Last updated: October 25, 2026
This policy explains what personal data we collect when you visit envoblocks.com and demos.envoblocks.com (together “the websites”), when you buy an Envo Blocks product, and when you use our plugins. We collect as little as possible: only what we need to run the websites, deliver what you bought and meet our legal obligations.
Who we are
The websites and the Envo Blocks plugins and theme are run by the Envo Blocks team (“we”, “us”), who decide how your personal data is used.
If you have any question about your data or want to use any of your rights, write to info (at) envoblocks (dot) com. We reply within one month at the latest.
What data we collect and why
Visiting the websites
Our web server records technical data about every request: your IP address, the date and time, the requested page, the referring page and your browser’s user agent. We use these logs only to keep the websites secure and working, and to find errors. They are kept for a limited time and then deleted automatically. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
We do not use Google Analytics, advertising or social media trackers, and we do not load fonts or scripts from Google.
Buying a product
Orders on envoblocks.com are processed by our online reseller FastSpring (Bright Market, LLC, USA), which acts as the merchant of record. FastSpring collects your payment details, issues the invoice, handles taxes and refunds, and processes this data under its own privacy policy: https://fastspring.com/privacy/. We never see or store your card details.
From the order we receive and keep your name, e-mail address, billing country, company name (if you enter it), the products you bought and the order history. We need this data to send you the license key, give you access to downloads and updates, and provide support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legal obligations in tax and accounting (Art. 6(1)(c) GDPR).
You can also create a customer account. It stores your details, orders, licenses and downloads so you can manage them later. You can ask us to delete your account at any time.
Licenses and plugin updates
When you activate an Envo Blocks PRO license, the plugin sends our license server the license key, the domain of the website where it is installed, the plugin version, the WordPress version and the website address. The same data is sent when the plugin checks the license status or looks for updates. We use it to validate the license, limit activations to the number of sites in your plan and deliver updates. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
When you import a template or preview a design in the plugins, images are downloaded from demos.envoblocks.com and assets.envoblocks.com. These servers see the IP address of your website or browser in their logs, as described above.
Contact and support
When you write to us through the contact form or by e-mail, we process your name, e-mail address and message, and for PRO support also your license key, order number and website address. We use them to answer you and to check that a support request belongs to a valid license. The contact form does not store your IP address. We keep the conversation as long as needed to resolve your request and for possible follow-up support. Legal basis: our legitimate interest in answering your questions and, for customers, performance of a contract (Art. 6(1)(f) and (b) GDPR).
We do not send newsletters or marketing e-mails without your explicit consent.
The demo website
The shop on demos.envoblocks.com is a demonstration of our blocks and templates. Nothing is sold or shipped there. Please do not enter real personal or payment details in its cart, checkout or account forms.
Comments
If you leave a comment, we store your name, e-mail address, website (optional), the comment itself, your IP address and browser user agent (to detect spam). A hash of your e-mail address may be sent to the Gravatar service (Automattic Inc., USA) to show your profile picture; see https://automattic.com/privacy/. Legal basis: our legitimate interest in running a comment section without spam (Art. 6(1)(f) GDPR). Comments are kept until you ask us to delete them.
Cookies
The websites use only the cookies needed for logging in, the shopping cart and remembering your cookie choice. These essential cookies do not require consent.
With your consent, WooCommerce also stores where you came from (for example a search engine or a link on another site) in “sbjs_*” cookies and attaches it to your order. This helps us understand which channels bring customers. If you choose “Essential only”, these cookies are not created, and choosing it later deletes them.
| Cookie | Purpose | Expiry | Type |
|---|---|---|---|
wordpress_*, wordpress_sec_*, wordpress_logged_in_* | Keeps a user logged in. | Session / 14 days | Essential |
wordpress_test_cookie | Checks that the browser accepts cookies. | Session | Essential |
wp-settings-*, wp-settings-time-* | Admin interface preferences of logged-in users. | 1 year | Essential |
comment_author_* | Remembers name and e-mail in comments, only when the visitor ticks the box. | 1 year | Essential |
woocommerce_cart_hash, woocommerce_items_in_cart | Contents of the shopping cart. | Session | Essential |
wp_woocommerce_session_* | Links the visitor to their cart. | 2 days | Essential |
woocommerce_recently_viewed | Recently viewed products. | Session | Essential |
store_notice* | Remembers a dismissed store notice. | Session | Essential |
sbjs_* | Where the visitor came from (WooCommerce order attribution). | Until 30 minutes of inactivity | With consent |
scc_consent | Stores your cookie consent choice. | 180 days | Essential |
Who receives your data
We do not sell your data. We share it only with service providers who help us run the websites and the business, and only to the extent they need:
- our hosting provider Český hosting (THINline s.r.o., Czech Republic), which stores the websites, their databases and e-mails in the EU,
- FastSpring (Bright Market, LLC, USA), which processes orders and payments,
- our accountant and tax advisor, for accounting,
- Gravatar (Automattic Inc., USA), if you comment on the websites,
- public authorities, if the law requires it.
Some providers process data outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on the Standard Contractual Clauses.
How long we keep your data
- Orders: as long as tax and accounting law requires (in the Czech Republic up to 10 years).
- License records: for the life of the license and then as long as orders are kept.
- Customer accounts: until you ask us to delete them; order records required by law are kept even then.
- Server logs: a limited time set by our hosting provider.
- Support messages and comments: as described above.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy,
- have inaccurate data corrected,
- have your data deleted when we no longer need it or have no legal reason to keep it,
- restrict the processing of your data,
- receive the data you gave us in a machine-readable format (data portability),
- object to processing based on our legitimate interest,
- withdraw your consent at any time, without affecting processing done before the withdrawal.
To use any of these rights, write to info (at) envoblocks (dot) com. We may need to verify your identity first.
If you believe we process your data unlawfully, you can file a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz) or with the data protection authority in your country.
Security
The websites use encrypted connections (HTTPS). Access to customer data is limited to people who need it, and we keep WordPress, WooCommerce and all plugins up to date.
Children
Our products are intended for businesses and website owners. We do not knowingly collect data from children under 16.
Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. Significant changes will be announced on the websites.