.png){kind=small}
ElevateSol is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR). This page explains our approach for individuals located in the European Economic Area (EEA), UK, or Switzerland.
1. Data controller
Controller: ElevateSol
Contact: hr@elevatesol.com
Website: elevatesol.com
For privacy-related requests, email us at the address above with the subject line "GDPR Request".
2. Scope
This notice applies when we process personal data of individuals in the EEA/UK in connection with:
- Visits to our website
- Contact form submissions and sales enquiries
- Software development projects for EU-based clients
- Newsletter or marketing communications (where applicable)
3. Legal bases for processing
We process personal data only where we have a valid legal basis:
- Contract: to perform a contract or take steps at your request before entering a contract
- Legitimate interests: to operate and improve our business, secure our website, and communicate with prospects, balanced against your rights
- Consent: for non-essential cookies, marketing emails, or other processing where consent is required
- Legal obligation: where we must comply with applicable law
4. Categories of data and purposes
| Data | Purpose |
|---|---|
| Name, email, phone, company | Respond to enquiries and manage client relationships |
| Project requirements and files | Deliver agreed software development services |
| IP address, browser data, usage logs | Website security, analytics, and improvement |
| Payment and billing details | Process invoices where applicable |
5. Your rights under the GDPR
You have the following rights, subject to conditions in the GDPR:
- Access: request a copy of personal data we hold about you
- Rectification: request correction of inaccurate data
- Erasure: request deletion in certain circumstances ("right to be forgotten")
- Restriction: request limited processing in certain cases
- Portability: receive data you provided in a structured, machine-readable format
- Objection: object to processing based on legitimate interests or for direct marketing
- Withdraw consent: where processing is based on consent, you may withdraw at any time
To exercise any of these rights, email hr@elevatesol.com. We respond within one month, or inform you if an extension is needed.
6. Data retention
We retain personal data only as long as necessary for the purposes described in our Privacy Policy, or as required by law. Enquiry data is typically retained for up to 24 months unless a business relationship continues.
7. International transfers
Data may be processed in Pakistan and other countries outside the EEA. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms approved under GDPR.
8. Processors and sub-processors
We use third-party providers (hosting, email, analytics, cloud services) who process data on our behalf under data processing agreements that require GDPR-compliant handling.
9. Data breaches
In the event of a personal data breach affecting your rights, we will notify the relevant supervisory authority within 72 hours where required, and affected individuals without undue delay when the breach poses a high risk.
10. Supervisory authority
You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data lawfully. We encourage you to contact us first so we can address your concern.
11. Related documents
Please also read our Privacy Policy and Terms and Conditions for additional context.
12. Contact
Data protection enquiries: hr@elevatesol.com