Privacy policy | Elevate Consulting Solutions Ltd

Who we are

Elevate Consulting Solutions Ltd ("we", "us") is registered in England and Wales under company number 17254044. We are the data controller for the personal data described in this policy. Our registered office is at 213 Bennetts End Road, Hemel Hempstead, England, HP3 8DZ.

What data we collect

We collect personal data in three situations:

Website enquiries. When you use our contact form or email us, we receive your name, email address, phone number and company name if provided, and the content of your message.
Client engagements. During a consulting engagement we may process business contact details of client staff, and business data that incidentally contains personal data (for example, sales records or HR process documentation). This is governed by a written engagement agreement.
Website use. Our website uses local storage to remember your appearance and decorative-motion preferences. We do not use analytics or advertising cookies. See our cookie policy.

How we use it and our lawful basis

To respond to your enquiry and arrange a discovery call — legitimate interests (responding to a request you made).
To deliver a consulting engagement — performance of a contract.
To keep records required by law, such as accounting records — legal obligation.
To send you occasional updates about our services, only if you have asked for them — consent, which you can withdraw at any time.

We do not sell personal data and we do not use it for automated decision-making or profiling.

Who we share it with

We share personal data only where necessary with: our email and document-storage providers, who act as processors under contract; our accountants where required; and professional advisers or authorities where we are legally obliged to. Client engagement data is never shared with other clients or third parties without written agreement.

International transfers

Our systems are hosted in the UK or the European Economic Area where possible. Where a provider stores data outside the UK, we rely on the UK International Data Transfer Agreement or an adequacy decision.

How long we keep it

Enquiries that do not lead to an engagement: 12 months.
Client engagement records: 6 years after the engagement ends, to meet legal and accounting requirements.
Client business data provided for an engagement: returned or securely deleted at the end of the engagement unless you ask us to retain it.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent where consent is the lawful basis. To exercise any right, email us using the details below. We will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Security

Personal data is stored in access-controlled, encrypted cloud systems with multi-factor authentication. Client data is stored in engagement-specific workspaces and access is limited to the people working on that engagement.

Changes and contact

We may update this policy from time to time; the date at the top shows the latest version. Questions about this policy or your data should be sent to:

Elevate Consulting Solutions Ltd
213 Bennetts End Road
Hemel Hempstead
England
HP3 8DZ
Email: info@elevate-cs.co.uk