Quick Links
Privacy Policy
Last updated: 4 October 2026
This policy explains how We Are Elevate Ltd (“Elevate”, “we”, “us”) collects and uses personal information when you visit weareelevate.com, contact us, or work with us. It also explains your rights and how to use them.
1. Who we are
We Are Elevate Ltd is the controller of your personal data. We are a company registered in England and Wales (company number 07290803). Our registered office is 6 Herron Walk, London, SE13 6BF, United Kingdom. Our team also works from Dublin and Barcelona.
For any privacy question or request, email info@weareelevate.com with “Privacy” in the subject line, or write to us at our registered office.
2. The information we collect
- Information you give us. When you use our contact form, we collect your name, email address, the service you’re interested in, your budget range and your message. We also collect anything you send us by email or phone.
- Client and supplier information. If you work with us, we hold business contact details, project correspondence, and the details needed for contracts and invoices.
- Information collected automatically. With your consent, analytics and advertising cookies collect information such as pages viewed, approximate location, device and browser type, and how you arrived at our site. Our Cookie Policy has the details.
- Technical and security data. Our hosting and security tools process your IP address and request details to keep the site running and to block spam and attacks.
We don’t ask for special category data (for example, health information), and please don’t send it to us.
3. How we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| 3.1 Replying to your enquiry and discussing a possible project | Legitimate interests (answering people who contact us). If you’re asking about a contract with us, the basis is also steps taken before entering a contract. |
| 3.2 Delivering our services, invoicing and managing our client relationship | Contract. Legal obligation for tax and accounting records. |
| 3.3 Website analytics (Google Analytics 4) and measuring our Google Ads | Consent, given through our cookie banner. You can change it at any time using “Cookie settings”. |
| 3.4 Identifying organisations that visit our site, and contacting business prospects whose work contact details we get from Apollo.io. If we contact you this way, we’ll tell you where we got your details in our first message. | Website visitor identification: consent (cookie banner). Business prospecting: legitimate interests (promoting our services to relevant businesses). We always give you an easy way to opt out. |
| 3.5 Keeping the website secure and blocking spam | Legitimate interests (protecting our site and inbox) |
| 3.6 Sending you marketing emails | Consent, or for existing clients, the “soft opt-in” under PECR. You can unsubscribe at any time. |
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Our spam filter scores form submissions automatically, but genuine enquiries that are blocked by mistake can always reach us by email.
4. Cookies and Consent Mode
Analytics and advertising cookies are only set if you choose “Accept” on our banner. We use Google Consent Mode. If you decline, Google tags still send limited signals that contain no cookies (for example, that a page was viewed), and Google uses these to model aggregate statistics. Our Cookie Policy lists each cookie, and you can change your choice through Cookie settings.
5. Who we share it with
We don’t sell your personal data. We share it only with service providers who process it on our behalf and under contract:
| Provider | What they do |
|---|---|
| WP Engine | Website hosting |
| Google (Workspace, Analytics, Tag Manager, Ads) | Email, website analytics and ad measurement |
| Apollo.io | Website visitor insights and business prospect data |
| Patchstack | Website security monitoring |
We may also share information with professional advisers (such as accountants or lawyers), or where the law requires us to.
6. International transfers
Some of our providers process data outside the UK, mainly in the United States. When they do, we rely on appropriate safeguards: the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”) where the provider is certified, or the ICO’s International Data Transfer Agreement or Addendum. You can contact us for more information.
7. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that don’t lead to work | 24 months from our last contact |
| Client records, contracts and invoices | 6 years after the end of the financial year they relate to (tax and legal requirements) |
| Google Analytics data | 14 months, then automatically deleted |
| Your cookie choice (elevate_consent) | 6 months |
| Security logs | Up to 90 days |
8. Your rights
Under UK data protection law (and the EU GDPR, where it applies), you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how we use your data
- object to processing based on legitimate interests, and to all direct marketing
- data portability, where processing is based on consent or contract
- withdraw consent at any time (this doesn’t affect processing that happened before)
To use any of these rights, email info@weareelevate.com. We’ll reply within one month. We may need to confirm your identity first.
9. Complaints
If you’re unhappy with how we’ve handled your data, please email us first at info@weareelevate.com so we can put it right. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or, if you’re in Ireland, to the Data Protection Commission at dataprotection.ie.
10. Children
Our services are for businesses. We don’t knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.