Privacy Policy

1. Information We Collect

2. How We Use Your Information

We use your personal information only for legitimate business purposes:

• To respond to your enquiries and provide requested information
• To schedule and conduct consultations via Calendly
• To prepare project proposals and fixed-price quotes
• To deliver our software development services
• To send project updates and important communications
• To improve our website and services based on user feedback
• To comply with legal obligations and protect our rights

We will never sell your personal information to third parties or use it for marketing without your explicit consent.

3. How We Share Your Information

We may share your information with trusted service providers who help us operate our business:

• Email Services: Resend for sending and receiving enquiry emails
• Scheduling: Calendly for consultation bookings
• Hosting: Vercel for website hosting and performance
• Analytics: Privacy-focused analytics tools to understand website usage

These service providers are contractually obligated to protect your data and use it only for the purposes we specify. We do not share your information with advertisers or data brokers.

4. Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for all data transmission
• Secure server infrastructure with regular security updates
• Access controls limiting who can view your information
• Regular security audits and monitoring
• Secure backup procedures

While we take all reasonable steps to protect your data, no internet transmission is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest standards.

5. Your Rights Under UK GDPR

As a UK-based company, we comply with the UK General Data Protection Regulation (UK GDPR). You have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal data (right to be forgotten)
• Restriction: Request limitation on how we process your data
• Portability: Request transfer of your data to another service provider
• Object: Object to processing of your personal data
• Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us at info@elayr.com. We will respond within 30 days.

6. Cookies and Tracking

We use minimal cookies to ensure our website functions properly and to understand how visitors use our site. We do not use advertising cookies or track you across other websites.

Essential cookies are necessary for the website to function and cannot be disabled. Analytics cookies help us understand visitor behaviour and are only used with your consent.

You can control cookies through your browser settings, though disabling certain cookies may affect website functionality.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy:

• Enquiry data: Kept for 2 years unless you request earlier deletion
• Client project data: Retained for the duration of the project plus 6 years for legal/tax purposes
• Website analytics: Anonymised and retained for 2 years

After these periods, we securely delete or anonymise your information unless we are legally required to retain it longer.

8. Third-Party Links

Our website may contain links to third-party services like Calendly, LinkedIn, and X (formerly Twitter). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before sharing any personal information.

9. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

10. International Data Transfers

Your data is primarily stored and processed in the UK. Some of our service providers (such as Vercel and Resend) may process data in other countries including the United States. We ensure all international transfers are protected by appropriate safeguards in compliance with UK GDPR, including standard contractual clauses.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at ico.org.uk.