Privacy Policy

1. Introduction

elce.ai ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal data when you use our website (elceai.com) and related services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection legislation, elce.ai is the data controller. If you have any questions about this policy or how we handle your personal data, please contact us at info@elceai.com.

2. Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly: When you complete our contact form, request access to documentation, or correspond with us by email, we collect the information you provide — typically your name, email address, organisation name, job title, and the content of your message.

Technical data collected automatically: When you visit our website, we may collect technical information including your IP address, browser type and version, operating system, referral source, pages visited, and duration of visit. This data is collected through server logs and, where applicable, analytics tools.

Resource portal data: If you access the C-PAP resource portal, we may collect usage data necessary to provide and improve the service.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries: Processing contact form submissions and email correspondence to provide the information or services you have requested.

To provide our services: Administering client accounts, providing access to the C-PAP platform, and delivering contracted services.

To improve our website: Analysing usage patterns to improve site performance, content, and user experience.

To comply with legal obligations: Processing data where necessary to comply with applicable laws and regulations.

4. Lawful Basis for Processing

We process personal data on the following lawful bases under UK GDPR:

Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving communications from us.

Contractual necessity (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering a contract.

Legitimate interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include improving our services, maintaining the security of our systems, and understanding how our website is used.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties for marketing purposes. We may share data with:

Service providers: Trusted third-party service providers who assist in operating our website and delivering our services (such as hosting providers and email services), subject to appropriate data processing agreements.

Legal requirements: Where we are required to disclose data by law, regulation, or legal process.

Professional advisers: Our legal, accounting, or other professional advisers where necessary for the purposes of obtaining professional advice.

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed regularly and updated as appropriate to the nature and sensitivity of the data we process.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions and general enquiry data are retained for a maximum of 24 months from the date of last correspondence, unless an ongoing business relationship exists.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request that we correct any inaccurate or incomplete personal data.

Right to erasure: You may request that we delete your personal data, subject to any legal obligations requiring us to retain it.

Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.

Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.

Right to object: You may object to the processing of your personal data where we are relying on legitimate interests as the lawful basis.

To exercise any of these rights, please contact us at info@elceai.com. We will respond to your request within one month, as required by UK GDPR.

10. Cookies

Our website uses essential cookies necessary for the operation of the site. Where we use non-essential cookies (such as analytics cookies), we will obtain your consent before placing them. You can manage your cookie preferences through your browser settings.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. The ICO can be contacted at ico.org.uk.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable legislation. Any changes will be posted on this page. We encourage you to review this policy periodically.

14. Contact

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:

elce.ai
Email: info@elceai.com
Website: elceai.com