Privacy Policy

Last updated: 11 May 2026

1. Who we are

This website (evolvdna.com) is operated by SVIUK Ltd, trading as Evolv DNA.

• Registered office: 190 Queen Street, Withernsea, East Yorkshire, HU19 2LG, United Kingdom
• Companies House number: 08555933
• VAT number: GB 182 458 978
• ICO Data Protection registration: ZA352524

SVIUK Ltd is the data controller for the personal information collected on this website. If you have any questions about this policy or how we handle your personal information, please contact us at [email protected].

2. What this policy covers

This policy explains what personal information we collect when you visit or buy from evolvdna.com, why we collect it, how we use it, who we share it with, how long we keep it, and the rights you have over your information.

It applies to all personal information we process as data controller. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This is a trade-only site. We sell to businesses for resale or commercial use. The personal information we handle is typically business contact information — the names, business email addresses, and business telephone numbers of staff at our trade buyer accounts — rather than information about individual consumers. UK data protection law applies to this information to the extent it identifies a living individual, and this policy is written on that basis. The main exception is our "Nominate your shop" referral promotion (section 12), through which we collect limited personal information from individual consumers; that activity is described separately below.

3. Information we collect

When you register a trade account or place an order

• Business name, trading address, billing and delivery addresses
• Name and role of the contact person at your business
• Business email address and telephone number
• Business registration details (company number, VAT number, EORI number, or local equivalent)
• Order details (products, quantities, prices, dispatch origin, Incoterms)
• Payment confirmation details — we do not store full payment card or bank details; payment is handled directly by our payment provider or by bank transfer to our account

When you contact us

• Any information you provide in your message (email, contact form, phone)

When you visit the site

• Anonymous analytics data about how pages are used. We run our own self-hosted, cookieless analytics that do not track individuals across the web and do not store any cookies on your device.
• Technical data necessary for the site to function (IP address for security, session data)

4. How we use your information and the lawful basis for doing so

You can opt out of marketing at any time by using the unsubscribe link in any marketing email, or by contacting us directly at [email protected].

5. Who we share your information with

We share personal information only with the following categories of recipient, and only to the extent necessary to operate the business:

• Payment providers — to process payments made at checkout or by bank transfer. Card details are entered directly with the payment provider and are not stored by us. Bank transfer details are processed through our business bank.
• UPS — we share the consignee name, delivery address, contact telephone number, and (for international shipments) the consignee's EORI or local importer registration number, so that UPS can deliver your order and clear it through customs.
• Our manufacturing partner in Shenzhen, China — for orders dispatched directly from our manufacturer, we share the consignee name, delivery address, and contact details required to dispatch the goods to you.
• HMRC, regulators, customs authorities, and law enforcement — where required by law, including export documentation, dual-use checks, customs declarations at origin and destination, and product safety reporting obligations.
• Professional advisers (accountants, legal advisers, auditors) — where reasonably required in the course of our business.
• Our IT and infrastructure providers (hosting, email, business software) — under data processing agreements that restrict their use of the data to providing the relevant service to us.

We do not sell your personal information. We do not share it with third-party advertisers or marketing networks.

6. International transfers

Some of our processors and partners are based outside the United Kingdom.

Where personal information is transferred to a country covered by a UK adequacy decision, the transfer is made on the basis of that adequacy decision.

Where personal information is transferred to a country not covered by a UK adequacy decision — including transfers to our manufacturing partner in China for orders dispatched directly from Shenzhen — the transfer is made under the UK GDPR's international transfer safeguards. We use the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, supported by appropriate technical and organisational measures to protect the transferred information.

Transfers of shipping data to UPS may involve onward transfers to UPS entities in the destination country to enable delivery. These transfers are made under UPS's own data protection framework as an international carrier.

Our customer-relationship and email platform (SwipeOne) is provided from outside the UK. Personal information processed through it is transferred under the UK GDPR's international transfer safeguards — the IDTA or UK Addendum to the EU SCCs, or the UK Extension to the Data Privacy Framework where the provider is certified.

7. How long we keep your information

• Trade account records: while your account is active, and for 6 years after your last transaction.
• Transaction records (orders, invoices, commercial invoices, customs paperwork): 6 years after the transaction, to comply with HMRC record-keeping requirements and export documentation rules.
• Marketing data: until you unsubscribe, or for a reasonable period of inactivity (typically 2 years without engagement), whichever is sooner.
• Correspondence: typically 2 years after the matter is resolved, or longer where the correspondence relates to a warranty claim, dispute, or regulatory matter.
• Anonymous analytics: aggregated, non-identifying site-usage data, retained for up to 24 months on our own infrastructure.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Rectify inaccurate or incomplete information
• Erase your information in certain circumstances
• Restrict how we process your information
• Portability — receive your information in a portable format, or have it transferred to another controller
• Object to processing based on legitimate interest, including direct marketing
• Withdraw consent where consent is our lawful basis

Some of these rights are subject to exceptions where we are required to keep information to meet legal obligations (for example, transaction and customs records under HMRC rules).

To exercise any of these rights, please email [email protected]. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

10. Cookies

This site uses a minimal number of essential cookies required for functionality (for example, to keep you logged in to your trade account, and to remember items in your basket during a session). We do not use third-party advertising cookies or cross-site tracking cookies. Our analytics is self-hosted on our own infrastructure and runs in cookieless mode — no analytics cookies are stored on your device.

11. "Nominate your shop" referral promotion

Separately from our trade activities, we run a "Nominate your shop" promotion through which members of the public can nominate a local retailer to stock DNA ONE. This is the one part of our processing that involves personal information about individual consumers rather than trade contacts.

Information we collect

• From you (the person nominating): your name, your email address, and whether you have asked to receive updates from us.
• About the retailer you nominate, which you provide to us: the shop's name, a contact name, a business email address, a business telephone number, and the town.

How we use it and our lawful basis

Retailer details provided by a third party

Because the retailer's contact details are supplied by a customer, the retailer did not give them to us directly. When we first contact a nominated retailer we tell them that a local customer asked us to get in touch, and how to opt out. Retailers can object to this contact at any time and we will stop.

Who we share it with

To run the promotion we use our customer-relationship and email platform, SwipeOne, alongside the hosting and workflow-automation systems described in section 5. We do not sell this information.

How long we keep it

We keep nomination data only as long as needed to run the promotion and meet our records and legal obligations, then delete or anonymise it. Marketing data is kept in line with section 7.

Your rights (section 8), our international-transfer safeguards (section 6), and the complaints route (section 9) all apply to this information. To exercise any right or to opt out, email [email protected].

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last changed. Material changes will be notified to active trade account holders by email where appropriate.