Privacy Policy

Last updated: 14 December 2025

This Privacy Policy explains how Elevyn ("we", "us", "our") collects, uses and protects personal information when you visit our website or contact us. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Data Controller:

Elevyn

Business mailing address: [Insert business mailbox address]

Email for privacy enquiries: privacy@chriscarswell.co.uk

2. What Personal Data We Collect

We collect the following information when you interact with our website:

a. Information you provide directly

via contact forms or email:

  • Name
  • Email address
  • Message content

b. Automatically collected data

Through Google Analytics:

  • IP address (anonymised where possible)
  • Device type
  • Browser type
  • Pages viewed
  • Time spent on the site
  • Referring website

Google Analytics may use cookies — see Section 7.

3. How We Use Your Information

We use personal data for:

  • Responding to enquiries or requests
  • Providing consultancy information or proposals
  • Improving website performance and user experience
  • Maintaining website security
  • Fulfilling legal or regulatory obligations

We do not sell personal data and never share your details with third parties for marketing.

4. Lawful Bases for Processing (UK GDPR)

We rely on the following lawful bases:

  • Legitimate Interests: responding to enquiries, improving the website
  • Consent: for analytics cookies (Google Analytics)
  • Legal Obligation: record keeping, compliance requirements

5. How Long We Keep Your Data

  • Contact form submissions: up to 12 months
  • Emails sent directly: up to 24 months
  • Analytics data: retained according to your Google Analytics settings (typically 14 months unless modified)

We only retain data as long as necessary for the purposes listed above.

6. How We Share Your Data

Your information may be shared with:

  • Website hosting provider (for secure operation of the site)
  • Google Analytics (to analyse website usage)

All third parties are required to comply with UK data protection laws.

We do not transfer your personal data outside the UK unless adequate safeguards exist (e.g., Standard Contractual Clauses used by Google).

7. Cookies & Tracking Technologies

We use cookies for:

  • Analytics (Google Analytics)
  • Basic website functionality

You will be asked to accept or reject non-essential cookies on your first visit. You can change cookie preferences via your browser settings at any time.

8. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (right to be forgotten)
  • Object to processing based on legitimate interests
  • Withdraw consent (analytics cookies)
  • Request data portability

To exercise these rights, contact: privacy@chriscarswell.co.uk

9. Data Security

We take appropriate technical and organisational measures to protect your data, including secure hosting, encryption where applicable, and restricted access controls.

10. Third-Party Links

Our website may include links to external sites such as LinkedIn. We are not responsible for their privacy practices, and you should review their policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.

12. Contact Us

If you have any questions about this policy or your data rights, contact:

Email: privacy@chriscarswell.co.uk

Address: [Insert business mailbox address]