Privacy Policy

1. Who we are

Envo Energy Ltd (“Envo”, “we”, “us”) is the data controller for personal data collected through this website (ehq.tech) and the Envo platform. We are registered in England and Wales. Company registration details will be published here once available.

Contact: hello@ehq.tech

2. What data we collect

2.1 Waitlist sign-up

When you join our waitlist we collect:

• Email address
• Approximate property count (optional range selection)
• Property type (optional selection)

2.2 Website analytics

We use PostHog (Cloud EU, hosted in Frankfurt) in cookieless mode to understand how visitors use this website. In this mode, PostHog does not set any cookies or store any data on your device. Instead, a privacy-preserving hash is computed on PostHog’s servers using your IP address, user agent, and a daily rotating salt. The resulting hash cannot be reversed to recover your IP address or any other personal data. The salt is deleted once that day’s events have been processed.

Because no data is stored on or read from your device, cookie consent under the Privacy and Electronic Communications Regulations 2003 (PECR) is not required for this processing. We rely on legitimate interest (UK GDPR Article 6(1)(f)) as the lawful basis — our interest in understanding aggregate website usage is balanced against the minimal privacy impact of fully anonymised, non-reversible analytics.

2.3 When the platform launches

Once the Envo platform is live, we will process additional data as part of the service, including landlord account details, property addresses, tenant contact information (phone numbers, email), and the content of tenant communications (WhatsApp messages, phone call transcripts, web form submissions). This policy will be updated before launch to reflect the full scope of data processing.

3. Why we process your data

Purpose	Lawful basis (UK GDPR)
Manage waitlist and send early-access updates	Consent (Article 6(1)(a))
Website analytics (cookieless, anonymised)	Legitimate interest (Article 6(1)(f))
Respond to enquiries	Legitimate interest (Article 6(1)(f))

4. How we store and protect your data

Waitlist data is stored in a Supabase-hosted PostgreSQL database with row-level security enabled. Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised personnel only.

Analytics data is processed and stored by PostHog on EU-based servers (Frankfurt). PostHog acts as a data processor under a data processing agreement.

5. Who we share data with

We do not sell your data. We share data only with the following sub-processors:

Sub-processor	Purpose	Data location
Supabase	Database hosting (waitlist data)	EU
PostHog	Website analytics	EU (Frankfurt)
Cloudflare	Website hosting and CDN	Global edge network
SendGrid	Transactional email (waitlist confirmations)	US (standard contractual clauses)

All sub-processors are bound by data processing agreements. Where data is transferred outside the UK/EEA, appropriate safeguards are in place (standard contractual clauses or UK adequacy decisions).

6. Cookies and device storage

This website does not set any analytics or tracking cookies. PostHog runs in cookieless mode and stores nothing on your device.

Cloudflare may set strictly necessary security cookies (e.g. __cf_bm for bot detection). These are exempt from consent requirements under PECR as they are essential for the security of the service.

7. Data retention

• Waitlist data: Retained until you request removal, or until 12 months after the platform launches, whichever comes first. If you become a customer, your data will be governed by the platform privacy policy at that time.
• Analytics data: Anonymised and non-reversible. PostHog retains aggregated event data in accordance with their retention policy.
• Enquiry emails: Retained for up to 24 months after the last correspondence.

8. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Object to processing (including processing based on legitimate interest)
• Data portability
• Withdraw consent at any time (for waitlist communications)

To exercise any of these rights, email hello@ehq.tech. We will respond within 30 days.

9. Children

Envo is a business-to-business service for property managers and landlords. We do not knowingly collect data from anyone under 18. If you believe we have, please contact us immediately.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to waitlist subscribers. The “last updated” date at the top reflects the current version.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).