This notice covers the Evoogen company website, its articles and its enquiry form. Our applications have separate app privacy information.
Who is responsible
Evoogen Ltd is the controller of the information described here. We are registered in England and Wales, company number 17253621, at 5 Brayford Square, London E1 0SG, United Kingdom. Contact support@evoogen.com with a privacy question or request.
When you send an enquiry
We collect the email address and task description you provide, the originating page and, where relevant, the article title. We also keep a submission identifier, receipt time and delivery status so we can handle the request and avoid duplicate messages. We use this information to respond and discuss potential work. An enquiry does not subscribe you to a newsletter.
Providing these details is your choice. We need an email address to reply and enough information to understand the task. Please do not include passwords, payment details or sensitive customer records.
Our reasons for using information
Our basis for handling general business enquiries is our legitimate interest in responding to requests and managing prospective client relationships. We also have a legitimate interest in protecting the website and preventing abuse. Where information is necessary to take steps you request before a contract with you, or to perform that contract, we rely on that contractual purpose. Optional analytics rely on your consent.
Optional analytics and your choice
Analytics remain off unless you accept them. With your consent, we record the page and article, the referring website’s hostname, approximate active reading time, a reading-engagement event, contact-button interactions, form starts and successful submissions. These help us improve the guides and understand how people find our services.
A random identifier groups events on one loaded page; it is not a persistent identifier following you across pages. If you submit an enquiry while analytics are enabled, that identifier links the enquiry to its page interactions. Analytics events contain no email address, message text or raw IP address, but this consented link means the underlying records are not fully anonymous.
Our reports show totals rather than enquiry content. Analytics totals cover participating page views, not unique people. We also count received enquiries, including those sent without analytics consent, to manage business activity. Declining analytics does not prevent you from contacting us.
You can withdraw consent through “Analytics preferences” in the footer. This stops new optional events; it does not automatically erase events already received or affect the lawfulness of earlier processing. Contact us about a deletion request.
Browser storage and security
We store your analytics choice in your browser’s local storage until you change it or clear that storage. A functional session-storage flag remembers whether an invitation appeared or an enquiry was sent, so we do not repeatedly interrupt you. These pages do not use advertising cookies.
Hosting and delivery services receive technical request information needed to serve the site. Our abuse controls use hashed rate-limit identifiers derived from request information, including an IP address where available. The rate-limit database does not store that raw address. Provider infrastructure may separately maintain technical logs.
Service providers and international processing
Google Firebase hosts the website. Supabase processes and stores website enquiries and analytics; our project’s database region is London (eu-west-2). Resend delivers enquiry emails to our support mailbox. Authorised people handling enquiries and these service providers receive the information needed for their work.
A London database does not mean all processing stays in the UK. Providers use international infrastructure and subprocessors; Resend identifies the United States as its primary processing location. Their published processing terms set out transfer safeguards, including standard contractual clauses and applicable UK provisions. See Google Firebase’s transfer terms, Supabase’s data processing addendum and Resend’s data processing addendum. Contact us for further information about the arrangements relevant to your data.
How long we keep it
Scheduled cleanup applies the following periods to our website database:
- Analytics events: deletion after 90 days.
- Hashed security rate-limit records: expiry after 24 hours, followed by cleanup.
- Enquiry records: deletion after 12 months unless needed for ongoing work.
Information retained for ongoing work is reviewed against that need. Separate email correspondence and business records are kept as needed to handle the conversation, manage agreed work or meet applicable record-keeping requirements. Provider service logs and backups follow their own operational retention arrangements; the database cleanup does not delete every copy instantly.
Your rights and concerns
Depending on the circumstances and applicable law, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. You can withdraw analytics consent at any time. Email support@evoogen.com to exercise a right or raise a concern.
You can also complain to the UK Information Commissioner’s Office or another relevant data protection authority. We do not use this website’s enquiry or analytics records to make decisions with legal or similarly significant effects on you by automated means.
Other websites
Links in our articles lead to independent websites with their own privacy practices. We update this notice when our website’s handling of information changes.