Privacy Policy

Who we are

This website is operated by Elevatima Ltd, a company registered in England and Wales, company number 17523794, whose registered office is 13 Jopling Road, Bisley, GU24 9FN, United Kingdom. Elevatima Ltd is the data controller for the personal information described in this policy under UK data protection law (the UK GDPR and the Data Protection Act 2018).

For any privacy question or request, contact us at elevatima@hotmail.com.

What information we collect

Enquiries. When you use the contact form we collect your name, email address, business name, website URL (optional), the service and package you are interested in, and anything you choose to tell us about your business. If you email us, we collect your email address and the content of your message.

Client information. If you become a client, we hold the information needed to deliver the project and manage our relationship, such as your contact details, project details and communications, materials you share with us, and invoices and payment records.

Website usage (only with your consent). If you accept analytics, we use Google Analytics 4 to collect information about how the site is used, such as pages visited, approximate location, device, browser type and how you arrived at the site. This uses cookies and online identifiers.

Technical data. Our hosting provider processes technical information such as your IP address and request details when your browser loads the site. This is needed to deliver the site and keep it secure.

Payments. We take payment by invoice and bank transfer. We do not collect card details on this website. We keep invoices and records of payments received.

We do not run a newsletter or email marketing list, and we do not collect personal information through the website for any other purpose.

How and why we use it, and our lawful bases

• To reply to your enquiry and discuss a possible project, including taking steps at your request before entering a contract (UK GDPR lawful bases: steps before entering a contract, and our legitimate interests in responding to business enquiries).
• To provide our services and manage our client relationship (lawful basis: performance of a contract).
• To issue invoices, receive payments and keep financial records (lawful bases: performance of a contract and compliance with legal obligations, such as accounting and tax law).
• To keep the website secure and run our business effectively, including handling disputes and protecting our legal rights (lawful basis: legitimate interests).
• To understand and improve how the website is used through Google Analytics (lawful basis: your consent, which you can withdraw at any time).

How contact form submissions are processed

When you submit the contact form, your details are sent to Formspree, our form provider, which processes them on our behalf and passes them to us by email. Formspree may also keep a copy of submissions in our Formspree account. The email notification is sent to the email address we use for the business. We use your details to reply to you, and we do not add you to any mailing list.

Who we share it with

We use the following types of service provider to run the site and our business. They process information on our behalf, or under their own privacy policies where they act as independent controllers.

• Cloudflare, Inc. (Cloudflare Pages): website hosting and security.
• Formspree, Inc.: processes contact form submissions.
• Google (Google Analytics 4): website analytics, only if you accept analytics.
• Our email provider: we receive and send business email through Microsoft Outlook/Hotmail.
• Starling Bank, our business bank, which processes payments we receive and holds our banking records.
• Professional advisers and authorities, such as lawyers, insurers, HMRC or other regulators, where we need to or are required by law.

We do not sell your personal information.

International transfers

Some of these providers are based in, or process information in, the United States or other countries outside the UK. Where personal information is transferred outside the UK, we make sure it is protected by a safeguard permitted under UK data protection law, such as an adequacy arrangement (for example the UK Extension to the EU–US Data Privacy Framework for certified US providers) or standard contractual clauses with the UK International Data Transfer Addendum. You can contact us for more information about the safeguards for a particular provider.

How long we keep it

• Enquiries that do not become projects: 12 months after our last meaningful interaction with you, unless we are legally required to keep them longer. We then delete them.
• Client information: for the duration of our work together, and afterwards for as long as we need it to meet accounting, tax and other legal obligations or to deal with a legal claim.
• Invoices and financial records: for six years from the end of the company financial year they relate to, as UK law requires for company accounting and tax records (longer if the law requires it).
• Analytics data: held in Google Analytics for the retention period set in our Google Analytics account settings, then deleted automatically.

Your rights

Under UK data protection law you have the right to:

• be told how we use your information and to access a copy of it;
• have inaccurate information corrected;
• ask us to erase your information in certain circumstances;
• ask us to restrict how we use your information in certain circumstances;
• object to processing based on our legitimate interests;
• receive certain information you gave us in a portable format; and
• withdraw your consent at any time, where we rely on consent (for example for analytics). Withdrawing consent does not affect processing carried out before you withdrew it.

To exercise any of these rights, email elevatima@hotmail.com. We may need to verify your identity, and we will respond within the time the law requires.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies and similar technologies

Essential storage. We save your cookie choice in your browser’s local storage so that we do not ask you again. This is strictly necessary to respect your preference and does not need your consent.

Analytics cookies (only with your consent). When you first visit, a banner asks whether you accept or reject analytics, with an equally easy button for each. Google Analytics 4 is not loaded, and no analytics cookies are set, unless you click “Accept analytics”. If you accept, Google Analytics sets cookies, such as _ga and _ga_ followed by an identifier, to recognise a browser and measure visits. We have switched off Google signals and ad personalisation features, and we do not use analytics for advertising.

Changing your mind. You can change or withdraw your choice at any time using “Cookie settings” in the footer of any page. If you reject or withdraw consent, analytics stops and we remove Google Analytics cookies we can access from your browser. You can also delete cookies at any time in your browser settings.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.