Get Started

Privacy Policy

  1. Introduction and Identity of the Data Controller

This Privacy Policy explains how Evanio Ltd collects, uses, stores, and protects your personal data when you visit our website at www.evanio.com or engage our services. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company name: Evanio Ltd
Company number: 16901697
Registered address: Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Email: hello@evanio.com
UK telephone: +44 7474 76 3939
Bangladesh telephone: +880 18 00000 829

Evanio Ltd is the data controller for personal data collected through this website and in the course of providing our business solutions services. As a UK-registered company, we are subject to UK data protection law.

  1. Services We Provide

Our services, which determine the types of personal data we process, include:

  • Business Consultancy — strategy planning, startup support, and professional business guidance
  • Website Development — design and development of business websites
  • Social Media Marketing — Facebook, Instagram, TikTok, and LinkedIn page creation and management
  • Digital Marketing — paid advertising campaigns, SEO, content strategy, and growth support
  • Logo & Branding — brand identity design, logos, and visual materials
  • AI Automation & Integration — integration of AI tools and intelligent workflows into business operations

Understanding which service(s) you engage with helps us determine which personal data is necessary and the lawful basis on which we process it.

  1. Personal Data We Collect

3.1 Data You Provide Directly

When you contact us, submit an enquiry, or engage our services, we may collect:

  • Full name
  • Email address
  • Phone number
  • Subject and content of your message
  • Business name and details (where relevant to your service request)
  • Billing and payment information (processed securely through our payment providers)

3.2 Data Collected Automatically

When you visit www.evanio.com, our website and hosting infrastructure automatically collect:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on those pages
  • Referring website or URL
  • Date and time of access
  • Cookie identifiers (see Section 8 for our Cookie Policy)

3.3 Data We Do Not Collect

We do not collect special category data (such as health information, religious beliefs, or biometric data) unless specifically required for a service and with your explicit consent. We do not knowingly collect data from children under 16 years of age.

  1. How We Use Your Personal Data

We use your personal data only for the purposes described below and on the lawful basis stated:

  • Responding to your enquiries and contact form submissions — Legitimate interests (Art. 6(1)(f))
  • Providing and delivering agreed services — Performance of a contract (Art. 6(1)(b))
  • Processing payments securely — Performance of a contract (Art. 6(1)(b))
  • Issuing invoices and maintaining financial records — Legal obligation (Art. 6(1)(c))
  • Sending service updates and operational communications — Performance of a contract (Art. 6(1)(b))
  • Improving our website and user experience — Legitimate interests (Art. 6(1)(f))
  • Compliance with applicable UK laws and regulations — Legal obligation (Art. 6(1)(c))
  • Marketing communications (only with your consent) — Consent (Art. 6(1)(a))
  1. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers strictly where necessary to deliver our services or comply with legal obligations. These include:

  • Payment processors — Stripe, Google Pay, and Amazon Pay, for secure processing of transactions. These providers are PCI-DSS compliant and handle payment data under their own privacy frameworks.
  • Website and hosting infrastructure providers — our website hosting and content management systems, which may process data such as IP addresses for operational purposes.
  • Communication tools — email and messaging platforms used to respond to your enquiries.
  • Professional advisors — accountants, legal advisors, or auditors where necessary for compliance.
  • Law enforcement or regulators — where we are required to disclose data by law, court order, or regulatory authority.

All third parties with whom we share data are contractually required to handle it in accordance with UK GDPR and applicable data protection law. We do not authorise them to use your data for their own marketing purposes.

  1. International Data Transfers

Evanio Ltd operates with support from a team based in Bangladesh. Where personal data is accessed by or transferred to our Bangladesh operations, we ensure that appropriate safeguards are in place in accordance with UK GDPR Chapter V requirements. These safeguards may include standard contractual clauses approved by the UK Information Commissioner’s Office (ICO) or other lawful transfer mechanisms.

We take all reasonable steps to ensure your data receives the same level of protection as it would within the United Kingdom.

  1. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected or as required by law. Our general retention periods are:

  • Client service records and contracts: 6 years following the end of the service relationship (in line with UK limitation periods)
  • Financial and invoicing records: 6 years from the end of the relevant tax year, as required by HMRC
  • Enquiry and contact form data: up to 2 years from the date of last contact
  • Website usage and technical logs: up to 12 months
  • Marketing consent records: until consent is withdrawn, plus a reasonable record-keeping period

When data is no longer required, it is securely deleted or anonymised.

  1. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure proper functionality, analyse usage, and improve your experience. Cookies are small text files stored on your device.

Types of cookies we use:

  • Strictly necessary cookies — essential for the website to function. These cannot be disabled.
  • Functional cookies — remember your preferences and improve usability.
  • Analytical/performance cookies — help us understand how visitors interact with our website (e.g., pages visited, time spent).

Where we use non-essential cookies, we will request your consent via a cookie consent mechanism displayed on your first visit. You may withdraw consent at any time by adjusting your browser settings or contacting us.

For detailed information on managing or disabling cookies, please refer to your browser’s help documentation or visit www.allaboutcookies.org.

  1. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. Our security measures include:

  • SSL/TLS encryption on all data transmitted through our website and checkout processes
  • Secure storage of personal and transaction data with access controls and database protections
  • Regular review of our IT systems and security practices
  • Limiting access to personal data to authorised personnel only, on a need-to-know basis

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform you directly without undue delay.

  1. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you (Subject Access Request)
  • Right to rectification — to request that we correct inaccurate or incomplete data
  • Right to erasure — to request deletion of your data where there is no lawful basis for us to continue holding it
  • Right to restriction — to request that we restrict processing of your data in certain circumstances
  • Right to data portability — to receive your data in a structured, commonly used format where processing is based on consent or contract
  • Right to object — to object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
  • Rights related to automated decision-making — we do not currently make decisions about you solely by automated means

To exercise any of these rights, please contact us using the details in Section 13. We will respond within one calendar month. We may need to verify your identity before processing your request.

  1. Marketing Communications

We will only send you marketing communications if you have given us your explicit consent to do so. You may opt out of receiving marketing emails at any time by:

  • Clicking the ‘unsubscribe’ link in any marketing email we send; or
  • Contacting us directly at hello@evanio.com with your request

Opting out of marketing will not affect the delivery of operational or transactional communications related to your active services.

  1. Third-Party Websites and Social Media

Our website contains links to third-party websites and social media platforms, including Facebook, Instagram, X (Twitter), LinkedIn, YouTube, TikTok, and WhatsApp. This Privacy Policy applies only to www.evanio.com. We are not responsible for the privacy practices of third-party sites. We encourage you to read their respective privacy policies before providing any personal data.

  1. How to Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or how we handle your data, please contact us by:

Email: hello@evanio.com
Post: Evanio Ltd, Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Telephone (UK): +44 7474 76 3939

We aim to acknowledge your request within 5 working days and resolve it within one calendar month.

  1. Right to Complain to the Supervisory Authority

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK’s data protection supervisory authority:

Authority: Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concern directly before you approach the ICO, and we encourage you to contact us in the first instance.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The ‘Last updated’ date at the top of this document will be revised accordingly. Where changes are material, we will take reasonable steps to notify you, such as by displaying a prominent notice on our website or contacting you directly.

We encourage you to review this Privacy Policy periodically. Continued use of our website or services after any update constitutes your acknowledgement of the revised policy.