Last updated: 30 September 2026
Who we are
Elev8AI Limited is a company registered in England and Wales under company number 15910189, with its registered office at 591 London Road, Cheam, Sutton SM3 9AG. Our trading address is 68 Shrivenham Hundred, Watchfield, Swindon SN6 8TY. In this policy, “Elev8”, “we”, “us” and “our” mean Elev8AI Limited.
This policy explains how we collect and use personal data when you visit our website at elev8ai.co.uk (the website), contact us, sign up to our newsletter, or deal with us as a client, prospective client or supplier, and it explains the rights you have. For this personal data we are the controller, which means we decide how and why it is used. We handle it in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
If you have any question about this policy or about how we use your personal data, contact us by email at contact@elev8ai.co.uk, by phone on 01793 268879, or by post at our trading address.
Personal data we handle for our clients
When we build, deploy or support a system for a client, including our platforms L1nks, Agent8 and Puls3, we may process personal data held in that system on the client’s behalf and only on its documented instructions. In that case the client is the controller and we act as its processor. The client’s own privacy notice explains how that personal data is used, and our obligations are set out in the data processing terms of our agreement with the client. This policy does not cover that processing. If your personal data is held in a system we run for one of our clients, please contact that organisation first.
The personal data we collect
We collect and use the following personal data:
- Enquiries through our contact form: your name, work email address, company, phone number, your message and the address of the page you sent it from. When you submit the form, the form software also records the date and time, your IP address and details of your browser and device.
- Newsletter sign-ups: your email address, the date and time you signed up, your IP address and details of your browser and device.
- Correspondence: what you tell us when you email, call or meet us, and our notes of those conversations.
- Business relationship information: if you work for a client, prospective client or supplier, your name, job title and business contact details, and records of our dealings with you and your organisation, including proposals, contracts and invoices.
- Technical information: when you visit the website, the servers that host it record your IP address, the date and time of your visit, the pages you request and your browser type, to keep the website secure and working.
- Website usage information, only if you accept analytics: through Google Analytics, the pages you visit, how long you stay, how you arrived at the website, and your browser, device and approximate location (such as your town or city, worked out from your IP address). Google Analytics recognises your browser by a random identifier stored in your browser’s storage. It does not tell us who you are, and Google Analytics does not store IP addresses.
- Information from public sources: when we reply to an enquiry or prepare to meet you, we may look at information that you or your organisation have made public, such as your organisation’s website or your professional profiles.
We do not ask for special category personal data, such as information about health, ethnicity, religious beliefs or trade union membership, or for information about criminal convictions, through the website. Please do not send it to us.
You do not have to give us any personal data. If you do not give us your contact details, however, we will not be able to reply to your enquiry.
How we use your personal data, and our lawful basis
We only use your personal data where the law allows us to. The purposes for which we use it, and the lawful basis we rely on under Article 6 of the UK GDPR for each, are:
- To reply to your enquiry and discuss how we could work together: our legitimate interests in responding to people who contact us and in developing our business and, where you ask about entering into a contract with us, taking steps at your request before entering into a contract.
- To send you our newsletter: your consent, which you give when you sign up. You can withdraw it at any time.
- To provide our services and manage our relationship with your organisation, including proposals, contracts, invoices and support: the performance of our contract with your organisation, and our legitimate interests in running our business and dealing with the people who work for our clients and suppliers.
- To send business contacts information about our services that is relevant to them: our legitimate interests in promoting our business, only where PECR allows it. Every message will tell you how to opt out.
- To keep the website and our forms secure, and to prevent spam, fraud and misuse: our legitimate interests in protecting our website, systems and business.
- To understand how the website is used, so that we can improve it, using Google Analytics: your consent, which you give by accepting analytics in the cookie banner. You can withdraw it at any time with the cookie settings button on every page.
- To record your cookie choices, so that we respect them and can show that we asked: compliance with a legal obligation, as the law requires us to be able to show that you consented.
- To keep accounting, tax and other records and to meet our legal and regulatory obligations: compliance with a legal obligation.
- To establish, exercise or defend legal claims: our legitimate interests in protecting our business and our legal rights.
Where we rely on legitimate interests, we have weighed our interests against your interests, rights and freedoms and concluded that ours are not overridden. You can ask us for more information about that assessment.
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you. We do not sell your personal data.
Who we share your personal data with
We share personal data only where it is necessary for the purposes above, with:
- service providers who act as our processors, such as our website host and our email, IT and cloud service providers, who may use it only on our instructions and must keep it secure;
- Google, which provides Google Analytics and processes website usage information for us, if you accept analytics;
- our sister company DS Total Solutions, where it supplies infrastructure or services for a project you are involved in;
- our professional advisers, such as lawyers, accountants, auditors and insurers, who are bound by duties of confidentiality;
- HM Revenue & Customs, regulators, courts, the police and other authorities, where the law requires or permits us to; and
- a prospective buyer or successor of our business or assets, under a duty of confidentiality, if we sell or reorganise all or part of our business.
