Last updated: 31 May 2026

This privacy notice applies between you, the User of this Website, and Enevol Ltd, the owner and provider of this Website. Enevol Ltd takes the privacy of your information very seriously. This privacy notice applies to our use of any and all Data collected by us, or provided by you, in relation to your use of the Website and our services.

1. Definitions and interpretation

In this privacy notice the following definitions are used:

• Data — collectively all information that you submit to Enevol Ltd via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
• Cookies — a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
• Data Protection Laws — the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable laws relating to the processing of personal data.
• UK GDPR — the retained EU law version of the General Data Protection Regulation (EU) 2016/679 as it forms part of the law of England and Wales.
• Enevol Ltd — a company incorporated in England and Wales with registered number 07131100 whose registered office is at 20-22 Wenlock Road, London, England, N1 7GU.
• Website — https://enevol.com/ and any sub-domains of this site.

In this privacy notice, unless the context requires a different interpretation: the singular includes the plural and vice versa; references to persons include firms, companies and other organisations; and "including" is understood to mean "including without limitation".

2. Scope of this privacy notice

This privacy notice applies only to the actions of Enevol Ltd and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website, including but not limited to any links we may provide to social media websites.

3. Data controller

Enevol Ltd is the "data controller". This means that Enevol Ltd determines the purposes for which, and the manner in which, your Data is processed.

4. Data we collect

We may collect the following Data, which includes personal Data, from you:

• name;
• contact information such as email address and telephone number;
• demographic information such as postcode, preferences and interests;
• IP address (collected automatically);
• web browser type and version (collected automatically);
• operating system (collected automatically);
• a list of URLs starting with a referring site, your activity on this Website, and the site you exit to (collected automatically);
• the content of messages you send to our website chat assistant or to us by email.

5. How we collect Data

We collect Data in the following ways:

• Data is given to you by us — for example when you contact us, register for our services, complete surveys, or elect to receive marketing communications;
• Data is received from other sources — for example from analytics providers such as Google;
• Data is collected automatically — for example details of your visits to the Website, and Data collected through cookies and similar technologies in line with your browser settings.

6. How we use your Data

We may use your Data for the following purposes:

• internal record keeping;
• responding to your enquiries and providing our services to you;
• transmission by email of marketing materials that may be of interest to you, where you have consented or where we are otherwise lawfully entitled to do so.

We rely on the following lawful bases for processing your Data:

• Consent — for sending you marketing communications by email, where required. You may withdraw your consent at any time.
• Performance of a contract — where you register for, or use, our services.
• Legitimate interests — for internal record keeping, responding to enquiries, and improving our Website and services, provided your interests and rights do not override ours.

Where we send marketing emails on the basis of a "soft opt-in", this applies only where you have previously engaged with us. For all other electronic marketing we will rely on your explicit consent, given by a clear affirmative action.

7. Automated processing and artificial intelligence

We use artificial intelligence tools, including Anthropic's Claude and related cloud infrastructure, to operate our website chat assistant, assist with responses to enquiries, and support our internal business administration. If you use our chat assistant or contact us, the content of your message and related technical information may be processed by these tools so that we can generate a draft response, classify or manage your enquiry, and provide our services.

Where AI providers process personal data on our behalf, we use them under written data-processing terms. They are not permitted to use your personal data for their own purposes or to train their models, except where we have separately told you and have a lawful basis to do so. We do not intentionally use your chat messages or enquiries to train our own AI models.

Please do not include unnecessary sensitive personal information in chat messages or enquiries. If you do provide sensitive information, we will use it only as needed to handle your enquiry, provide our services, or comply with law.

We do not use AI to make decisions about you that produce legal effects, or similarly significant effects, on a solely automated basis. Any meaningful decision about you or your enquiry is subject to human involvement.

8. Who we share your Data with

We may share your Data with the following groups of people for the purposes set out in this privacy notice:

• our employees, agents and professional advisers, where reasonably necessary;
• third-party service providers who provide services to us which require the processing of personal data, such as website operation and email delivery;
• AI and cloud technology providers (such as our AI model provider and our hosting provider) who process Data on our behalf as data processors, under written contracts and the safeguards described in this notice;
• relevant authorities, where required for the detection of crime or the collection of taxes or duties.

We will never sell your personal information, and we will never share it with other organisations for their own marketing purposes.

9. International transfers of your data

Some of the service providers we use to operate our Website, chat assistant, cloud hosting, analytics, email and internal business systems are based outside the United Kingdom, or use group companies and subprocessors outside the United Kingdom, including in the United States. This means your personal data may be transferred to, and processed in, countries outside the UK.

Where we make a restricted transfer of personal data outside the UK, we rely on appropriate safeguards under UK data protection law. These may include UK adequacy regulations, the UK's International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses. Where required, we also assess the risks of the transfer and use appropriate supplementary technical, contractual and organisational measures.

