Privacy Policy
Last updated:
1. Who we are
Elastrum operates elastrum.io and is responsible for personal information processed through this website. Contact us at privacy@elastrum.io. This notice covers website visits and communications about our services. Processing within client projects is addressed separately in the relevant agreements and privacy documentation.
2. Information we collect
When you contact us, we collect the information you provide, including your name, email address, job title, organisation, enquiry and subsequent correspondence. Website infrastructure processes technical information needed to deliver and protect the website, such as IP addresses, requested pages, request times and browser information. Please do not include sensitive personal information or confidential client records in your initial enquiry.
3. How and why we use information
We use enquiry information to respond, arrange calls, understand your requirements and discuss potential work. We rely on our legitimate interests in handling business enquiries and developing relevant business relationships. We process necessary technical information in our legitimate interests in operating a reliable website and preventing misuse. We may also process information to meet legal obligations. We do not add enquirers to marketing mailing lists or use enquiries for unsolicited marketing campaigns.
4. Analytics
We plan to use Google Analytics 4 to understand website visits and interactions. When enabled, it will process page visits, interactions, device and browser information and online identifiers only after you consent to analytics. You can change or withdraw your choice through Cookie preferences in the footer.
5. Who receives information
Enquiries are recorded in our own system and accessed by team members who need them to handle your request. Infrastructure and communication providers support website operation and correspondence. These include Cloudflare for website delivery and protection and, when enabled with your consent, Google for analytics. We may disclose information where required by law or necessary to establish, exercise or defend legal claims. We do not sell your personal information.
6. International processing
Our infrastructure providers operate internationally, so information may be processed outside your country, including in the United States. You can contact privacy@elastrum.io for information about the locations and transfer arrangements applicable to your information.
7. How long we keep information
Where an enquiry does not lead to an engagement, we retain it and related correspondence for up to 12 months after the last substantive communication, then delete or anonymise it. Client records are retained under the arrangements applicable to the engagement. Specific records may be retained longer where necessary to meet legal obligations or resolve a dispute. Technical records are retained according to their operational and security purpose, including the time needed to investigate incidents. Our Cookie Policy describes storage on your device.
8. Your rights
Depending on the applicable law and circumstances, you may request access, correction, deletion, restriction of processing or a portable copy of your information. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Email privacy@elastrum.io to exercise your rights. We may request information needed to verify your identity. You may also complain to the relevant data protection authority, including the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
9. Changes
We may update this notice to reflect changes in our practices or legal requirements. The date above identifies the latest revision.