Privacy Policy

This website is operated by [Registered company name], trading as Kenvio, a company registered in [England and Wales / Scotland / Northern Ireland] under company number [Company number], with its registered office at [Registered office address].

[Registered company name] is the controller of the personal data described in this policy. You can contact us about anything in this policy at [Privacy contact email].

This policy covers personal data collected through this website — enquiries, demo requests, update sign-ups and basic website usage. Personal data held inside the Kenvio platform on behalf of a customer is governed by that customer's agreement with us, and in that context the customer is normally the controller.

Enquiry and demo requests: your name, company, email address, phone number (optional), industry, the solution you are interested in, the type of enquiry and your message.

H&S support enquiries: in addition, the approximate size of your organisation, the number of active sites or projects, how H&S is currently resourced and the support areas you select.

Update sign-ups: your email address.

For every form: the page you submitted it from, whether you gave consent, and when.

Technical data: when your browser loads this website, our hosting provider necessarily receives standard technical information such as your IP address and browser type, in order to deliver the page and keep the service secure. We do not currently use analytics tracking.

Your preferences: your cookie choice and your Day/Night display setting, stored in your browser.

To respond to your enquiry, arrange and run a demo, and discuss which plan or scope of support fits — because you asked us to (steps prior to entering into a contract) and our legitimate interest in responding to business enquiries.

To follow up on that enquiry — our legitimate interest in developing a business relationship you have started. You can ask us to stop at any time.

To send you occasional product updates — your consent, given when you sign up. You can withdraw it at any time using the unsubscribe link or by contacting us.

To keep the website secure and working, and to keep records of consent — our legitimate interest in operating a secure website, and our legal obligations.

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

Base44, the platform that hosts this website, stores form submissions and delivers the website to your browser. Base44 acts as our processor and uses its own infrastructure sub-processors.

Google Fonts, which serves the typeface this website uses. Your browser requests the font files from Google, which receives your IP address as part of that request.

Our email provider, when we correspond with you.

Professional advisers, and authorities where the law requires it.

We only share what each recipient needs, and our processors may only use your data on our instructions.

Some of our providers process data outside the UK, for example in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the recipient is certified) or on the ICO's International Data Transfer Agreement or Addendum, so that your data remains protected to a UK standard.

Enquiries that do not lead to a contract: up to 12 months from our last contact with you.

Customer and contract records: for the duration of the contract and six years after it ends, to meet legal and accounting obligations.

Marketing and update contacts: until you unsubscribe or withdraw your consent. We keep a minimal record of the unsubscribe so we do not contact you again.

We delete or anonymise data at the end of these periods.

We store a small number of items in your browser, all of them essential — your cookie choice, your display preference and the settings this website needs to connect to its platform. We do not currently use analytics or advertising cookies, or any other analytics tracking.

See our Cookie Policy for details and for how to change your choice.

You have the right to ask for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it, and to have it transferred to you or another organisation.

You can object to direct marketing at any time, and we will stop.

Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

To exercise any of these rights, contact us at [Privacy contact email]. We will respond within one month.

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk, or 0303 123 1113.

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. No website can be guaranteed completely secure, but we limit access to the people who need it.

We may update this policy from time to time. The date at the top shows when it last changed.