Privacy Statement (EU)

This statement applies to personal data processed by Elevate SaaS, Inc. ("Elevate", "we", "us") in connection with this website, where that processing is subject to the EU General Data Protection Regulation (GDPR) or the UK GDPR. Our general Privacy Policy describes our practices more broadly; where the two differ for individuals in the EU, EEA, Switzerland or the UK, this statement governs.

Personal data that customers place into the Elevate platform is processed on their instructions. For that data our customer is the controller and Elevate is the processor; the terms are set out in our Data Processing Addendum rather than here.

1. Purpose, data and retention period

Purpose, contact. We process personal data to respond to enquiries made by phone, post, email or through the forms on this website.

Data collected: name; company and address; email address; telephone number; and whatever you choose to include in your message.

Legal basis: your consent, and our legitimate interest in responding to enquiries about our services.

Retention: enquiry data is kept for as long as needed to deal with your enquiry and any resulting relationship, and is deleted on request.

2. Sharing with other parties

We do not sell personal data and we do not share enquiry data with third parties for their own purposes. We use service providers to operate this website and our business systems; they act on our instructions and are bound by confidentiality and data protection terms.

3. Cookies and similar technologies

This website does not set cookies of its own and does not run analytics or advertising trackers. Some content is served from third-party networks, which receive your IP address as a technical necessity of delivering it. This is described in the Cookie Policy (EU).

4. Security

We maintain technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access restricted to personnel who need it, and periodic review of those measures. Our security overview describes the platform controls in more detail.

5. International transfers

Elevate is established in the United States, so personal data covered by this statement is transferred outside the EEA and the UK. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) together with supplementary measures as required. A copy of the relevant transfer mechanism is available on request.

6. Third-party websites

This statement does not apply to websites we link to. We do not control how those operators process your data; please read their own privacy statements.

7. Amendments to this statement

We may amend this statement. The date at the top of the page shows when it last changed, and we recommend you review it periodically.

8. Your rights

Subject to the conditions in the GDPR, you have the right to be informed about our processing, to access your personal data, to have inaccurate data rectified, to have data erased, to withdraw consent, to data portability, to restrict processing, and to object to processing. To exercise any of these, contact us using the details below. We respond within one month, and may ask you to verify your identity first.

9. Submitting a complaint

If you are not satisfied with how we have handled your personal data, you may lodge a complaint with the supervisory authority in your country of residence, place of work, or the place of the alleged infringement. In the UK, this is the Information Commissioner's Office.

Contact details

Elevate SaaS, Inc.
Attn: Privacy Team
3990 Westerly, Suite 270
Newport Beach, CA 92660, USA
privacy@elevatesaas.com
www.elevatesaas.com