Who we are
EnvIQ® is operated by Mersey Mould Ltd, the data controller for this website, the Free Mould Risk Checker, enquiries and our own account, security and business administration records.
Mersey Mould Ltd is registered in England and Wales under company number 15630690. Our registered office is H S L Building, 437 Warrington Road, Rainhill, Prescot, England, L35 4LL. Our ICO registration reference is ZB949445.
For privacy questions or to exercise a data-protection right, email privacy@enviq.co.uk or mark@merseymould.co.uk, or write to our registered office.
Where this notice applies
This notice covers visitors to our website, people using our checker, prospective customers, customer account users and people whose property or environmental information is handled through EnvIQ.
A housing provider, landlord or other customer will usually decide why resident and property information is used in its EnvIQ workspace. In that situation the customer is normally the controller and Mersey Mould Ltd acts as its processor under a written agreement. Requests about customer-controlled records should usually be made to that customer first.
Information we collect
Website and enquiry information can include your name, work email, telephone number, organisation, role, property portfolio details, broad postcode area, contact preference, the issue described and your message.
Checker information can include indoor temperature, relative humidity, property details, broad postcode area, outdoor conditions, checker answers, calculated risk indicators and the contact details used to unlock a result.
Platform information can include account identity and access records; organisation, property, room and occupancy information; sensor identifiers and environmental readings; concerns, guidance, improvement plans, notifications, reports, support records and audit history.
Technical information can include cookie choices, session and attribution identifiers, page or action events, referring domain, campaign information, device or browser information, and hashed network or user-agent values used for security and abuse prevention. Service and hosting providers may create ordinary server logs.
Why we use information and our lawful bases
We use enquiry, checker and account information to take requested steps before a contract, perform our contracts and provide requested results or support.
We use necessary technical, security, service-quality and business records for our legitimate interests in operating, protecting and improving EnvIQ, provided those interests are not overridden by your rights.
We use information where needed to meet legal obligations, establish or defend legal claims, and keep appropriate company and financial records. Optional marketing and non-essential analytics are used only where consent is required and has been given. Consent can be withdrawn at any time.
Customers are responsible for identifying and documenting their own lawful basis for resident and property monitoring. EnvIQ is not intended for entering medical details or other special-category information into open text fields unless this has been expressly agreed and a lawful basis is in place.
Checker analysis and enquiry prioritisation
The checker applies fixed environmental rules to the information provided and may use available outdoor context to produce general guidance. It does not make a medical, structural, legal or housing-compliance decision.
We may assign an internal score or priority to an enquiry so our team can decide how quickly and appropriately to respond. This supports human review and does not produce legal or similarly significant effects for you.
Who receives information
Information is available only to authorised Mersey Mould Ltd personnel and, where relevant, the customer responsible for the workspace.
Our principal production suppliers include Vercel for application hosting, Supabase for authentication, database and storage, Resend for transactional email, Stripe for payments, and Wireless Logic Limited and its Kheiron/IoThink Solutions services for live sensor connectivity and environmental-data transfer. IONOS manages the enviq.co.uk domain. They may process information only for the relevant service under contractual obligations.
When you ask the Free Mould Risk Checker to look up outdoor conditions, the full postcode is sent to Postcodes.io to obtain coordinates. Those coordinates are then sent to Open-Meteo to obtain current temperature and relative humidity. EnvIQ converts the postcode stored with the checker result to the outward postcode area where possible.
SwitchBot is used only for testing and is not an active production monitoring provider. We may also disclose information where required by law, to professional advisers, or in connection with a properly managed business sale or reorganisation.
We do not sell personal information.
International transfers
Some suppliers may process or support information outside the United Kingdom. Where UK data-protection law requires it, we use an adequacy regulation or approved contractual safeguards and consider any additional protection needed. Contact us if you would like information about the safeguard relevant to your data.
How long we keep information
Checker records are normally kept for 12 months. Unsuccessful sales enquiries are normally kept for up to 24 months after the last meaningful contact. Marketing preferences are kept until consent is withdrawn or after 24 months without engagement, whichever comes first.
Customer account, contract and billing records are normally kept for the contract term and up to six years afterwards. Workspace environmental readings, reports and operational records are kept for the period agreed with the customer and then deleted or returned in line with that agreement, subject to legal retention needs.
Security and access logs are normally kept for up to 12 months. We may keep a record longer where a legal obligation, dispute, safeguarding need or active investigation requires it, and we periodically review records that remain necessary.
Your rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing.
Email privacy@enviq.co.uk to make a request. We may need to verify your identity. If the information is controlled by an EnvIQ customer, we will explain this and assist the customer where required.
You can complain to the Information Commissioner’s Office at ico.org.uk, although we would welcome the opportunity to address your concern first.
Marketing, children and changes
Marketing is optional. You can opt out using the method in a message or by emailing privacy@enviq.co.uk. Opting out does not affect service communications.
Our public website and checker are not directed at children, and we do not knowingly invite children to submit personal information. Customer organisations are responsible for appropriate arrangements where household information relates to a child.
We will update this notice when our processing or the law changes. Material changes will be highlighted where appropriate.
