Privacy Policy

1. Who we are

Elevate Working ("we", "us", "our") operates the website elevateworking.com. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

For any privacy-related questions, contact us at hello@elevateworking.com.

2. Data we collect

We collect only what you voluntarily provide through our website forms:

• Contact form: first name, last name, work email, company name, company size, area of interest, estimated budget, hours/week, people involved, and your message.
• Newsletter signup: email address.

We do not collect data automatically. We do not use cookies, tracking pixels, or third-party analytics on this site.

3. How we use your data

• To respond to your enquiry and schedule strategy calls.
• To send occasional newsletter updates if you have subscribed (you can unsubscribe at any time).
• To improve our services and understand the needs of potential clients.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal basis for processing (GDPR)

We process your data under the following legal bases:

• Consent: when you submit a form or subscribe to our newsletter, you consent to us processing the data you provide.
• Legitimate interest: to respond to business enquiries and manage our client pipeline.

5. Where we store your data

Form submissions are stored in a PostgreSQL database hosted on Neon (neon.tech), with servers located in the United States. Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised Elevate Working personnel only.

6. Data retention

We retain contact form submissions for up to 24 months from the date of submission, unless you request earlier deletion. Newsletter subscriber data is retained until you unsubscribe.

7. Your rights

Under GDPR and CCPA, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time.

To exercise any of these rights, email us at hello@elevateworking.com. We will respond within 30 days.

8. Cookies

This website does not use cookies. We do not use any analytics, advertising, or tracking cookies. If we introduce analytics in the future, we will update this policy and implement an appropriate consent mechanism.

9. Third-party services

We use the following third-party services that may process data on our behalf:

• Vercel — website hosting (may log IP addresses in server logs).
• Neon — PostgreSQL database hosting for form submissions.
• Google Fonts — font delivery (Google may log requests; see Google Fonts Privacy).

10. Children's privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.

12. Contact

If you have questions about this privacy policy or wish to exercise your data rights, please contact us:

Email: hello@elevateworking.com
Website: elevateworking.com