Privacy Policy

Effective Date: 15 May 2014
Last Updated: 25 August 2026

Envisage Technology Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you visit our website, submit an enquiry, or interact with our services.

1. Who We Are (Data Controller)

Envisage Technology Ltd is the Data Controller responsible for your personal data.

Company Name: Envisage Technology Ltd
Registered Office Address: Unit 12 Acorn Business Park, Northarbour Road, Portsmouth, Hampshire, England, PO6 3TH
Company Registration Number: 03888711
Data Protection Contact: info@envisagetechnology.com
Telephone: 023 9257 0044

2. What Personal Data We Collect

We may collect, store, and process the following categories of personal information:

Identity & Contact Data: Name, job title, company name, business email address, postal address, and telephone number provided when you fill out our contact, quote, or RMA (Return Merchandise Authorisation) forms.
Product & Support Data: Where you submit an RMA request, we also collect the product model, part number, serial number, and a description of the fault or issue you report, in order to process your return or repair.
Technical & Usage Data: IP address, browser type and version, operating system, request timestamps, and referring URLs collected automatically via standard server logs for network security and site stability.
Communication Data: Records of correspondence, support requests, and enquiries submitted through our website or email.

3. How We Collect Your Data

Direct Interactions: You provide your personal data directly to us when you complete a contact, quote, or RMA form, request product details, or contact our team.
Automated Technologies: As you browse our website, technical request data (such as IP address and user-agent string) is logged automatically by our hosting platform to securely deliver web content. Our contact and RMA forms use Cloudflare Turnstile to help verify that submissions are made by a person rather than an automated bot; this involves processing your IP address and certain browser signals at the point of submission.

Note on Cookies & Local Storage: This website sets no cookies. Two limited items may be stored in your browser: your light/dark theme preference, saved in local storage only if you actively use the appearance toggle, and a short-lived verification token used by Cloudflare Turnstile when you submit a form. Neither identifies you or involves tracking or profiling, and neither is stored without an action on your part, so we do not deploy a cookie consent banner. We also use a cookie-free traffic analytics service that stores nothing on your device at all, set out in section 5.3, and videos embedded on some product pages load only if you choose to play them, and Google may then store items on your device relating to playback; this is set out in section 5.2. Further detail is set out in our Cookie Policy.

4. Legal Basis for Processing Your Data

Under UK GDPR, we rely on the following legal bases to process your personal data:

Purpose / Activity	Type of Data	Legal Basis for Processing
Responding to Enquiries & Quotes	Contact & Communication Data	Performance of a Contract / Pre-Contractual Steps: Necessary to take steps at your request prior to entering into a contract, or Legitimate Interests in managing customer relationships.
Processing RMA & Warranty Requests	Contact, Communication & Product Data	Performance of a Contract: Necessary to process a return, repair, or warranty claim relating to a product you have purchased.
Website Performance & Security	Technical & Usage Data	Legitimate Interests: Necessary to maintain network security, prevent fraudulent activity, and ensure website stability.
Bot & Spam Prevention on Forms	Technical Data (IP address, browser signals)	Legitimate Interests: Necessary to protect our forms and systems from automated abuse.
Direct B2B Marketing (Newsletters / Updates)	Identity & Contact Data	Consent: Where you have explicitly opted in, or Legitimate Interests (for existing business customers, subject to an unconditional right to opt out at any time).

5. Third-Party Data Processors

We do not sell, rent, or trade your personal data. To operate our website and services, we share limited personal data with trusted third-party service providers acting as Data Processors on our behalf:

Cloudflare, Inc. (Cloudflare Workers): Provides content delivery network (CDN), hosting infrastructure, and security services. Cloudflare processes technical network logs (such as IP addresses) strictly to deliver web content securely and prevent cyberattacks.
Cloudflare, Inc. (Cloudflare Turnstile): Provides bot and spam verification on our contact and RMA forms. When you submit one of these forms, Turnstile processes your IP address and certain browser signals to confirm the submission is not automated.
Resend, Inc.: Provides transactional email API services. When you submit a contact or RMA form on our website, your form entries (such as name, email address, and message or fault details) are transmitted securely via Resend to deliver the enquiry to our internal team.

All third-party processors are bound by strict Data Processing Agreements (DPAs) requiring them to handle your data confidentially and securely in compliance with UK data protection laws.

5.1 Embedded Map on our Contact Page

Our Contact page displays an interactive map so that you can locate our offices. The mapping software itself (Leaflet) is hosted by us, but the map imagery (the “tiles” that make up the map) is requested by your browser directly from third-party map providers as the map loads:

OpenStreetMap Foundation: supplies the standard map imagery. The OpenStreetMap Foundation is a company registered in the United Kingdom.
CARTO (CARTO, Inc.): supplies the alternative map imagery shown when your device is set to dark mode.

