, such as analytics, tracking, security, spam prevention, embedded content, or other website functionality.

These third parties may process information in accordance with their own privacy and cookie policies. We recommend reviewing the privacy policies of any third-party services you interact with.

For more information, please see our Cookie Policy.

Third-Party Analytics and Tracking Tools

We use the following third-party tools to analyse website usage:

  • Google Analytics: collects statistical information about website use via cookies. Google stores and processes this information in accordance with its own privacy policy. For more information, visit: https://policies.google.com/privacy

How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. Our general retention approach is as follows:

  • Enquiry and contact data: retained for up to 3 years from last contact, or for the duration of any ongoing business relationship
  • Website analytics and technical data: retained for up to 26 months, in line with Google Analytics default settings
  • Legal and compliance records: retained for up to 7 years in accordance with statutory requirements

We review our retention schedules regularly and securely delete or anonymise data that is no longer required.

Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or alteration. These include password-protected and firewall-protected servers, access controls, and regular security reviews.

Please be aware that no method of transmission over the internet is completely secure. Whilst we take all reasonable precautions, we cannot guarantee the absolute security of data transmitted to or from our website.

Disclosure of Your Personal Data

We may share your personal data with the following categories of recipients, where necessary and on a need-to-know basis:

  • Our employees, officers, and agents who need access to fulfil their responsibilities
  • Trusted third-party service providers and subcontractors who process data on our behalf under written data processing agreements
  • Regulatory authorities or law enforcement agencies where required by law
  • Any party to whom disclosure is necessary to establish, exercise, or defend legal rights

We do not sell your personal data to third parties. We will not share your personal data for third-party marketing purposes without your explicit consent.

International Data Transfers

Some of our third-party service providers (such as Google Analytics) may process personal data outside the UK. Where such transfers occur, we ensure they are protected by appropriate safeguards in accordance with Chapter 5 of the UK GDPR, such as adequacy decisions or standard contractual clauses.

Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • The right to be informed about how your data is used (this policy fulfils that obligation)
  • The right of access: to request a copy of the personal data we hold about you
  • The right to rectification: to request correction of inaccurate or incomplete data
  • The right to erasure (‘right to be forgotten’): to request deletion of your data in certain circumstances
  • The right to restrict processing: to request that we limit how we use your data
  • The right to data portability: to receive your data in a structured, machine-readable format
  • The right to object: to object to processing based on legitimate interests or for direct marketing
  • Rights in relation to automated decision-making and profiling

To exercise any of these rights, please contact us at commercial@evology.co.uk or write to us at our registered address above. We will respond to your request without undue delay and within one month of receipt.

Subject access requests are provided free of charge in the vast majority of cases. We may charge a reasonable administrative fee only where a request is manifestly unfounded, excessive, or repetitive, in accordance with Article 12(5) of the UK GDPR.

Direct Marketing

Where we contact you for marketing purposes, we will always provide you with a clear opportunity to opt out. You may unsubscribe from marketing communications at any time by:

  • Clicking the unsubscribe link in any marketing email we send
  • Emailing us at commercial@evology.co.uk
  • Writing to us at our registered address

Opting out of marketing will not affect any other communications relating to your enquiry or our contractual relationship.

Links to Third-Party Websites

Our website may contain links to third-party websites for your convenience. We do not control those websites and are not responsible for their content, availability, privacy practices, or security. We encourage you to review the privacy policy of any third-party website you visit.

Complaints and the ICO

If you have concerns about how we handle your personal data, please contact us in the first instance at commercial@evology.co.uk and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection matters:

  • Website: https://ico.org.uk
  • Helpline: 0303 123 1113

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, or our business practices. We will post any updated version on this page with a revised ‘Last Updated’ date. We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you directly.

Policy last updated: April 2026