Privacy policy.

Elabela Ltd, a company registered in the United Kingdom, is the data controller for personal data collected via elabela.co. Contact: sam@elabela.co.

We only collect personal data you actively provide via the contact form or by emailing us directly. That is limited to your name, email address, optional organisation, subject, and the contents of your message.

The Site does not use analytics cookies or tracking pixels. No account, sign-up, or payment is required to browse the Site.

We use the information you send us solely to respond to your enquiry and, where relevant, to enter into or perform a consulting or sponsorship engagement with you or your organisation.

Our lawful bases under UK GDPR are (a) our legitimate interest in responding to enquiries addressed to us, and (b) the necessity of processing for steps taken at your request before entering into a contract.

We do not sell or share your data with third parties for marketing. Personal data is processed by service providers that help us operate the Site and email:

• Cloudflare — hosting and content delivery for the Site.
• Your email provider and ours — delivery of email messages you send us.

We retain enquiry emails for up to 24 months from last contact, then delete them. Records relating to a consulting engagement are retained for as long as needed to comply with our legal, accounting, and tax obligations.

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing based on legitimate interests. To exercise any of these, email sam@elabela.co.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

We may update this policy from time to time. The current version will always be at this URL, with the "Last updated" date above.