Privacy Policy
Last updated: June 2026
EnviroTech UK ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
1. Who We Are
Data Controller: EnviroTech UK
Contact: info@envirotechuk.com
Website: envirotechuk.com
2. What Personal Data We Collect
2.1 When you purchase a report
- Email address — to deliver your report and receipt
- Payment details — processed securely by Stripe; we do not store your card number, CVV, or full payment details
- IP address and browser/device information — collected automatically by our servers and Stripe for fraud prevention
2.2 When you run a survey
- Site polygon coordinates — the geographic boundary you draw on the map
- Project name and site address — as entered in the survey form
2.3 When you contact us
- Name and email address — as provided in the contact form
- Message content
2.4 Automatically collected data
- Server logs (IP address, timestamp, pages accessed) — retained for up to 30 days on Google Cloud Platform infrastructure
3. How We Use Your Data
- To generate and deliver your Environmental Desktop Study report by email
- To process your payment via Stripe
- To record your agreement to our Terms and Conditions (legal audit trail)
- To respond to contact form enquiries
- To improve the platform and diagnose technical issues (server logs)
4. Lawful Basis for Processing
- Contract performance — processing your payment and delivering your report (Article 6(1)(b) UK GDPR)
- Legitimate interests — fraud prevention, server security, and improving the service (Article 6(1)(f) UK GDPR)
- Legal obligation — retaining payment records for HMRC compliance (Article 6(1)(c) UK GDPR)
5. How Long We Keep Your Data
- Payment records and T&Cs agreements: 7 years (HMRC requirement)
- Survey data and generated reports: 12 months from generation
- Contact form submissions: 12 months
- Server logs: up to 30 days
6. Third Parties We Share Data With
We do not sell, rent, or share your personal data with any other third parties for marketing purposes.
7. International Data Transfers
Your data is stored within Google Cloud Platform's European data centres (europe-west2). Stripe may process data in the United States; they are certified under the UK-US Data Bridge. We do not transfer your personal data outside the UK/EEA except via these processors, who maintain adequate safeguards.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your data (subject to legal retention obligations)
- Right to restrict processing — ask us to pause processing of your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
To exercise any of these rights, email info@envirotechuk.com. We will respond within one month.
9. Cookies
Our website uses a session cookie (set by Flask) to maintain your session while you use the platform. This is a strictly necessary cookie and does not track you across other websites. We do not currently use analytics or advertising cookies.
10. How to Complain
If you have concerns about how we handle your personal data, please contact us first at info@envirotechuk.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available at envirotechuk.com/privacy. We will notify you of material changes by email where we hold your address.