Privacy

This website

• No cookies, no analytics, no tracking. We don’t use them on this site.
• Reading settings (text size, contrast, spacing, movement) are kept in your own browser for the length of your visit and never sent to us.
• The “Are we a good fit?” questions run entirely in your browser. Your answers are not sent to us or recorded.
• Our Cyber Essentials badge is loaded from the IASME certificate registry (BlockMark), so it can show our certificate is current. Loading it tells their server your IP address, as loading any image from another site does.
• Server logs. Like most websites, our web server records basic technical details of each visit, such as IP address, the page requested and the browser used. We use these only to keep the site secure and working, and keep no more than ten rotated log files of 10 MB each, after which the oldest are deleted automatically.

What we collect and why

We collect information when you contact us, for example by email, and when you engage us to deliver services. Depending on the service, this may include your name, organisation, address, telephone number and email address.

We use it to:

• reply to you and understand what you need
• deliver and manage the services you’ve asked for, including contacting you by email, telephone or post
• verify your identity where we need to
• process payments and keep records we are legally required to keep
• prevent and detect crime and fraud

We may occasionally contact clients about legal, regulatory or other developments relevant to their work with us. If you’d rather not hear from us, tell us and we’ll stop.

Who sees it

We will not sell or rent your information, or share it with anyone for marketing.

We sometimes use trusted subcontractors and service providers to help deliver our services, for example to update a website or edit a video. They get only the information they need for the task, and a contract requires them to keep it secure and not use it for anything else.

We will only release your information to anyone else if you ask us to, or if the law requires it, for example a court order.

Anyone at Elzware with access to your information has a duty of confidentiality.

Where and how long we keep it

Your information is usually processed in the UK. To run efficient digital processes, we sometimes store information on servers outside the UK but within the European Economic Area (EEA), with appropriate safeguards in place.

We are Cyber Essentials certified, and have security measures in place to protect your information from loss, misuse or alteration. No method of sending information over the internet is completely secure, though, so we can’t guarantee the security of information you send us.

Law, regulators and our insurers require us to keep some records after we stop working for you. Our policy is to keep client records for seven years from the end of the period they relate to, then delete them.

Your rights

You have the right to:

• See a copy of the personal information we hold about you.
• Correct anything that’s inaccurate, incomplete or out of date.
• Have it deleted where we no longer need it, where you’ve validly objected to our use of it, where using it would be unlawful, or where you’ve withdrawn your consent.
• Restrict how we use it, for example while we check its accuracy.
• Object to how we use it, and stop us using it for direct marketing at any time.
• Withdraw consent where we rely on it, at any time.

To use any of these rights, contact us using the details below.

Contact and complaints

We aim to resolve any complaint about how we handle your information directly. You also have the right to complain to the Information Commissioner’s Office (opens in a new tab): telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.