Privacy Policy

IPEnvoy is a service operated by Voll Studios Ltd, a company registered in England and Wales (company number [COMPANY_NUMBER]), whose registered office is at [REGISTERED_ADDRESS] (“we”, “us”, “our”). Voll Studios Ltd is the data controller responsible for your personal data.

We are registered with the UK Information Commissioner’s Office (ICO) under registration number [ICO_REGISTRATION_NUMBER].

For any privacy question, or to exercise your rights, contact us at privacy@ipenvoy.com.

IPEnvoy is an international IP referral platform and introducer. We help you understand your intellectual property position and then introduce or refer you to a vetted partner IP firm in the relevant jurisdiction. We are not a law firm, we are not a firm of patent or trade mark attorneys, and we are not regulated by the Solicitors Regulation Authority (SRA) or IPReg. We do not provide regulated legal or IP advice. Any regulated work is carried out by the partner firm you engage, under its own terms and its own regulator.

When you complete the IP assessment (“Assess your IP”), we collect:

• your name;
• your email address;
• your telephone number (if you provide it);
• your company or organisation name (if you provide it);
• the details of your intellectual property matter, including the free-text brief you write, the rights and jurisdictions you select, and answers about urgency, need and any existing filings.

Your free-text brief may contain further personal data or confidential business information if you choose to include it. Please share only what is necessary to describe your matter, and avoid sending special category data.

We also collect limited technical data automatically. We use cookieless Vercel Web Analytics, which measures page visits without cookies and without building a profile of you. See our Cookie Notice.

Under the UK GDPR we must have a lawful basis for each purpose. Our purposes and bases are:

• To produce and deliver your IP assessment and respond to your submission. Lawful basis: consent (Article 6(1)(a)), which you give by submitting the assessment form. You can withdraw consent at any time (see your rights below); withdrawal does not affect processing already carried out.
• To follow up with you about your enquiry and, where relevant, to introduce or refer you to a suitable partner IP firm. Lawful basis: legitimate interests (Article 6(1)(f)) — namely operating our referral service and responding to a genuine request you have made. We have balanced this against your interests and consider follow-up on an enquiry you initiated to be reasonably expected.
• To keep basic records of enquiries and referrals, to secure the service and to comply with our legal obligations. Lawful basis: legitimate interests and, where applicable, legal obligation (Article 6(1)(c)).

We do not use your data for automated decision-making that produces legal or similarly significant effects. The assessment produces general information to help a human review your matter; it is not a binding decision about you.

We share your personal data with the following categories of recipient:

• Partner IP firms. Where we introduce or refer you, we share the details relevant to your matter with the partner firm so it can contact you. That firm is a separate controller and will handle your data under its own privacy policy. We will make a referral only in order to respond to your request.
• Supabase — database and hosting for assessment submissions (EU-hosted infrastructure). Acts as our processor.
• Vercel — website hosting and cookieless web analytics. Acts as our processor.
• Email and communications providers — if and when used to reply to your enquiry. Act as our processors. [REVIEW: name the specific email provider once one is wired in; none is used at the time of writing.]

We do not sell your personal data. We may disclose data where required by law or to protect our rights.

We aim to keep assessment data hosted within the UK or European Economic Area (EEA). Some of our sub-processors are organisations that may process data outside the UK/EEA. Where personal data is transferred outside the UK, we rely on appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement (IDTA) / the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards in place.

We keep assessment enquiries and referral records for as long as needed to handle your matter and for a reasonable period afterwards to manage the referral relationship and meet legal and accounting requirements, and no longer than necessary. As a general guide we retain enquiry data for up to 24 months after our last contact, unless you ask us to erase it sooner or a longer period is required by law. [REVIEW: confirm the retention period with the business.]

Under the UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased in certain circumstances;
• restrict our processing in certain circumstances;
• data portability (receive your data in a machine-readable format);
• object to processing based on legitimate interests; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email privacy@ipenvoy.com. We will respond within one month.

If you are unhappy with how we have handled your data, please contact us first so we can try to resolve it. You also have the right to complain to the ICO, the UK supervisory authority, at ico.org.uk.

Details of the cookies and similar technologies we use are set out in our Cookie Notice.

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be reflected on this page.