Privacy Policy

This policy explains what data we collect when you visit tryevence.com, subscribe to our emails, or buy a product — and what we do with it. Plain English, no dark patterns.

Who we are

Evence is operated by Hanssen Ramanjooloo, a UK sole trader based at 10 King George V Avenue, Mansfield NG18 4FR, United Kingdom. For UK GDPR purposes, we are the data controller of the personal data described in this policy.

For any privacy question or to exercise your rights below, email hello@tryevence.com.

What we collect

When you subscribe to our emails

Your email address. Nothing else. We store it in Brevo (our email provider) and use it to send you the free guide you requested and, afterwards, occasional emails you've opted in to receive.

When you buy a product

Paddle, our payment processor and merchant of record, collects your name, email, billing address, and payment details directly. We never see or store your full card number. We receive a confirmation with your email, the product you bought, and a transaction ID. We use this to deliver the product and keep required business records.

When you visit the site

We use two analytics services: Amplitude and Microsoft Clarity. They track how people use the site — which pages, which buttons, which paths — using anonymous cookie IDs. Clarity may record visual session replays; it's configured to mask input fields by default so passwords and email addresses aren't captured. Our hosting provider (Vercel) also keeps basic server logs including your IP address and the pages you request.

When you email us

Whatever you send us, plus your email address. We use it to reply and sometimes to improve our content when we notice a pattern in questions.

Why we collect it (legal bases)

• Consent: when you opt in to our email list.
• Contract: when you buy a product and we need to deliver it.
• Legitimate interest: for basic analytics, fraud prevention, and to send transactional emails like receipts or download links. We've balanced this against your rights and believe the impact is minimal.
• Legal obligation: keeping financial records for tax purposes.

Who we share it with

We use third-party services to run the site. They see the data described below:

• Paddle (payment processing, merchant of record) — sees your payment and billing details at checkout.
• Brevo (email delivery) — sees your email address and whether you opened or clicked our emails.
• Amplitude (product analytics) — sees anonymous usage events.
• Microsoft Clarity (session analytics) — sees anonymous session recordings and heatmaps.
• Vercel (site hosting) — sees request logs including your IP address.
• Cloudflare (DNS and edge network) — sees request-level network data.
• Google Fonts — the site loads fonts from Google's CDN; your IP is visible to Google during that request.

We do not sell your data. We do not share it for anyone else's marketing. These providers act as data processors under our instructions, each governed by their own privacy policy and a data processing agreement with us where required.

Cookies

The site uses cookies and similar technologies for:

• Analytics: Amplitude and Microsoft Clarity set cookies to group your activity into sessions.
• Checkout: Paddle sets cookies during the payment flow to complete your purchase.

You can clear or block cookies in your browser settings. Blocking analytics cookies won't break the site. To opt out of analytics entirely without touching browser settings, email us and we'll exclude you from all tracking.

International transfers

Several of the processors above (Vercel, Amplitude, Microsoft Clarity, Paddle, Cloudflare, Google) are based in the United States or process data globally. Where we transfer personal data outside the UK or EEA, we rely on the UK government's adequacy decisions, Standard Contractual Clauses, or the EU-US and UK-US Data Privacy Frameworks as appropriate.

How long we keep it

• Marketing emails: until you unsubscribe or 2 years of inactivity, whichever comes first.
• Purchase records: 7 years, as required by UK tax law.
• Analytics data: up to 12 months, then anonymized or deleted.
• Support emails: 2 years after the last exchange.

Your rights (UK and EU)

Under the UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct it if it's wrong.
• Ask us to delete it, subject to legal retention obligations.
• Restrict or object to how we process it.
• Receive a portable copy of it.
• Withdraw consent at any time, where processing was based on consent.
• Complain to a supervisory authority — in the UK, that's the Information Commissioner's Office (ico.org.uk).

To exercise any of these, email hello@tryevence.com from the address we have on file. We'll respond within the legally required timeframe for your jurisdiction — 30 days for the UK and EU, 45 days for California — and we may extend that once, with notice to you, if a request is complex.

We do not make automated decisions that have legal or similarly significant effects about you. We do not profile users for credit, employment, or other consequential decisions.

Your rights (California residents)

Under the California Consumer Privacy Act (CCPA), if you're a California resident, you have the right to:

• Know what personal information we collect, use, and share about you.
• Delete personal information we've collected from you, with some exceptions required by law.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of your personal information. We do not sell personal information. We do not share it with third parties for cross-context behavioral advertising.
• Non-discrimination: we will not charge you more, give you worse service, or deny you access to products for exercising any of these rights.

To submit a verified consumer request, email hello@tryevence.com from the email address we have on file, or include your order confirmation so we can verify your identity. We do not discriminate against requests from authorized agents acting on your behalf.

Security

We use reputable providers (Vercel, Paddle, Brevo) with strong security controls. Data in transit is encrypted via TLS. Payment card details never reach our servers. No system is perfectly secure, and we can't promise absolute security — but we take reasonable steps to protect what you've entrusted to us.

Children

Evence is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal information, please contact us and we'll delete it.

Changes to this policy

We'll update this policy as the business grows or laws change. The "last updated" date at the top reflects the most recent version. For material changes, we'll notify subscribers by email.

Questions? hello@tryevence.com