1. Scope and who we are
This notice applies to Envelaro’s public website, account registration, contact form, customer portal, and related communications. Customer mailbox content and other data processed on a customer’s instructions are also governed by the Service Terms and Data Processing Addendum.
Envelaro is the controller of account, billing, website, and business-contact data used to operate the service. For customer content, Envelaro generally acts as the customer’s processor or service provider. Privacy requests can be submitted through our contact page.
2. Information we collect
- Information you submit: name, work email, company, team size, current email provider, and the content of your enquiry. Campaign labels (source, medium, campaign, content and term) and the landing-page path may accompany an enquiry so we can understand how you found us. They are retained with the enquiry; they are held only in memory during public-site navigation, not in persistent advertising storage.
- Account and organisation data: administrator and user profiles, roles, verified domains, mailbox addresses, configuration, entitlements, and consent records.
- Customer content: messages, attachments, contacts, calendars, tasks, files, and related metadata processed to provide customer-enabled features.
- Billing data: plan, order, tax location, invoice, subscription, payment status, and processor references. Envelaro does not store full payment-card numbers in its application databases.
- Integration data: provider identifiers, authorisations, configuration, and activity needed for a customer-selected DNS, storage, identity, or communication integration.
- Consent records: the notice version accepted, submission time, and related confirmation data.
- Technical and security data: IP address, browser and device information, request timestamps, error records, and signals used to prevent spam, abuse, or automated submissions.
- Correspondence: messages and follow-up communications you exchange with us.
3. How and why we use information
- To respond to enquiries and discuss Envelaro services.
- To create accounts, verify organisations and domains, provision requested features, process subscriptions, and provide customer support.
- To route and store customer communications and content according to authorised user actions and customer configuration.
- To send service and product communications when you have asked us to contact you.
- To understand customer needs and improve our services.
- To secure the website, prevent abuse, diagnose faults, and maintain audit records.
- To comply with applicable legal obligations and establish, exercise, or defend legal claims.
Depending on applicable law, these activities rely on consent, steps requested before entering a contract, legitimate interests in operating and securing the website, or legal obligations. You may withdraw consent at any time.
5. International transfers
Our providers may process information in countries other than your own. Where applicable law requires it, we use recognised transfer mechanisms and contractual safeguards, and assess the protections available for the transfer.
6. Retention
We keep enquiry and account data only while it remains useful for the purpose described above, while we have an active relationship with you, or as needed for legal, billing, fraud-prevention, and security obligations. We periodically review records and delete or anonymise information that is no longer required.
The Data Lifecycle and Export Policy describes customer-content export, active-system deletion, and backup expiry after service ends. A signed order or applicable law may require a different period.
You may ask us to delete your enquiry record at any time. Some limited information may be retained where required for security, legal compliance, dispute resolution, or to record an opt-out.
7. Your choices and rights
- Ask whether we process your personal data and request a copy.
- Request correction, deletion, restriction, or portability where applicable.
- Object to certain processing or withdraw consent without affecting earlier lawful processing.
- Unsubscribe from product communications or ask us not to contact you.
- Complain to the data-protection authority available in your jurisdiction.
We may need to verify your identity before completing a request. Applicable rights and exceptions depend on your location.
8. Children
The website and contact form are intended for business users aged 18 or older. We do not knowingly collect personal data from children.
9. Security and changes
We use administrative, technical, and organisational measures proportionate to the website’s current risk. No online system is completely secure, and we cannot guarantee absolute security.
We may update this notice as the product, providers, or applicable requirements change. The date shown above identifies the current version. Material changes will be highlighted on this page or communicated where appropriate.
10. Information sources and sensitive data
We receive most personal data directly from you. We may also use public company websites, professional directories, or information supplied by a colleague when verifying an organisation, preparing a response, or preventing fraud.
The public website is not designed to collect special-category or highly sensitive personal data. Please do not submit passwords, mailbox contents, payment-card details, government identifiers, health information, or similar data unless we have specifically requested it through an appropriate secure channel.
11. Communications and marketing
We may send messages needed to respond to an enquiry or manage a requested relationship. We send optional product news or marketing only where permitted by law and provide a clear way to opt out.
Opting out of marketing does not prevent us from replying to an active request or sending necessary service, security, legal, or administrative notices. We may retain a minimal suppression record so we can respect your choice.
12. Automated decisions
We do not use information collected through the public website to make decisions that produce legal or similarly significant effects solely by automated means.
Security services may automatically assess request, browser, device, and network signals to identify spam or abuse. A blocked form submission does not determine eligibility for a paid Envelaro service; you may contact us through another published channel if you believe a security control acted incorrectly.
13. How we handle privacy requests
Submit a request through our contact page and describe the right you want to exercise. We will acknowledge the request, verify identity where reasonably necessary, and respond within the period required by applicable law.
If we cannot fulfil all or part of a request, we will explain the reason where the law permits. Authorised agents may submit a request on another person's behalf, but we may ask for evidence of that authority and direct identity confirmation.
Privacy requests are handled without charge unless a request is manifestly unfounded, excessive, or repetitive and applicable law allows a reasonable fee or refusal.
Contact
Questions, rights requests, or abuse reports can be submitted through our contact page. Please do not include passwords, mailbox contents, or unnecessary sensitive information.