Privacy policy.

Your privacy, protected. Exactly how your data is handled, in plain English, with the legal wording kept only where it has to be.

Last updated 21 October 2026

Who we are

Elevate & Automate is the data controller for the information described on this page. That means we decide what is collected and why, and we are the ones accountable for it.

If you are a client and your own customers' details sit in an account we run for you, you are the controller of that data and we handle it on your behalf, under our terms of service.

Address: Elevate and Automate Ltd (company no. 17083418), 30b Bramhall Lane South, Stockport, SK7 1AH

Contact: [email protected]

Information collection

Depending on whether you are browsing the site, getting in touch or working with us, we collect some of the following:

Identity and contact data: your name, business name, email and phone number.

Technical data: your IP address, device and browser, and how you use the website. Analytics and advertising cookies are only used if you accept them.

Project and account data: what you tell us on calls, in messages or during onboarding, such as your business goals, how you work now and the tools you use.

Payment data: handled securely by Stripe for platform plans and invoices. We never see your full card number.

What we collect

  • Contact details (name, email, phone)
  • What you tell us about your business
  • How the website is used

What we don't

  • Your full card details
  • Your browsing on other websites
  • Anything we don't need for the work

Usage of information

We use your data only when we have a lawful basis to do so. This includes:

Contract: to deliver what we have agreed, whether that is a build, your platform account or ongoing support.

Legitimate interests: to reply to enquiries, keep our systems secure, and check that the automations we run for you are working properly.

Consent: for analytics and advertising cookies, and for marketing emails or messages you have opted in to. You can withdraw it at any time.

We look at website analytics as totals and trends, such as which pages people read and where they leave, not to build a picture of any one person.

Data sharing

We never sell your data. We only share it with the providers that make the website and our services work:

GoHighLevel: hosts this website, our CRM, bookings, chat and the platform accounts.

Stripe: processes payments.

Cloudflare: protects the website and keeps it online.

Google Analytics: measures how the website is used, only if you accept analytics cookies.

Meta: measures our adverts, only if you accept advertising cookies, and carries WhatsApp messages if you contact us that way.

n8n and Anthropic: run some of the automations and AI features we build. Only the data a task needs is sent to them.

Strict SMS disclaimer: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

Where your data is held

Several of these providers, including GoHighLevel and Stripe, are based in the United States, so some of your data is transferred outside the UK.

Each transfer is covered by a safeguard UK law recognises, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum, depending on the provider. Ask us if you want to know which one applies.

How long we keep it

We keep your data only as long as we have a reason to.

Clients: for as long as we are working together, and for six years afterwards, in line with the time we have to keep business records.

Financial records: six years, because HMRC requires it.

Enquiries that did not become work: 12 months, then deleted.

You can ask us to delete your data sooner. See your rights below.

Your rights

Under UK law, you have specific rights over your personal data:

Right to access and rectify: you can ask for a copy of your data, or correct any mistakes.

Right to erasure: also known as the "right to be forgotten".

Right to object: you can stop us using your data for certain purposes, such as marketing.

Right to portability: you can ask for your data in a portable format, or ask us to send it straight to someone else.

Right to restrict processing: you can ask us to pause what we do with your data while a question about it is being sorted out.

Right to human review: you can ask for a person to review any significant decision made by automation.

To use any of these, email [email protected]. We will respond within one month.

Cookies and tracking

Analytics and advertising cookies only load if you accept them on the cookie banner. A few cookies the site needs to work are set without asking. You can change your choice at any time with Cookie settings at the bottom of every page. The cookie policy lists every cookie, who sets it and how long it lasts.

Automated decision-making safeguards

Some of the systems we build use AI or automated rules, for example to sort enquiries or suggest follow-ups. None of them make decisions with legal or similarly significant effects about you without a person involved, and you can always ask for a human to review an automated outcome.

Complaints

If you think we have got something wrong with your data, you have the right to complain to us. We'll acknowledge your complaint within 30 days and give you a full response without undue delay.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk. You can go to them directly, though we would rather you gave us the chance to put it right first.

Talk to a human. Questions about your data, or want to make a request? Email [email protected] and a real person will come back to you.