This Privacy Policy explains how Elevate Cloud ("Elevate Cloud", "we", "us", or "our") collects, uses, stores, discloses, and protects personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and other applicable laws.
If you use our services, visit our website, communicate with us, or otherwise interact with us, you agree to the practices described in this Privacy Policy.
1. Company Information
Elevate Cloud
Chippenham, Wiltshire, United Kingdom
Email: privacy@elevate-cloud.co.uk
Website: elevate-cloud.co.uk
For the purposes of data protection law, Elevate Cloud is the "Data Controller" of your personal data unless otherwise stated.
2. Scope of This Policy
This Privacy Policy applies to:
- Our website and online services
- Managed IT services
- Telephony and communications services
- Microsoft 365 and cloud services
- Connectivity and internet services
- Customer support and technical assistance
- Marketing and business development activities
- Supplier and contractor relationships
This policy does not apply to third-party websites or services not controlled by us.
3. Information We Collect
We may collect and process the following categories of personal data:
3.1 Identity and Contact Data
- Full name
- Company name
- Job title
- Business and personal email addresses
- Telephone numbers
- Postal address
3.2 Technical Data
- IP addresses
- Browser type and version
- Device identifiers
- Operating system
- Usage logs
- Authentication records
- Security and audit logs
3.3 Service Data
- Support tickets
- Communications records
- Service configuration data
- Licensing information
- Account credentials (encrypted where applicable)
3.4 Financial Data
- Billing address
- Payment records
- VAT information
- Transaction history
3.5 Marketing and Communications Data
- Marketing preferences
- Newsletter subscriptions
- Event attendance
- Survey responses
3.6 Special Category Data
We do not intentionally collect special category personal data unless strictly necessary and legally permitted.
4. How We Collect Data
We collect data through:
- Direct interactions with you
- Website forms and enquiries
- Contracts and service agreements
- Cookies and analytics tools
- Customer onboarding processes
- Support interactions
- Third-party service providers and partners
- Publicly available business sources
5. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
- Performance of a contract
- Legitimate interests
- Legal obligation
- Consent
- Protection of vital interests
Where processing is based on consent, you may withdraw consent at any time.
6. How We Use Personal Data
We use personal data to:
- Deliver contracted services
- Provide IT support and customer service
- Manage customer relationships
- Process payments and invoices
- Improve services and security
- Detect and prevent fraud or cyber threats
- Comply with legal and regulatory obligations
- Send relevant business communications and marketing
- Maintain internal business records
We will never sell personal data to third parties.
7. Marketing Communications
We may send business-related marketing communications where legally permitted.
You may opt out at any time by:
- Clicking "unsubscribe" in marketing emails
- Contacting us directly
- Emailing privacy@elevate-cloud.co.uk
We will continue to send necessary service-related communications even if marketing preferences are withdrawn.
8. Cookies and Tracking Technologies
Our website may use cookies, analytics tools, and similar technologies to improve functionality and performance.
Cookies may include:
- Essential cookies
- Analytics cookies
- Security cookies
- Preference cookies
Users may manage cookies through browser settings.
Where required by law, consent will be obtained before non-essential cookies are used.
9. Data Sharing and Third Parties
We may share data with trusted third parties including:
- Microsoft and cloud infrastructure providers
- Telecoms and connectivity providers
- Payment processors
- Professional advisers
- Security and compliance providers
- Hosting and backup providers
- Regulatory authorities where legally required
All third parties are required to implement appropriate security and confidentiality measures.
10. International Transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are implemented, including:
- UK adequacy regulations
- International Data Transfer Agreements (IDTAs)
- Standard Contractual Clauses (SCCs)
- Approved certification mechanisms
11. Data Retention
We retain personal data only for as long as reasonably necessary to:
- Fulfil contractual obligations
- Comply with legal requirements
- Resolve disputes
- Enforce agreements
Retention periods vary depending on the nature of the data and legal obligations.
When data is no longer required, it is securely deleted or anonymised.
12. Information Security
We implement appropriate technical and organisational measures including:
- Encryption
- Access controls
- Multi-factor authentication
- Security monitoring
- Firewall and endpoint protection
- Staff confidentiality obligations
- Regular vulnerability management
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Your Legal Rights
Under UK GDPR, individuals may have rights including:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Rights relating to automated decision-making
Requests may be submitted to privacy@elevate-cloud.co.uk.
We may require identity verification before responding.
14. Data Breaches
In the event of a personal data breach, we will:
- Investigate and contain the incident
- Notify affected parties where legally required
- Notify the Information Commissioner's Office ("ICO") where required by law
- Maintain breach records and remediation procedures
15. Third-Party Services
Our services may integrate with third-party platforms including:
- Microsoft 365
- VoIP and telecoms systems
- Cloud infrastructure providers
- Backup and disaster recovery platforms
Use of third-party services may also be subject to their own privacy policies and terms.
16. Children's Privacy
Our services are intended for business users and are not directed toward children under the age of 18.
We do not knowingly collect personal data from children.
17. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.
18. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time.
Updated versions will be published on our website with a revised effective date.
Continued use of our services following changes constitutes acceptance of the updated policy.
19. Complaints
If you have concerns about how we process personal data, please contact us first.
You also have the right to lodge a complaint with:
Information Commissioner's Office
ico.org.uk
20. Contact Us
For all privacy-related enquiries:
Elevate Cloud
Chippenham, Wiltshire, United Kingdom
Email: hello@elevate-cloud.co.uk
Website: elevate-cloud.co.uk