Hello there!

At Elevate Executive Co., we provide outsourced business operations, executive support and strategic operational

assistance to founders and growing businesses. We take your privacy seriously and are committed to handling

personal information responsibly in our work and on our website.

We encourage you to read this policy alongside any other privacy notices we might provide, so you're fully in the

loop about how and why we use your information.

Who’s in charge of your data?

Elevate Executive Co. is responsible for personal information where we decide how and why it is used (data controller). When we handle information on a client’s documented instructions, we may act as their data

processor.  Contact us at: Email address: hello@elevateexecutiveco.com Telephone number: 07706284381

Not happy with something?

We’re committed to treating your personal data with respect, transparency, and care. If you ever have questions or concerns about how your data is used, we want to hear from you, and we’ll do our best to resolve things quickly and fairly. Under the Data (Use and Access) Act 2025, you have the right to raise a complaint about how your personal data is handled. 

Here's how:

● Step 1: Email us at hello@elevateexecutiveco.com with a brief description of your concern. You don’t need to use legal language - just tell us what’s worrying you.

● Step 2: We’ll acknowledge your message and respond without undue delay, usually within 10 working days.

● Step 3: If you’re not satisfied with our response, you can escalate your concern to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

What type of data do we collect about you?

‘Personal data' is information that identifies you. If we've removed your identity (by making the data anonymous), it won’t be classed as personal data. We might collect, use, store, and share various types of personal data about you as follows:

● Identity and professional details such as name, title, job role, employer or business name and professional responsibilities.

● Contact details such as your billing address and delivery address, email address and telephone number.

● Technical and website information such as IP address, browser and device details, website usage and analytics information, subject to applicable cookie requirements.

● Financial information needed for invoicing and payments, such as relevant bank details.

● Information about transactions like details about payments to and from you, and other details of products and services you have purchased from us.

● Client data such as data relating to your clients that you pass to us in order for us to provide your services to you.

● Service and account information such as onboarding details, correspondence, preferences and feedback, where relevant to our services.

● Usage information about how you use our website, products and services.

● Marketing information such as your preferences on receiving marketing from both us and third-parties, along with your communication preferences.

Aggregated Data: We may also use the above information, without any of your identifiable details, to produce aggregated data. An example includes statistical or demographic data that can help us understand our client needs better WE MAY AGGREGATE USAGE DATA TO CALCULATE THE PERCENTAGE OF USERS ACCESSING ASPECIFIC WEBSITE FEATURE. If we combine this data with your personal data at any point so you do become identifiable, we treat this as personal data and use this in accordance with this policy.

Special Category Data: We do not routinely seek sensitive personal information for our own business development. Where client work involves special-category information, we handle it only as appropriate to our role and the relevant contractual and legal requirements.

How do we collect your personal data?

We use different methods to collect data from and about you. The majority of the time, our information is collected directly when you contact us in the following ways:

● When you fill in any new client onboarding forms.

● When you complete any forms before or during an appointment.

● Verbally during discussions.

● Correspondence with us via post, phone, email or otherwise.

● When you apply for our services or any of our products.

● When you engage us or provide information for a business relationship.

● When you subscribe to our communications, where applicable.

● When you request marketing communications to be sent to you.

● When you attend an event or professional networking meeting.

● When you give us feedback or contact us.

Our website uses Google Analytics to help us understand website visits and usage. Non-essential analytics cookies and similar technologies require appropriate consent before being used. Details should be reflected in our cookie information and consent controls.

Google Analytics and cookies

Google Analytics helps us understand general website usage and improve our website. Analytics technologies may process technical and usage data and may involve service providers outside the UK. We will provide appropriate information about analytics cookies and international transfers where relevant. Non-essential analytics cookies must not operate before valid consent where required.

We may also receive data from third-parties such as:

● Professional directories, business websites and networking platforms where professional contact details are made available.

● Professional introductions, referrals and relevant business research or data-enrichment services.

● Website analytics information from Google Analytics.

● Professional networking and social media platforms used for our business activities, where relevant.

● Search providers and public business websites.