The main providers that may process your data outside the UK are:

• Anthropic group entities and subprocessors, including in the United States — provide the AI model services used by our website chat assistant and internal systems. Transfers are covered by Anthropic's Data Processing Addendum, Standard Contractual Clauses and UK Addendum where applicable.
• Railway Corporation, United States — provides cloud hosting for our website chat assistant and related applications. Transfers are covered by Railway's Data Processing Addendum, Standard Contractual Clauses and UK Addendum where applicable.
• Google (Google Analytics), contracting via Google Ireland Limited — provides website analytics. Transfers to the United States are covered by Google's Ads/Analytics Data Processing Terms, Standard Contractual Clauses and the UK Addendum, and Google's certification under the EU-US Data Privacy Framework (UK Extension).
• Automattic group companies, including WordPress.com and Automattic Inc. where applicable — provide hosting for our Website. Transfers outside the UK/EEA are covered by Automattic's applicable data-transfer safeguards, including Standard Contractual Clauses and UK-approved transfer arrangements where applicable.
• Resend (Plus Five Five, Inc.), United States — provides email delivery for enquiry responses and notifications. Transfers are covered by Resend's Data Processing Addendum, Standard Contractual Clauses and the UK Addendum, and Resend's certification under the EU-US Data Privacy Framework.

You can request details of the safeguards we rely on, or a copy of the relevant clauses, by emailing contact@enevol.com.

10. Where your personal information is held

Information may be held at our offices and those of our third-party service providers, representatives and agents as described above. Some of these third parties are located outside the UK; where this is the case, the safeguards in section 9 apply.

11. Keeping your Data secure

We have appropriate technical and organisational security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. These include access controls limited to those with a genuine business need, and the storage of your Data on secure servers.

We have procedures in place to deal with any suspected data security breach, and we will notify you and any applicable regulator of a suspected breach where we are legally required to do so. If you suspect any misuse or loss of, or unauthorised access to, your personal information, please let us know immediately by emailing contact@enevol.com.

12. How long we keep your Data

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy notice, or until you request that the Data be deleted.

In particular:

• Website chat transcripts and general enquiry correspondence — retained for up to 12 months from your last contact, unless your enquiry leads to an ongoing client relationship, in which case we keep it for the duration of that relationship and as otherwise set out in this section.
• Marketing data — retained for up to 5 years from your last communication with us.

Even if we delete your Data, it may persist on backup or archival media for a limited period for legal, tax or regulatory purposes.

13. Your rights

Under the Data Protection Laws you have the following rights, which you can exercise free of charge:

• the right to access the personal information we hold about you;
• the right to have any inaccurate or incomplete data corrected;
• the right to erasure of your personal information in certain circumstances;
• the right to restrict our use of your Data;
• the right to data portability in a structured, commonly used format;
• the right to object to processing carried out on the basis of legitimate interests, and to direct marketing;
• the right not to be subject to a decision based solely on automated processing which produces legal or similarly significant effects.

To exercise any of these rights, or to withdraw consent, please email contact@enevol.com. We may ask you for proof of identity before responding to a request. If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk/concerns or on 0303 123 1113.

14. Marketing communications

We may send you updates about our services and exclusive offers, relying on consent or our legitimate interests. We will always treat your personal information with respect. You can opt out of marketing communications at any time by using the unsubscribe link in any marketing email, or by writing to us at: Enevol Ltd, 20-22 Wenlock Road, London, England, N1 7GU.

15. Cookies

This Website may place and access certain Cookies on your computer. We use Cookies to improve your experience of using the Website and to improve our services. All Cookies used by this Website are used in accordance with current UK law. Before we place non-essential Cookies, including analytical/performance or functionality cookies, you will be presented with a cookie banner requesting your consent. Strictly necessary cookies may be placed without consent where they are required to provide the Website or a service you have requested.

You can enable or disable Cookies through your browser settings. Disabling Cookies may affect the functionality of this Website. For more information about cookies generally, visit aboutcookies.org. You can also review or change your cookie consent at any time via the cookie settings on this Website.

16. Links to other websites

This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for their content. This privacy notice does not extend to your use of such websites.

17. Changes of business ownership and control

We may, from time to time, expand or reduce our business, and this may involve the transfer of Data to new owners or to a prospective purchaser of part of our business. Where this happens, we will take steps with the aim of ensuring your privacy continues to be protected.

18. General provisions

You may not transfer any of your rights under this privacy notice to any other person. If any provision of this privacy notice is found to be unenforceable, this will not affect the remaining provisions. No delay by us in exercising a right means we waive it. This privacy notice is governed by and interpreted in accordance with the law of England and Wales, and disputes are subject to the exclusive jurisdiction of the courts of England and Wales.

19. Changes to this privacy notice

Enevol Ltd reserves the right to change this privacy notice as we may deem necessary from time to time, or as may be required by law. Any changes will be posted on the Website, and where appropriate notified to you by email. We recommend you check this page regularly to keep up to date.

20. How to contact us

Please contact us if you have any questions about this privacy notice or the information we hold about you:

• By email: contact@enevol.com
• By post: Enevol Ltd, 20-22 Wenlock Road, London, England, N1 7GU