Privacy

How we handle your personal data when you visit this website, email us or book a call.

Website version v1.1-draft. Effective . Based on our Privacy Policy version 1.0 of , which is being updated.

Who we are

Elevare Research & Technology Ltd (“we”, “us”) is the data controller for the personal data described here.

  • Registered in England and Wales, company number 17245796
  • Registered office: 128 City Road, London EC1V 2NX
  • Registered with the Information Commissioner’s Office (ICO), registration number ZC174493
  • Data protection contact: dpo@elevarert.com

This notice covers people who visit our website, email us or book a call. When we handle personal data for a client as part of a project, we act as their processor under a data processing agreement, and that agreement applies instead of this notice.

What we collect

When you visit this website

Our web server records each request: the date and time, the page asked for, a shortened (masked) form of your IP address, and technical details your browser sends, such as the browser type and the page that linked to us. We use these records to keep the site secure and working. We do not use analytics.

When you book a call

The “Book a call” button opens Microsoft Bookings, a page run by Microsoft. There you give us your name, your email address, your phone number if you choose to, your company name, and your answer to our question about the task that takes too much of your team’s time. We also receive the time you choose.

Bookings sends you a confirmation and a Microsoft Teams invitation for the call. We may make notes during the call.

You do not have to use Bookings. You can email info@elevarert.com instead.

When you email us

We receive your email address, your name and whatever you choose to include.

Please do not send us sensitive information, such as details of health, unless we have asked for it for a specific reason.

Why we use it, and our lawful basis

  • To arrange and hold a call, and to reply to your emails. Legitimate interests: responding to people who contact us about our services. Where you ask us to quote for work, we are also taking steps you have asked for before a contract.
  • To follow up after a call about work that may be relevant to you. Legitimate interests. You can ask us to stop at any time.
  • To keep our website and server secure and working. Legitimate interests.

If you become a client, our contract explains how we use your data to deliver the work and to keep the financial records the law requires.

Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time (see “Your rights”).

Who we share it with

We do not sell personal data and we do not use it for advertising. We use these service providers, who act on our instructions under contract:

  • Microsoft, for Microsoft 365: our email, calendar and Bookings, and Teams for calls.
  • DigitalOcean, which hosts this website and its server records on a server in London.
  • Cloudflare, which stores off-site backup copies of the databases on our London server, in a storage bucket held in the European Union. Website server records and booking details are not held in those databases.
  • Our accountant, only if you become a client or a supplier.

Where your data is kept

This website and our server are in London.

Booking details and emails are held in our Microsoft 365 service. Microsoft may handle some of this data outside the UK, for example to provide support. Microsoft’s data protection terms set out the safeguards for those transfers.

Our backup copies are stored in the European Union.

We use an AI service based in the United States only with our own internal information or with made-up (synthetic) data. It is never given your personal data.

How long we keep it

  • Website server records: kept for up to 90 days, then deleted automatically.
  • Booking details and emails, if we do not go on to work together: 12 months from our last contact, or 24 months if we discussed a specific piece of work that did not go ahead.
  • Notes from a call: 90 days, unless we agree a piece of work.
  • If you become a client: the length of the contract plus seven years, for legal and tax reasons.

How we protect it

  • This website is only served over encrypted connections (HTTPS).
  • Our server is in London. Access to it needs a security key, and our database cannot be reached from the internet.
  • Our databases are backed up every night to off-site storage in the European Union.
  • We build and test our systems with synthetic data, not real personal data.

Cookies

This website sets no cookies and stores nothing on your device. It uses no analytics or advertising tools, and it does not load anything from other companies’ servers.

Microsoft Bookings is a separate page run by Microsoft. When you press “Book a call”, you leave our website. Microsoft’s page sets its own cookies, stores information in your browser and sends usage data to Microsoft. We do not control this. Microsoft’s privacy statement explains it. If you would rather not use Bookings, email us instead.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you
  • have it corrected if it is wrong
  • have it deleted
  • ask us to restrict how we use it
  • object to how we use it, including any follow-up from us
  • receive it in a format you can take elsewhere
  • withdraw your consent, where we rely on consent

To use any of these rights, email dpo@elevarert.com. We will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office.

Changes to this notice

We update this notice when the way we handle personal data changes. The version and date at the top show which version you are reading.

Contact us