● Publicly available corporate records, including Companies House. Business development and prospective clients.

We may identify relevant corporate businesses and professional contacts using public company records, business websites, professional directories, LinkedIn, referrals and business research services. We may record names, roles, professional contact details, business context and communications to assess potential working relationships. We generally assess legitimate interests where personal data is involved and comply with applicable direct marketing rules. When we obtain information indirectly, we provide the required privacy information within the applicable timeframe, including at first communication where required. You can object to direct marketing at any time by replying or emailing hello@elevateexecutiveco.com.

What are the purposes for which we use your personal data?

The purposes for which we will be using your data include:

● To register you as a new client.

● To respond to your enquiry about our services.

● To provide our services and to process and deliver any orders, including: a) to manage payments, fees and charges and b) to collect and recover money owed to us.

● To manage our relationship with you e.g., to notify you about changes to our terms of this privacy policy or to ask you to leave a review and/or take a survey.

● To communicate relevant information about our outsourced business operations, executive support and consultancy services, where permitted by law.

● To research prospective corporate clients and professional relationships, assess relevance and maintain accurate contact and objection records.

● To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).

● To understand use of our website through Google Analytics, subject to applicable consent requirements.

● To use data analytics to improve our website, products/services, marketing, customer relationships and experiences.

● To make suggestions and recommendations to you about goods or services that may be of interest to you.

Depending on the purpose, we may rely on performance of a contract, steps taken before entering a contract, compliance with legal obligations, legitimate interests or consent where required.

● To fulfil our contract with you;

● For our legitimate interests; or

● To comply with legal obligations.

Where we rely on legitimate interests for relevant B2B prospecting, we consider necessity, proportionality and individuals’ rights. UK GDPR and PECR requirements apply separately. You may object to direct marketing at any time by replying to our message or contacting us. We may process your personal data for more than one lawful reason at a time, depending on the specific purpose for which we are using your data. If you’d like more information on the specific legal ground we are

relying on, on occasions where we rely on more than one legal ground, please feel free to contact us.

Do we use third-party links?

Our website might link to third-party websites, tools and apps. Clicking on these links may allow third parties to

collect or share your data. We do not control said websites and are not responsible for said websites’ privacy policies. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Do we ever share your personal data?

We take your data's security seriously and only allow certain people to access it.

We may share your personal data with the parties set out below for the purposes as stated further above.

● Service providers supporting our operations, such as email, cloud storage, accounting, research, website hosting and analytics services, subject to appropriate safeguards.

● Payment service providers or financial institutions where necessary to process invoices or payments.

● Professional advisers, acting as processors or joint controllers, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

● HM Revenue & Customs, regulators and other authorities, acting as processors or joint controllers, based in the UK who require reporting of processing activities in certain circumstances.

Recipients are subject to the legal obligations appropriate to their role. Where service providers act as processors for us, we require appropriate contractual protections. Some independent professional advisers or authorities may act as separate controllers.

Do we use Artificial Intelligence?

● We may use AI-assisted drafting, research and productivity tools to support our operations. We use human review and seek to minimise the personal information supplied to such tools.

● We assess the nature of the information, the purpose and the relevant provider terms and safeguards before using AI tools with personal data.

● When using AI tools, we ensure:

✔ Personal data is processed lawfully, fairly, and transparently.

✔ Data minimisation principles are upheld, meaning we only provide AI tools with the information strictly necessary for the intended purpose.

✔ Robust security measures are in place to protect your personal data during any processing involving AI tools.

✔ When using AI tools, we ensure that personal data is retained only for as long as necessary to fulfil the purposes outlined in our policy, after which it is securely deleted or anonymised.

The table below describes the relevant category of AI-assisted writing and drafting tools. Other technologies, including Google Analytics, are addressed separately as website analytics services.

AI Tool Name - AI Writing and Drafting Assistant (e.g. ChatGPT)

Purpose - To assist with drafting written communications, reports, and business documents

Types of Data Used - Only the minimum information necessary for authorised drafting or research

Legal Basis for Processing - Legitimate interests

● We use proportionate security and confidentiality safeguards when using AI-assisted tools and review outputs before relying on them.

