TRY before you BUY

START HERE
TRY FIRST
TRY FIRST
logotype

Privacy Policy

Effective Date: 6 October 2020

Company Name: Evoleze

Website: evoleze.com

Registered in: United Kingdom

Email: support@evoleze.com

1. Introduction

Evoleze (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase a product or service, or interact with us on social media platforms.

By using our website or services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect and process the following information:

A. Personal Information

  • Name
  • Email address
  • Business name
  • Billing and payment information
  • Social media handles

B. Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Cookies and tracking pixels
  • Pages visited, time on site, and referring URLs

C. Marketing and Communications Data

  • Your preferences in receiving marketing from us
  • Your communication preferences
  • Information provided through surveys, forms, or social media interactions

3. How We Use Your Information

We use your data to:

  • Provide and manage our products and services
  • Process payments and maintain client accounts
  • Personalise your experience
  • Send transactional and marketing emails
  • Deliver lead magnets, downloads, and course access
  • Analyse performance and improve our website
  • Comply with legal or regulatory obligations

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data using the following lawful bases:

  • Contractual necessity: to provide services you have purchased.
  • Consent: for marketing emails or lead magnets.
  • Legitimate interests: to improve services, prevent fraud, and maintain security.
  • Legal obligation: when required by law or regulation.

5. Data Storage and Security

We store your personal data securely using encrypted systems and reputable third-party service providers such as:

  • Omnisend (email automation)
  • Stan Store (digital sales platform)
  • Zapier (automation platform)
  • ManyChat (social media automation)

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse.

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

Marketing data is retained until you withdraw consent or unsubscribe.

7. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data (“right to be forgotten”).
  • Restriction: Limit how we process your data.
  • Objection: Object to processing based on legitimate interests.
  • Data portability: Request transfer of your data to another controller.

To exercise your rights, contact us at support@evoleze.com.

8. Cookies and Tracking

We use cookies and tracking tools such as Meta Pixel and Google Analytics to analyse website performance and marketing effectiveness.

You can disable cookies in your browser settings, but some features may not function correctly.

9. Third-Party Links

Our website may include links to third-party sites, such as payment processors or social platforms.

We are not responsible for the privacy practices or content of these websites.

10. Children’s Privacy

Our services are not directed toward individuals under 16 years of age. We do not knowingly collect data from children.

11. International Data Transfers

Where necessary, we may transfer your personal data outside the UK.

We ensure all transfers comply with the UK GDPR using standard contractual clauses or equivalent safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with an updated “Effective Date”.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

Evoleze

Email: support@evoleze.com

Website: evoleze.com

ALEX — Canva app privacy notice

Updated 20 October 2026. This section applies specifically to ALEX inside Canva. The rest of this policy continues to describe our website and other services; where it conflicts about ALEX processing, this section takes precedence. ALEX is supplied by Evoleze Limited (company 11048957), Kemp House, City Road, London, EC1V 2NX. Contact alex@evoleze.com.

Photographs, logos and editing

You select photographs, club and sponsor logos, and match information. ALEX reads the active page layout to check it matches the supported template, then processes the edit you request. Background removal and face-position calculations run on your device using BiRefNet Lite and Google MediaPipe. Face positioning estimates location and size; it does not identify people or build identifying profiles. ALEX does not use your photographs to train models.

Model and runtime files are downloaded from Hugging Face, Google and jsDelivr, and public design configuration is downloaded from Cloudflare. These providers receive normal network metadata, such as IP addresses. Your selected photographs are not sent to those model hosts. Generated images and selected logos are uploaded to Canva, which stores the design and assets under its own privacy policy. Evoleze does not operate a server-side photograph database for ALEX.

Files and match text remain in panel memory until it closes or reloads. Public configuration and model files may be cached by your browser. Closing ALEX or clearing its cache does not delete uploads saved in Canva; manage those in your Canva account.

Membership and essential emails

To verify membership we process your Canva app user and workspace identifiers, checkout email, Stripe customer and subscription references, membership status and expiry, activation records, payment-event records and service-email records. We use Cloudflare Workers/D1 for access checks and storage, Stripe for payment and subscription information, and Mailchimp Transactional for essential emails. ALEX does not collect card numbers in its Canva interface.

Membership belongs to the individual Canva user who activates it. Activation is required separately in each workspace without another purchase. Checkout and Canva email addresses can differ. Codes are single-use, expire after 48 hours and are bound to the requesting Canva user and workspace. We use these records to supply and protect access, send activation and payment-service messages, resolve support requests and prevent abuse. If an activation request has no matching active membership, we may send the requested purchase-options email instead; it does not grant access.

Requesting activation or buying membership does not subscribe you to marketing. Canva-provided user data is not used for marketing. Any marketing signup is separate and optional.

