1. Who we are
Elevation Coaching and Consulting Ltd
Last updated: July 2026
This privacy policy applies to the website elevationcc.co.uk, operated by Elevation Coaching and Consulting Ltd (“Elevation”, “we”, “us”, “our”).
Elevation Coaching and Consulting Ltd is registered in England and Wales.
Registered correspondence address: Sussex Innovation Centre, Science Park Square, Brighton BN1 9SB
Data controller contact: info@elevationcc.co.uk
2. What personal data we collect and why
Contact forms
When you submit an enquiry through our website contact form, we collect your name, email address, and the content of your message. We use this information solely to respond to your enquiry. We retain contact form submissions for up to 12 months for customer service purposes. We do not use this information for marketing without your explicit consent.
Legal basis: Legitimate interests (responding to a direct enquiry from you).
Newsletter signup
If you subscribe to our newsletter ‘The Elevator’, we collect your name and email address. We use Kit to manage our mailing list and distribute newsletters. Your data is stored on Kit’s servers, which are based in the United States. Kit complies with UK GDPR through Standard Contractual Clauses.
You can unsubscribe at any time using the link in any newsletter email. On unsubscribing, your data will be removed from our active mailing list within 30 days.
Legal basis: Consent (you actively opted in to receive communications from us).
Kit privacy policy: convertkit.com/privacy
Booking and calendar tools
If you use our online booking tool to schedule a call or session, we collect your name, email address, and the information you provide during the booking process. This data is used solely to arrange and manage your appointment. We retain booking records for up to 24 months.
Legal basis: Contract (processing is necessary to arrange the service you have requested).
Cookies
Our website uses cookies. Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:
• Essential cookies: Required for the website to function. These cannot be switched off. They are usually set in response to actions you take, such as filling in a form.
• Functional cookies: Set by WordPress to remember your preferences and improve your experience on return visits.
We do not currently use analytics cookies or advertising cookies. If this changes, we will update this policy and request your consent before setting them.
You can control and delete cookies through your browser settings. Blocking essential cookies may affect how the website functions.
Technical data
When you visit our website, our hosting provider (Squeehosting) may automatically collect standard technical log data, including your IP address, browser type, and pages visited. This data is collected for security and site maintenance purposes and is not used to identify individual visitors. We do not use Google Analytics or any other third-party analytics platform.
3. Who we share your data with
We do not sell your personal data. We share data only with the following trusted third-party providers, and only to the extent necessary to operate our services:
• Kit (newsletter distribution) — your name and email address if you have subscribed to our newsletter.
• Our booking tool provider — your name, email, and appointment details if you book a call or session through our website.
• Squeehosting (website hosting) — technical log data as described above.
• WordPress — technical data associated with site operation.
All third-party providers are required to handle your data in accordance with UK GDPR. Where data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses.
4. How long we retain your data
• Contact form submissions: up to 12 months
• Newsletter subscribers: until you unsubscribe, after which data is removed within 30 days
• Booking records: up to 24 months
• Technical log data: as determined by our hosting provider, typically up to 12 months
Where we have a legal obligation to retain data for a longer period (for example, financial records), we will do so in accordance with that obligation.
5. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
• The right to access — you can request a copy of the personal data we hold about you.
• The right to rectification — you can ask us to correct inaccurate or incomplete data.
• The right to erasure — you can ask us to delete your personal data in certain circumstances.
• The right to restrict processing — you can ask us to limit how we use your data.
• The right to data portability — you can ask us to transfer your data to another provider in a structured, machine-readable format.
• The right to object — you can object to our processing of your data where we rely on legitimate interests as our legal basis.
• The right to withdraw consent — where we process your data on the basis of consent, you can withdraw that consent at any time.
To exercise any of these rights, contact us at info@elevationcc.co.uk. We will respond within one calendar month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
6. Where your data is sent
Your data may be transferred to and stored on servers outside the United Kingdom, specifically in the United States, by our third-party service providers (ConvertKit and our booking tool provider). Both providers comply with UK GDPR requirements for international data transfers through Standard Contractual Clauses approved by the ICO.
7. How we protect your data
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include:
• SSL/TLS encryption on our website (https)
• Access controls limiting who can access data held in our systems
• Use of reputable, GDPR-compliant third-party providers
No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
8. Data breach procedures
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, as required by UK GDPR. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.
9. Automated decision making
We do not use automated decision making or profiling in connection with your personal data.
10. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the ‘last updated’ date at the top of this page. We encourage you to review this policy periodically.
11. Contact us
If you have any questions about this privacy policy or how we handle your personal data, please contact:
Audrey Pantelis
Elevation Coaching and Consulting Ltd
info@elevationcc.co.uk
Sussex Innovation Centre, Science Park Square, Brighton, BN1 9SB