Privacy Policy

1. Who we are

ELMARON LTD (Registered in England and Wales, registered office: 26 Cattistock Road, Bournemouth, BH8 9PH, England) is the data controller responsible for your personal data collected through this website and our services.

Contact: info@elmaron.co.uk

2. Data we collect

We may collect the following categories of personal data:

• Identity data — name, company name, job title.
• Contact data — email address, telephone number.
• Communication data — enquiries submitted via email, voice notes or contact forms.
• Technical data — IP address, browser type and version, time zone, pages visited, referral source. Collected only in aggregate or pseudonymised form.
• Voice data — audio recordings submitted voluntarily through our voice-intake feature. Recordings are transcribed immediately and destroyed at source unless you have contracted explicit retention.

3. How we use your data

• To respond to your enquiries and deliver contracted consulting services.
• To send service-related communications (invoices, project updates, SLA reports).
• To improve the performance and security of this website.
• To comply with legal obligations under UK and EU law.

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

• Contract performance — processing necessary to deliver the services you have engaged us for.
• Legitimate interests — improving our website and communicating with prospective clients, balanced against your rights.
• Legal obligation — compliance with UK tax, corporate and regulatory requirements.
• Consent — where we have obtained your explicit consent, such as for marketing communications.

5. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Client records: 7 years after end of engagement (UK Companies Act requirement).
• Voice intake recordings: destroyed immediately after transcription unless contractually retained.
• Marketing enquiries: 2 years from last contact, or until consent is withdrawn.
• Technical / server logs: 90 days in rolling pseudonymised form.

6. Sharing your data

We do not sell, rent or trade your personal data. We may share data with:

• Service providers acting as data processors (hosting, email delivery, analytics) under binding data-processing agreements.
• Professional advisers (lawyers, accountants) under duties of confidentiality.
• Regulatory or law-enforcement authorities where required by applicable law.

All third-party processors are either based in the UK / EEA or operate under an adequacy decision or standard contractual clauses.

7. Your rights

Under UK GDPR you have the right to:

• Access — obtain a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion where there is no lawful basis for retention.
• Restriction — limit processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any right, email info@elmaron.co.uk. We will respond within 30 calendar days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement technical and organisational measures proportionate to the risk, including edge-native infrastructure with no persistent CMS attack surface, encrypted data in transit (TLS 1.3), and access controls limited to authorised personnel. We conduct regular security reviews and maintain incident-response procedures.

9. Cookies

This website uses minimal cookies. See our Cookie Policy for full details.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to active clients or by a prominent notice on this page. The "last updated" date at the top of this document reflects the most recent revision.