Privacy Policy

1. About Evolito and this policy

This privacy policy gives you information about how Evolito collects and uses your personal data through your use of this website or offering or supplying products and services to you, including any data you may provide when you register with us or purchase a product or service from us.

The Evolito group is made up of different legal entities. Our headquarters are operated by Evolito Limited, a company organized under the laws of England and Wales (company number 11308921) with registered office at Units 1 – 3 Charles Shouler Way, Bicester, England, OX25 2DS. Please contact us if you would like to know more about the different entities. This privacy policy is issued on behalf of the whole group. When we mention “Evolito”, “we”, “us” or “our” in this privacy policy, we are referring to the relevant company in the Group responsible for processing your data.

Evolito is committed to ensuring that your privacy is protected. We will only use the information that we collect about you lawfully. We adhere to the principles relating to the obtaining and processing of personal data which are set out in the General Data Protection Regulation (EU) 2016/679 as it forms part of the laws of England and Wales by virtue of the European Union (Withdrawal) Act 2018 (UK GDPR) and are responsible for and must be able to demonstrate compliance with the data protection principles listed here.

We collect information about you to be able to provide our products and services to you, and to tailor our business and to provide you with the best possible service. We will only use your personal information as set out in this policy. We need to keep some details on file as per the examples in the table below. We will not pass your details on to others without contacting you first.

Your information will not be used for marketing purposes outside of Evolito. We will never sell your data and Evolito Ltd promise to keep your details safe and secure.

Our Data Protection Officer and data protection representatives can be contacted directly here:

dpo@evolito.aero

2. Personal Data We Collect

In order for us to provide you with a response to a general enquiry, a quote, a marketing request or a recruitment submission for example, we need to collect personal data for correspondence purposes. In any event, we are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy.

We may collect the following personal data:

Personal data type:	Source:
Name	Directly / Website / Contact Us Form / Email / Newsletter Sign-Up
Address	Directly / Website / Contact Us Form / Email / Newsletter Sign-Up
Telephone Number	Directly / Website / Contact Us Form / Email / Newsletter Sign-Up
Mobile Number	Directly / Website / Contact Us Form / Email / Newsletter Sign-Up
Email Address	Directly / Website / Contact Us Form / Email / Newsletter Sign-Up

Our website is not intended for children and we do not knowingly collect data relating to children.

3. The personal data we collect will be used for the following purposes:

Registration of you or your company as a new customer.
Administration and protecting our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) – Stored within a CRM system.
Provision of Evolito products and services and to provide you with information relating to these products and services.
To provide appropriate details to you regarding an order, recruitment submission, general enquiry, marketing enquiry.
Manage our relationship with you including notifying you about changes to our terms or privacy policy and dealing with your requests, complaints and queries.
Marketing – Stored within a CRM systems and within a UK based 3rd party marketing platform.
Warranties / Returns – Stored within a CRM system.
To allow you to participate in interactive features of our service, when you choose to do so.
Using data analytics to improve our website, products/services, customer relationships and experiences and to measure the effectiveness of our communications and marketing.

Like most websites, Evolito’s site uses Google Analytics (GA) to track user interaction. We use the data from GA to determine how many people are using our site, how people find and use our web pages, and to visualise user journeys through the website. Although GA records data, such as, your geographical location, device, internet browser and operating system, none of this information makes you personally identifiable to Evolito. Your computer’s IP address is also recorded by GA and presents a potential way for you to be personally identified; however, Google do not grant Evolito access to this information. We consider Google to be a third-party data processor. GA makes use of cookies, details of which can be found on Google’s developer guides.

Under what circumstances will Evolito contact me?

Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.

Direct marketing

You may receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving the marketing.

We may also analyse your personal data to form a view which products and services may be of interest to you so that we can then send you relevant marketing communications.

Third-party marketing

We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.

Opting out of marketing

You can ask to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us.

If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes (for example relating to order confirmations, product/service warranties, updates to our terms and conditions, or checking that your contact details are correct).