Purposes and lawful bases

We process data needed to deliver the editing and membership service under our contract with the customer. Security, fraud prevention, necessary ownership records and support rely on our legitimate interests in operating and protecting ALEX, balanced against individuals' rights. Records required by law are retained for legal obligations. A club supplying another person's photograph must establish its own lawful basis and permissions. Where processing on behalf of an organisation requires a separate agreement, that arrangement must be agreed with us.

Retention and uninstalling

Completed payment-event payloads are cleared after 7 days; minimal event receipts used to avoid duplicate processing are deleted after 90 days. Completed or suppressed service-email records are deleted after 30 days. Scheduled cleanup runs in bounded batches, so removal follows the applicable threshold at the next available cleanup runs. Pending or failed records are retained for delivery, investigation or operator review until resolved, then the completed-record periods apply. Operators review exhausted jobs and records outstanding over 30 days. Activation codes expire after 48 hours and their records are normally removed after a further 24 hours.

Membership links and minimal billing-ownership records are retained while needed to provide access and prevent a subscription being transferred to another Canva user. We review the necessity of the minimal ownership record annually and at verified final account closure. Support records are retained while needed to resolve the request and related disputes or legal duties, then deleted or minimised. Stripe, Mailchimp and Canva retain their own records under their applicable policies and legal duties.

Uninstalling disconnects that Canva workspace and revokes its activation records. It does not automatically cancel your Stripe subscription, erase billing-ownership records, remove other workspaces or delete Canva assets. Use Manage ALEX membership to cancel renewal, or contact alex@evoleze.com.

Your rights and deletion requests

Email alex@evoleze.com to request access, correction, deletion, restriction or portability where applicable, or to object to processing based on legitimate interests. We verify the request using the linked Canva account and checkout ownership before making changes, using only the information necessary. Verified deletion disconnects relevant access and removes or minimises associated application records; minimal ownership, accounting, security or legal records may be retained where necessary, with the reason explained. Provider-held data is handled separately with the relevant provider. A data-deletion request is separate from cancelling renewal or requesting a refund.

Canva manages the assets and account information it stores. You may complain to the UK Information Commissioner's Office or your local supervisory authority.

Users, image permissions and providers

ALEX is intended for adults aged 18 or older. Adults may use authorised photographs of younger players with the necessary rights and permissions. Selecting content grants Evoleze no marketing or publication rights over it. You choose what to provide; without required fields ALEX cannot generate that design.

Provider information: Canva — https://www.canva.com/policies/privacy-policy/ ; Cloudflare — https://www.cloudflare.com/privacypolicy/ ; Stripe — https://stripe.com/privacy ; Mailchimp — https://www.intuit.com/privacy/statement/ ; Hugging Face — https://huggingface.co/privacy ; Google — https://policies.google.com/privacy ; jsDelivr — https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net ; ICO — https://ico.org.uk/make-a-complaint/

Privacy: ALEX for Photoshop

ALEX for Photoshop is supplied by Evoleze Limited, company 11048957, Kemp House, City Road, London, EC1V 2NX. For privacy requests and support, contact alex@evoleze.com.

The Photoshop panel opens and edits your selected photographs and logos using Adobe Photoshop. The ALEX membership service does not receive those image files. Adobe’s own processing and privacy settings apply to Photoshop features. Your generated graphics and downloaded editable templates are saved on your computer. You retain your rights in your content; selecting content does not grant Evoleze marketing or publication permission.

For sign-in, membership and abuse prevention, we process your checkout email, a generated installation identifier, the computer name you choose, registration and session records, short-lived sign-in and recovery records, and the identifiers of templates requested. The installation identifier is generated by the app; it is not hardware attestation. We also process Stripe customer/subscription references, entitlement and payment-event information, and essential service-email delivery records. Card details are handled by Stripe and are not entered into ALEX.

Cloudflare Workers, D1 and private object storage supply access checks, service records, previews and template downloads. Stripe supplies payment and subscription information. Mailchimp Transactional delivers requested sign-in codes and essential membership emails. These service messages do not subscribe you to marketing. A Photoshop purchase and sign-in are handled separately from Canva; an eligible bundle supports both products through their respective sign-in flows.

Sign-in codes expire after 10 minutes and are single-use. Sessions expire after 7 days unless ended earlier. Expired access records are removed by scheduled cleanup. Computer registrations remain until removed through account management or account deletion. The panel’s “Delete Photoshop sign-in data” action removes Photoshop sign-in linkage, registrations and sessions; it does not cancel a subscription or delete Stripe billing records, other products, your locally saved artwork or templates. Payment and service-email records are managed separately for service operation, support and applicable record-keeping obligations. Contact us about access, correction, deletion or other data-protection requests. You can complain to the Information Commissioner’s Office.

The panel stores its sign-in securely on your computer and remembers local display/save-folder preferences. The “Reduce animation” preference controls whether the ALEX loading head moves. These preferences are separate from membership.