Privacy Policy

Elevate Engineering Compliance Ltd
Effective Date: 01/09/2025

1. Introduction

Elevate Engineering Compliance Ltd (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect personal information when you use our website (www.elevate-ec.co.uk), contact us, or engage with our services.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant legislation.

2. Information We Collect

We may collect and process the following types of personal data:

• Identity Data: Name, job title, employer/organisation.
• Contact Data: Email address, phone number, business address.
• Technical Data: IP address, browser type, and usage data when you browse our website.
• Business Data: Information you provide in relation to proposals, projects, or subcontractor applications.
• Training/Qualifications Data: Where provided by subcontractors for compliance purposes.

We do not collect sensitive personal information unless it is necessary for compliance (e.g., health and safety training records).

3. How We Use Your Information

We will only use your personal data when the law allows us to, including for:

• Responding to enquiries.
• Providing consultancy services.
• Contract and subcontractor management.
• Compliance with legal and regulatory obligations.
• Improving our website and services.
• Sending updates about our services (with your consent).

4. Legal Basis for Processing

We rely on the following lawful bases for processing:

• Contract: To perform obligations under a contract with you.
• Legal Obligation: To comply with statutory requirements (e.g., health and safety record keeping).
• Legitimate Interests: To manage and grow our business.
• Consent: Where you opt in to receive marketing communications.

5. Sharing of Information

We may share your personal data with:

• NHS Trusts or clients where necessary to deliver services.
• Subcontractors or consultants engaged on projects.
• Professional advisers (lawyers, accountants, insurers).
• Regulators and authorities where legally required.

We will never sell your data to third parties.

6. Data Retention

We will keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. For example:

• Accident reports: 3 years (as per Employers’ Liability Act).
• Subcontractor training/qualification records: for the duration of the contract plus 6 years.

7. Your Rights

Under UK GDPR you have rights including:

• Access to your personal data.
• Correction of inaccurate or incomplete data.
• Erasure (“the right to be forgotten”).
• Restriction or objection to processing.
• Data portability.
• Withdrawal of consent (where processing is based on consent).

To exercise your rights, please contact us (details below).

8. Security of Data

We have implemented appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure.

9. Cookies

Our website may use cookies to improve user experience and collect anonymous analytics data. You can control cookies through your browser settings.We do not use analytics, advertising, or tracking cookies on our website. We only use essential cookies (if any) required for basic site functionality.

10. Contact Us

If you have any questions about this policy or wish to exercise your rights, please contact:

Elevate Engineering Compliance Ltd
7 Overend Close, Bradwell, Milton Keynes, MK13 9EJ
Email: liam@elevate-ec.co.uk
Phone: 07590 212718

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.