Cookies

For more information about the cookies we use and how to change your cookie preferences, please see our Cookie Policy. Disabling cookies on your internet browser will stop Google Analytics from tracking any part of your visit to pages within this website; however, this may have an impact on the website display quality.

4. Our legal basis for processing the personal data:

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you. This includes things such as handling warranty issues, returns or sales.
Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud, or direct marketing in connection with a conference/event exchange of details or newsletter signup. This basis would also apply in the case of submission of your personal data to us for a complaint, claim or a data subject access request.
We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

You may withdraw consent at any time by contacting the DPO for Evolito at dpo@evolito.aero requesting a copy of the ‘Withdrawal of Consent Procedure’ and the ‘Data Subject Consent Withdrawal Form’. This must be completed and submitted back to the DPO at the same address where it will be processed in line with our ‘Withdrawal of Consent Procedure’.

5. Will Evolito share my personal data with anyone else?

We may pass your personal data on to third-party service providers contracted to Evolito in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only to deliver you a quote, respond to a recruitment submission, respond to a marketing request or general enquiry. When they no longer need your data to fulfil this service, they will dispose of the details in line with Evolito’s procedures.

The following third parties will receive your personal data for the purposes listed below and or as part of our processing activities listed in Section 3 above.

Third party organisation:	Safeguards in place to protect your personal data:	Retrieve a copy of the safeguards in place here:
Google	HTTPS transfer and browser	https://policies.google.com/privacy?hl=en-GB
GoDaddy	HTTPS transfer and browser
Mailchimp (part of Intuit Inc)	Secure FTP, Encryption, Contracts, HTTPS transfer and browser	Request copy from DPO by emailing dpo@evolito.aero
Leadfeeder	HTTPS transfer, encryption, contracts, IP anonymisation, cookie consent management	https://www.leadfeeder.com/privacy/

6. Retention period

Evolito will retain and store your personal data for so long as is necessary to use your personal data for the purposes on the legal basis described above, and for a further retention period for legal archival purposes. This retention period is recorded in the Evolito Retention Period Procedure document available upon request from the DPO.

7. Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review: in the event that Evolito refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in clause 6 below.

All of the above requests will be forwarded on should there be a third party involved (as stated in section 4 above) in the processing of your personal data.

Evolito at your request can confirm what information we hold about you and how it is processed. If Evolito does hold personal data about you, you can request the following information:

Identity and the contact details of the person or organisation that has determined how and why to process your data. In some cases, this will be a representative in the EU.
Contact details of the data protection officer, where applicable.
The purpose of the processing as well as the legal basis for processing.
If the processing is based on the legitimate interests of Evolito or a third party, information about those interests.
The categories of personal data collected, stored and processed.
Recipient(s) or categories of recipients whom the data is/will be disclosed to.
If we intend to transfer personal data to a third country or international organisation, information about how we ensure this is done securely. The EU has approved sending personal data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure there are specific measures in place to secure your information.
How long the data will be stored.
Details of your rights to correct, erase, restrict or object to such processing.
Information about your right to withdraw consent at any time.
How to lodge a complaint with the supervisory authority.
Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
The source of personal data if it wasn’t collected directly from you.
Any details and information of automated decision-making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

If you wish to exercise any of the rights set out above, please contact us at:

Data Protection Officer (DPO) Contact Evolito Ltd Units 1 – 3 Charles Shouler Way, Bicester, England, OX25 2DS

dpo@evolito.aero

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This could involve providing details of your passport, driving licence, birth certificate or utility bill (from last 3 months). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

8. Complaints

In the event that you wish to make a complaint about how your personal data is being processed by Evolito (or third parties as described in section 5 above), or how your complaint has been handled, you have the right to lodge a complaint at any time directly with the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance, at:

Data Protection Officer (DPO) Contact Evolito Ltd Units 1 – 3 Charles Shouler Way, Bicester, England, OX25 2DS

dpo@evolito.aero

9. Changes to the privacy policy and your duty to inform us of changes

We keep our privacy policy under regular review. This version was last updated on 16^th July 2026

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.

10. Third Party Links

those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.