International transfers
We aim to keep personal data within the United Kingdom. Where one of our service providers processes personal data outside the UK, we make sure that the transfer is covered by UK adequacy regulations, or protected by the ICO’s International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or another safeguard permitted by UK data protection law. Google Analytics is provided by Google, and the information it collects may be processed by Google LLC in the United States. Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework, which UK adequacy regulations recognise, and Google’s data processing terms include the transfer safeguards approved for the UK. You can contact us for more information about the safeguards we use.
How long we keep your personal data
We keep personal data only for as long as we need it for the purposes we collected it for, including to meet legal, accounting and reporting requirements. In particular, we keep:
- enquiries that do not lead to work for up to three years after our last contact with you;
- client and supplier records, including contracts and invoices, for the length of the relationship and then for six years after it ends, which reflects the time limits for legal claims and our tax record keeping obligations;
- newsletter subscriptions until you unsubscribe, after which we keep your email address on a suppression list so that we do not contact you again;
- website usage information in Google Analytics for up to 14 months, after which Google deletes it;
- your cookie choices for 12 months, after which the website asks you again; and
- server logs for up to 12 months, unless we need them for longer to investigate a security incident.
When we no longer need personal data, we delete it or anonymise it.
How we keep your personal data secure
We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. Access to it is limited to the people who need it for their work, and our processors must protect it to the same standard. No transmission over the internet is completely secure, but we take care to protect the personal data you send us. If we suffer a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the ICO and, where the law requires, tell you.
Your rights
Under UK data protection law, you have the right to:
- be informed about how we use your personal data, which is the purpose of this policy;
- access the personal data we hold about you and receive a copy of it;
- have inaccurate personal data corrected, and incomplete personal data completed;
- have your personal data erased, in certain circumstances;
- restrict how we use your personal data, in certain circumstances;
- receive the personal data you have given us in a structured, commonly used and machine readable format, and have it sent to another organisation, where we process it by automated means on the basis of your consent or a contract;
- object to our use of your personal data where we rely on legitimate interests and, at any time, to its use for direct marketing, in which case we will stop; and
- withdraw your consent at any time where we rely on it, without affecting the lawfulness of our use of your personal data before you withdrew it.
To exercise any of these rights, contact us at contact@elev8ai.co.uk. You will not usually have to pay a fee. We may need to ask for information to confirm your identity before we act on your request. We will respond within one month of receiving it, or within three months if your request is complex or you have made several requests, in which case we will tell you within the first month.
You can unsubscribe from our newsletter at any time by using the unsubscribe link in any newsletter we send you, or by contacting us.
Cookies
Cookies are small files that a website stores on your device, and browser storage (local storage and session storage) works in a similar way. Under PECR, we may only store information on your device, or read it from there, if it is strictly necessary or you consent to it.
When you first visit the website, a banner asks whether you accept cookies that are not strictly necessary. You can accept all, reject all or choose by category. Until you accept analytics, the website sends nothing to Google Analytics and stores nothing on your device for it, and rejecting it does not change how the website works for you.
You can change your mind at any time with the cookie settings button in the bottom left corner of every page. Withdrawing your consent stops Google Analytics measuring your visits. To remove the identifier already stored, you can clear this website’s data in your browser settings.
The Google Analytics code is served from the website itself rather than from Google’s servers, but the information it collects is sent to Google. Our fonts, images and videos are also served from the website itself, so visiting a page does not send your details to font or video providers.
The website uses these cookies and browser storage:
| Cookie | Set by | What it does | How long it lasts | Type |
|---|---|---|---|---|
cookieyes-consent | This website (CookieYes, our consent tool) | Remembers your cookie choices, so that we do not ask again on every page | 12 months | Strictly necessary |
wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie | This website (WordPress) | Keep an authorised person logged in while they manage the website. Visitors who do not log in do not receive them | Until you close your browser, or up to 14 days if you choose to stay logged in | Strictly necessary |
clientId (local storage) | Google Analytics | Tells one browser apart from another, using a random identifier | Until you clear this website’s data in your browser | Analytics, only with your consent |
sessionId, sessionCount (session storage) | Google Analytics | Keep track of your current visit | Until you close the browser tab | Analytics, only with your consent |
Strictly necessary cookies do not need your consent. If we add any other cookie or storage that is not strictly necessary, we will ask for your consent before using it and update this policy.
To find out how Google uses information from websites that use its services, see Google’s explanation.
Other websites
The website links to other websites, such as LinkedIn, Google Maps and DS Total Solutions. This policy does not apply to them, and we are not responsible for how they handle personal data. Please read their own privacy policies.
Children
The website and our services are intended for businesses. They are not directed at children, and we do not knowingly collect personal data from children.
Complaints
If you have a concern about how we use your personal data, please contact us first and we will do our best to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk, by phone on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. Where a change is significant, we will take reasonable steps to let you know, for example with a notice on the website. This policy should be read with our terms of use.