Because your browser contacts these providers directly, they will necessarily receive your IP address and basic browser information in order to return the map imagery. In this respect they act as independent controllers of that data rather than as processors on our behalf, and their own privacy notices apply:

OpenStreetMap Foundation: osmfoundation.org/wiki/Privacy_Policy
CARTO: carto.com/privacy

No map imagery is loaded on any other page of this website, and we do not share your name, email address, or any details you submit through our forms with these providers.

5.2 Embedded Videos on Product Pages

Some product pages include a video hosted on YouTube, a service provided by Google LLC. The video is not loaded when the page opens. Your browser displays a placeholder with a play button, served entirely from our own site, and no request is made to Google unless you choose to press it.

If you press play, the video is loaded from youtube-nocookie.com, Google’s privacy-enhanced embed mode, which does not set Google’s usual advertising and profiling cookies. Google will nonetheless receive your IP address and basic browser information in order to deliver the video, and may store items on your device relating to playback. In this respect Google acts as an independent controller of that data rather than as a processor on our behalf, and its own privacy notice applies:

Google LLC: policies.google.com/privacy

Because playback begins only in response to a deliberate action on your part, simply reading a page that contains a video sends nothing to Google. We do not share your name, email address, or any details you submit through our forms with Google.

5.3 Website Analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to understand how many people visit this website, which pages they view, and how well pages perform. It is provided by Cloudflare, Inc. — the same processor already described above that delivers this website to your browser.

Unlike conventional analytics tools, it does not use cookies or any other identifier stored on your device, and does not track you across other websites. It works by recording, for each page you view, the page itself, general technical information such as browser type and an approximate location derived from your IP address, and performance timings, without a persistent identifier that would let us or Cloudflare link your visits together over time. We see only the aggregate statistics this produces, not information that identifies you individually.

Because it depends on the same infrastructure that already serves this website, we treat this as part of the same Data Processor relationship as the other Cloudflare services described above, rather than as an independent controller.

Cloudflare, Inc.: www.cloudflare.com/privacypolicy

6. International Data Transfers

Some of our third-party infrastructure providers (including Cloudflare, Inc. and Resend, Inc.) are headquartered in the United States.

Where personal data is transferred outside the United Kingdom, we ensure appropriate legal safeguards are implemented in accordance with Chapter V of the UK GDPR:

UK Extension to the EU-US Data Privacy Framework (UK Data Bridge): Both Cloudflare and Resend maintain active certifications under the UK Extension to the EU-US Data Privacy Framework, certifying that they adhere to data protection standards substantially equivalent to those in the UK.
Standard Contractual Clauses (SCCs) & UK Addendum: Where applicable, data transfers are further governed by the UK International Data Transfer Addendum to standard contractual clauses.

The map imagery providers described in section 5.1 receive your IP address directly from your browser as independent controllers. CARTO, Inc. is headquartered in the United States; the OpenStreetMap Foundation is registered in the United Kingdom. Google LLC, which supplies the embedded videos described in section 5.2, is also headquartered in the United States and receives your IP address on the same basis, but only if you choose to play a video. As these providers are not acting on our behalf, the safeguards above do not apply to those requests, and their own privacy notices govern that processing.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or statutory reporting obligations:

General Enquiries & Quotes: Kept for up to 2 years following the resolution of the enquiry if no ongoing commercial contract is formed.
RMA & Warranty Records: Retained for the duration of the applicable product warranty (up to a maximum of 5 years), plus 1 year afterwards to handle any related follow-up queries or disputes.
Customer Transactional Records: Retained for 6 years following the end of the financial year to comply with UK tax and financial record-keeping laws.
Technical Server Logs: Automatically purged or anonymised by our network providers within 30 to 90 days.

As a data subject located in the UK, you have the following statutory rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification: Request correction of incomplete or inaccurate data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no legal reason for us to continue processing it.
Right to Object: Object to the processing of your personal data where we rely on Legitimate Interests or use it for direct marketing.
Right to Restrict Processing: Request the suspension of processing your personal data under certain conditions.
Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, commonly used format.
Right to Withdraw Consent: Where processing is based on consent (such as direct email newsletters), you may withdraw your consent at any time.

To exercise any of these rights, please contact us at info@envisagetechnology.com. We respond to all legitimate requests within one calendar month free of charge.

9. How to Complain (The ICO)

If you have concerns about how we collect or process your personal data, we ask that you contact us first so we can resolve the issue.

However, you have the right to lodge a complaint at any time with the UK’s supervisory authority for data protection:

Authority: Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Any updates will be posted on this page with an updated “Last Updated” revision date.