Who we are
Elevate & Automate is the data controller for the information
described on this page. That means we decide what is collected and
why, and we are the ones accountable for it.
If you are a client and your own customers' details sit in an account
we run for you, you are the controller of that data and we handle it
on your behalf, under our terms of service.
Address: Elevate and Automate Ltd (company no. 17083418), 30b Bramhall Lane South, Stockport, SK7 1AH
Contact:
[email protected]
Information collection
Depending on whether you are browsing the site, getting in touch or
working with us, we collect some of the following:
Identity and contact data: your name, business name, email and phone number.
Technical data: your IP address, device and browser, and how you use the website. Analytics and advertising cookies are only used if you accept them.
Project and account data: what you tell us on calls, in messages or during onboarding, such as your business goals, how you work now and the tools you use.
Payment data: handled securely by Stripe for platform plans and invoices. We never see your full card number.
What we collect
- Contact details (name, email, phone)
- What you tell us about your business
- How the website is used
What we don't
- Your full card details
- Your browsing on other websites
- Anything we don't need for the work
Usage of information
We use your data only when we have a lawful basis to do so. This includes:
Contract: to deliver what we have agreed, whether that is a build, your platform account or ongoing support.
Legitimate interests: to reply to enquiries, keep our systems secure, and check that the automations we run for you are working properly.
Consent: for analytics and advertising cookies, and for marketing emails or messages you have opted in to. You can withdraw it at any time.
We look at website analytics as totals and trends, such as which pages
people read and where they leave, not to build a picture of any one
person.
Data sharing
We never sell your data. We only share it with the providers that
make the website and our services work:
GoHighLevel: hosts this website, our CRM, bookings, chat and the platform accounts.
Stripe: processes payments.
Cloudflare: protects the website and keeps it online.
Google Analytics: measures how the website is used, only if you accept analytics cookies.
Meta: measures our adverts, only if you accept advertising cookies, and carries WhatsApp messages if you contact us that way.
n8n and Anthropic: run some of the automations and AI features we build. Only the data a task needs is sent to them.
Strict SMS disclaimer: No mobile information will be shared
with third parties or affiliates for marketing or promotional
purposes. All other use-case categories exclude text-messaging
originator opt-in data and consent; this information will not be
shared with any third parties.
Where your data is held
Several of these providers, including GoHighLevel and Stripe, are based
in the United States, so some of your data is transferred outside the UK.
Each transfer is covered by a safeguard UK law recognises, such as the
UK Extension to the EU-US Data Privacy Framework or the UK
International Data Transfer Addendum, depending on the provider. Ask
us if you want to know which one applies.
How long we keep it
We keep your data only as long as we have a reason to.
Clients: for as long as we are working together, and for six years afterwards, in line with the time we have to keep business records.
Financial records: six years, because HMRC requires it.
Enquiries that did not become work: 12 months, then deleted.
You can ask us to delete your data sooner. See your rights below.
Your rights
Under UK law, you have specific rights over your personal data:
Right to access and rectify: you can ask for a copy of your data, or correct any mistakes.
Right to erasure: also known as the "right to be forgotten".
Right to object: you can stop us using your data for certain purposes, such as marketing.
Right to portability: you can ask for your data in a portable format, or ask us to send it straight to someone else.
Right to restrict processing: you can ask us to pause what we do with your data while a question about it is being sorted out.
Right to human review: you can ask for a person to review any significant decision made by automation.
To use any of these, email
[email protected].
We will respond within one month.
Cookies and tracking
Analytics and advertising cookies only load if you accept them on the
cookie banner. A few cookies the site needs to work are set without
asking. You can change your choice at any time with
Cookie settings at the bottom of every page. The
cookie policy lists every cookie, who sets
it and how long it lasts.
Automated decision-making safeguards
Some of the systems we build use AI or automated rules, for example to
sort enquiries or suggest follow-ups. None of them make decisions with
legal or similarly significant effects about you without a person
involved, and you can always ask for a human to review an automated
outcome.
Complaints
If you think we have got something wrong with your data, you have the
right to complain to us. We'll acknowledge your
complaint within 30 days and give you a full response
without undue delay.
You also have the right to complain to the Information Commissioner's
Office, the UK regulator for data protection, at
ico.org.uk.
You can go to them directly, though we would rather you gave us the
chance to put it right first.
Talk to a human. Questions about your data, or want to make a
request? Email
[email protected]
and a real person will come back to you.