● AI-assisted drafting and research do not in themselves mean we make solely automated decisions with legal or similarly significant effects on individuals.

Limitations of AI: Although we strive to ensure accuracy and reliability in our AI tools, they are not without limitations and we do not guarantee their accuracy, completeness, or suitability. It is important that you independently verify your satisfaction with AI-generated outputs before relying on them in any capacity.

Your Rights: Please contact us at hello@elevateexecutiveco.com if you would like to exercise any of the above rights.

Do we use Automated Decision-Making?

We do not currently describe solely automated decisions with legal or similarly significant effects as part of our ordinary business activities. If our practices change, we will update this notice and provide any required information.

Where applicable, individuals have rights concerning decisions made solely by automated processing under UK data protection law.

We aim to maintain meaningful human oversight over our operational work and use of supporting technology. If you’d like to know more or raise a concern, just email us at hello@elevateexecutiveco.com. We’re here to help, and we’ll always make sure a real human listens.

How secure is your data with us?

We have strong security measures in place to keep your personal information safe. Only authorised individuals who have a need to know are granted access to your data, such as our employees or trusted partners. They will process your data in accordance with our confidentiality terms.

In the rare circumstances that there is a personal data breach, we have procedures in place and will notify you, along with any applicable regulator, when we’re legally required to.

What is our process for retaining your data?

We keep personal information only as long as reasonably necessary for its purpose, taking account of contractual, legal and business requirements. By law we have to keep basic information about our customers (including contact information, identity details, financial information and data relating to your transactions with us) for six years after they cease being customers for tax purposes. For prospective business contacts, we periodically review whether the information remains relevant and remove or anonymise records no longer needed. We may retain minimal suppression information to honour objections. We will document appropriate review periods internally.

What are your legal rights in relation to your data?

You have the following rights regarding your personal data:

Access: You have the right to ask us what personal data we hold about you and to receive a copy of that data. This is called a Subject Access Request (SAR). We’ll respond within one calendar month, but if we need to verify your identity first, we may pause the clock while we do so. This helps protect your data and ensures we’re sharing it with the right person. If your request is complex or repetitive, we may apply proportionality rules under the Data (Use and Access) Act 2025, which allow us to limit the scope or extend the response time. We’ll always explain why and keep you informed. To make a request, just email us at hello@elevateexecutiveco.com with the subject line “DSAR Request”. You don’t need to use legal language - just let us know what you’d like to see or understand. If you’re unhappy with how we handle your request, you can raise a concern with the Information Commissioner’s Office (ICO) at www.ico.org.uk

Correction: If the personal data we have about you is incomplete or incorrect, you can ask us to correct it.

Erasure: You can ask us to delete your personal data. It's important to note, however, that there might be legal reasons that prevent us from fulfilling this request. If such reasons exist, we will inform you when you make your request.

Objection: You can object to processing based on legitimate interests in certain circumstances, and you have an absolute right to object to processing for direct marketing.

Restriction of Processing: You can request that we restrict the processing of your personal data under specific circumstances.

Data Portability: You have the right to request the transfer of your personal data directly to you or to a third party of your choice.

Withdrawal of Consent: At any point where we rely on your consent to process your personal data, you have the right to withdraw this consent. Withdrawal of consent will not affect the legality of the processing done before the consent was withdrawn. Should you withdraw your consent, we might be unable to provide you with certain products or services. We will inform you if that is the case when you withdraw your consent. If you wish to exercise any of the rights set out above, please contact us.

We won’t charge any fees for you to request access to your personal data. However, a reasonable fee may be charged if your request is clearly unjustified, repetitive or excessive. We also reserve the right to not comply in this scenario. We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Changes and Contact

We regularly review our privacy policy. Please keep us updated if your personal data changes. 

If you have any questions or need to exercise your rights, just get in touch.

Thanks for reading our privacy policy. If you have any questions please don't hesitate to contact us.

© 2026 by Aubergine Legal Limited. All rights reserved.

V3