1. Introduction
At Enviroweb Ltd, protecting your personal information is one of our top priorities. This Privacy Policy explains what data we collect, how we use it, and how we keep it secure. It also outlines your rights concerning your personal data and how you can exercise those rights. By using our services, you agree to the collection and use of your data as outlined in this policy. This policy applies to all services provided by Enviroweb Ltd, excluding third-party services and domain name registrations, which may be subject to separate terms and privacy policies.
2. Personal Data We Collect
We collect and process personal data to provide our services effectively. The personal data we collect may include, but is not limited to:
- Name: First and last name for identification purposes.
- Contact Details: Email address and phone number to facilitate communication and account-related notices.
- Billing Information: Street address, city, country, state/county, postcode/zip, to ensure accurate billing and compliance with tax requirements.
- Company Information (optional): Company name and VAT number, where applicable, to support business customers.
- Customer Type: Whether you are using our services as a business or personal consumer to determine applicable terms.
- Referral Information (optional): How you found our business (e.g., referrals, ads), to help us improve our marketing efforts.
- Payment Details: While card details are processed securely by Stripe or PayPal, depending on your chosen payment method, we do not store full payment information ourselves.
- IP Address: Collected for security and fraud prevention purposes, helping us monitor for unauthorised or suspicious activity on your account.
- Device Information: Collected during fraud detection to assess the legitimacy of transactions. See Section 5: Fraud Detection and Prevention for more details.
We collect this data to establish and manage your account, process transactions, and ensure compliance with legal obligations.
3. Third-Party Services
Some of our services are provided through partnerships with third-party providers. When you use these third-party services, their respective privacy policies will apply to any personal data you provide during those interactions. We are not responsible for the privacy practices of third-party providers and encourage you to review their policies. Examples include third-party cloud providers, SSL certificate issuers, and other integrated solutions.
4. Payment Processors
We use Stripe and PayPal as trusted payment processors to facilitate transactions securely and efficiently. Both Stripe and PayPal handle all payment-related information, including your card or account details, in compliance with their respective privacy policies and security standards.
How Payment Data is Handled:
- Stripe: Manages card payments directly and securely. Enviroweb Ltd does not store or access full card details. For more information, review Stripe's Privacy Policy.
- PayPal: Provides secure account-based payment solutions. When you choose PayPal as your payment method, certain data, such as transaction details, may be shared with PayPal to process the payment. For more information, review PayPal's Privacy Policy.
Enviroweb Ltd does not store or access full payment details from either payment processor. All data related to payments is handled securely by these third-party providers, who comply with applicable privacy and security standards.
4.1 Accounting and Bookkeeping
We use QuickBooks, a trusted third-party accounting platform, to manage our financial records, invoicing, and regulatory compliance obligations.
As part of our accounting processes, the following customer data may be securely exported to or processed within QuickBooks:
- Name or company name
- Contact details (email address, billing address)
- Invoice and transaction details (invoice numbers, amounts, payment status)
This processing is necessary for legitimate business purposes, including financial reporting, tax compliance, and bookkeeping accuracy. All personal data processed in QuickBooks is handled in accordance with UK GDPR requirements, and appropriate safeguards are in place to protect your information.
For more information about how QuickBooks handles personal data, please refer to Intuit’s Global Privacy Statement.
5. Fraud Detection and Prevention
To ensure the security of your transactions and protect against fraud, we use FraudLabs, a trusted third-party fraud detection service. FraudLabs helps us identify potentially fraudulent activities during the checkout process by analysing data such as:
- IP address
- Device and browser information
- Transaction metadata, such as timestamps and order details
- Billing or shipping address
- Location data
FraudLabs processes this data strictly for fraud detection purposes, in compliance with privacy standards and regulations. For more details on how FraudLabs handles data, please refer to their FraudLabs Privacy Policy.
By using our services, you agree to this fraud detection as part of our efforts to maintain the security and integrity of our platform.
6. Cookies
Our website uses cookies to enhance the user experience and ensure the efficient operation of our services. Cookies allow us to:
- Track the effectiveness of our marketing efforts, including affiliate referrals.
- Maintain the functionality of your session during your visit.
- Ensure the security of our website and protect against fraudulent activity.
We only use cookies that are strictly necessary for the operation of our site. By using our website, you agree to the use of these essential cookies. You can manage your cookie preferences through your browser settings, though disabling cookies may impact the functionality of certain features.
7. Data Retention
We retain personal data for a limited time to fulfil the purposes for which it was collected and to comply with legal, regulatory, or business obligations. All account data will be automatically deleted 24 months after the last paid invoice for an inactive or closed account.
An inactive client is defined as an account with no active products, services, addons, or domains. After 24 months of inactivity or account closure, all personal data, including billing and account information, will be permanently deleted unless we are required by law to retain it for a longer period.
If you wish to request deletion of your personal data before this period, please contact us through our support ticketing system.
8. User Rights
You have several rights regarding the personal data we collect and process, which include:
- Access: You have the right to request access to the personal data we hold about you.
- Rectification: You can request corrections to any inaccuracies in your personal data.
- Deletion: You can request the deletion of your personal data, subject to certain legal obligations. Please note: A request for deletion of your personal data will result in the termination of any active services associated with your account. We require certain data to provide and manage our services, and without this data, we cannot continue offering those services. Once your data is deleted, you will no longer have access to any active services, and no refunds will be issued for any remaining service periods.
- Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Restriction of Processing: You can request that we limit the processing of your personal data in certain circumstances, such as when the accuracy of the data is contested or you have objected to its processing.
To exercise any of these rights, please submit a request through our support ticketing system. We will respond within one month, as required by law, and will work to address your concerns promptly.
9. Data Security
We employ a range of security measures to protect your personal data, including:
- Encryption: We use SSL encryption to protect your data during transmission between your device and our servers.
- Access Control: Access to sensitive data is restricted to authorised personnel within our company and only on a need-to-know basis.
- Firewalls: We implement advanced firewall protections to safeguard against unauthorised access to our systems.
- Regular Audits and Updates: We regularly update our systems and conduct security audits to ensure our infrastructure is protected against potential vulnerabilities.
- Incident Response: We have procedures in place to respond swiftly to any security breaches, ensuring we minimise any impact on your data.
10. Data Transfers
Some of your personal data may be transferred outside of the UK or EEA, particularly when we use service providers located in the United States or other countries. We ensure that any such transfers comply with data protection laws, including UK GDPR, by using mechanisms such as Standard Contractual Clauses (SCCs) and ensuring adequate safeguards are in place. We take all reasonable steps to ensure your data is protected, regardless of where it is processed.
11. Data Breach Procedures
In the unlikely event of a data breach, we are committed to taking immediate action to contain and resolve the situation. We will notify any affected individuals and the Information Commissioner’s Office (ICO) within 72 hours of discovering the breach, as required by law. We will also provide guidance on steps you can take to protect yourself and mitigate any risks resulting from the breach.
12. Age Restrictions
Our services are designed for individuals aged 18 and over. We do not knowingly collect or process personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to remove such information.
13. Complaints
If you have any concerns about how we handle your personal data, we encourage you to contact us at privacy@enviroweb.net or through our support team. We will do our best to resolve your concerns promptly and to your satisfaction. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
14. Right to Update this Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on our website, and, where appropriate, we will notify you by email or through your account dashboard. Your continued use of our services after such updates constitutes your acceptance of the revised Privacy Policy.
15. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
ENVIROWEB LTD
86 - 90 Paul Street,
London, EC2A 4NE,
United Kingdom
Email: privacy@enviroweb.net
Support: Through your account dashboard
Last Updated: 29/12/24
