Privacy Policy

Elvatrixa ("we", "us", "our") is a digital innovation studio registered in the United Kingdom. Our registered address and data controller details are available on request at hello@elvatrixa.com.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (elvatrixa.com) or engage with our services. Please read this policy carefully.

We collect the following categories of personal data:

Contact enquiry data — name, business email address, company name, country, phone number, and project details submitted via our contact form.

Usage data — IP address, browser type, device type, pages visited, time on site, and referral source — collected automatically via analytics tools.

Communications data — the content of emails and messages you send us.

We do not collect sensitive personal data (e.g. health, financial account numbers, or biometric data).

We use your personal data to:

• Respond to your enquiries and deliver the services you have requested

• Send you our fixed-price proposal and project documentation

• Improve our website and understand how visitors use it

• Comply with legal obligations

• Protect against fraud and abuse

We will never sell your personal data to third parties.

Under UK GDPR and EU GDPR, we process your data on the following legal bases:

Contractual necessity — processing required to enter into or perform a contract with you.

Legitimate interests — analysing site usage and improving our services, where your rights and interests do not override ours.

Consent — where you have explicitly opted in, e.g. by ticking the GDPR consent checkbox on our contact form.

Legal obligation — where we are required to process data to comply with applicable law.

We share your data only with:

Resend (resend.com) — our transactional email provider, used to deliver your contact form confirmation and our project proposals. Resend is SOC 2 Type II certified.

Vercel — our hosting provider. Traffic data passes through Vercel's edge network. Vercel is GDPR compliant.

Google Analytics — we use GA4 for anonymised website analytics. IP addresses are anonymised before processing.

All third-party processors are bound by data processing agreements and are not permitted to use your data for their own purposes.

We retain contact enquiry data for up to 3 years from the date of submission, or for the duration of a client relationship, whichever is longer.

Analytics data is retained for 14 months within Google Analytics.

You may request deletion of your data at any time (see Your Rights below).

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you

• Rectify inaccurate data

• Erase your data ("right to be forgotten")

• Restrict how we process your data

• Data portability — receive your data in a structured, machine-readable format

• Object to processing based on legitimate interests

• Withdraw consent at any time where processing is consent-based

To exercise any of these rights, email us at hello@elvatrixa.com. We will respond within 30 days.

We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage them, see our Cookie Policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data in transit.

No internet transmission is completely secure. If you have reason to believe your interaction with us is no longer secure, please notify us immediately at hello@elvatrixa.com.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights, contact us at: hello@elvatrixa.com

If you are unhappy with how we have handled your data and are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. EU residents may contact their local supervisory authority.