Privacy Policy

Last updated: 30/06/2026

This Privacy Policy explains how Elevate Market Intelligence Limited ("Elevate", "we", "us", "our") collects, uses and protects personal data when you use the website at elevatemi.co.uk and its subdomains, our products and tools, and when you deal with us. We are a company registered in England and Wales (company number 16329736), with our registered office at 6 Lucky Lane, Exeter, EX2 4UJ. The Constant Media (TCM) is a trading name of Elevate Market Intelligence Limited. We are registered with the Information Commissioner's Office (ICO) under reference ZB970398.

We are the controller of the personal data described in this policy, except where we process data on behalf of our business customers (see section 9).

1. The personal data we collect

Information you give us:

Account and contact details — your name, email address, phone number, business details and password when you register, book a demo, or get in touch.
Audit and lead details — when you use our Close the Gap tool, your name and email address and the websites you submit.
Communications — messages, enquiries, feedback and support requests, including via our live chat.
Payment details — if you buy a paid plan, payment is handled by our payment processor, Stripe. We do not store your full card details.

Information from your use of our products:

Connected platform data (segmentation and customer-intelligence tools) — where you connect platforms such as Shopify and other ecommerce systems, CRMs, Mailchimp, Klaviyo, Google Ads, Meta Ads, Google Analytics and PostHog, we process the data you authorise us to access to provide the Services. For most of this data we act as a processor on your behalf (see section 9).
Learning activity — if you use our Learn area, we may store your progress, linked to your account or to an anonymous session token.

Information we collect automatically:

Usage and analytics data — how you interact with our sites and tools, collected through product and web analytics (including PostHog and Google Analytics via Google Tag Manager).
Technical data — IP address, device and browser type, and similar information.
Cookies and similar technologies — as described in our Cookie Policy.

2. How and why we use personal data, and our lawful bases

We use personal data to:

provide, operate and improve our sites, products and tools, and deliver audits, reports and insights you request — on the basis of performance of a contract with you, or our legitimate interest in operating and improving our business;
communicate with you about your account, enquiries and support — contract and legitimate interests;
send you follow-up and marketing communications relevant to a service you have used or asked about, which you can opt out of at any time — legitimate interests and, where required, your consent, in line with PECR;
analyse usage to understand and improve performance — legitimate interests and, for non-essential cookies, your consent;
take payment for paid plans — performance of a contract; and
comply with legal obligations and protect, establish or defend our legal rights — legal obligation and legitimate interests.

Where we rely on legitimate interests, we have considered that these are not overridden by your rights. You can ask us for more detail about this balancing.

3. How we hold customer data in our tools

We design our products to minimise the personal data we hold. In our segmentation and customer-intelligence tools, where an email address is used as a key to match records across platforms, we convert it to an MD5 hash before storing it. We do not treat address-level data or order data, on its own, as identifying a living individual. Our Databank product makes available address-level data only and does not store or sell data identifying named individuals. We do not sell personal data.

We share personal data with:

service providers (sub-processors) who help us run our business and products, including cloud hosting and infrastructure, our payment processor (Stripe), product and web analytics, transactional and marketing email providers, our customer records (CRM) and live-chat tools, and AI/large-language-model providers used to generate insights;
professional advisers, auditors and authorities where necessary for legal, accounting or compliance reasons; and
a buyer or successor if we sell or reorganise our business, in which case personal data may be transferred as part of that transaction.

We require our service providers to protect personal data and to use it only for the purposes we specify.

5. International transfers

We host and process personal data in the UK and/or the European Economic Area (EEA). Where personal data is transferred outside the UK/EEA (for example by some of our service providers), we put appropriate safeguards in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How we protect personal data

We use appropriate technical and organisational measures, including encryption of data in transit and at rest, field-level encryption of sensitive fields, hashing of email identifiers, access controls on a need-to-know basis, and secure, monitored infrastructure. No system can be guaranteed completely secure, but we take security seriously and review our measures regularly.

7. How long we keep personal data

We keep personal data only as long as necessary for the purposes set out in this policy, or as required by law. Account information is kept while your account is active. If you close your account or ask us to delete your personal data, we will delete it within 30 days, subject to any legal retention requirements. Analytics data may be kept in aggregated or anonymised form.

8. Your rights

Depending on your circumstances, you have the right to: access your personal data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and to withdraw consent where we rely on it. You also have the right to opt out of marketing at any time.

To exercise any of these rights, contact us at [email protected]. To ask us to delete your data, you can also use our Data Removal Request process. We will respond within the time limits set by data protection law.

If you are unhappy with how we have handled your personal data, you can complain to the ICO at ico.org.uk, though we would welcome the chance to resolve your concern first.

9. When we act as a processor for business customers

When you use our products to process data about your own customers and contacts (for example through our segmentation tools), you are the controller of that data and we act as your processor. Our processing in that role is governed by our Data Processing Addendum. This Privacy Policy applies to the personal data for which we are the controller — for example your own account and contact details.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy, including how to manage or withdraw your consent.

11. Children

Our sites, products and services are not directed at children, and are not intended for anyone under 16. We do not knowingly collect personal data from children under 16.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date shows when it last changed, and we will take reasonable steps to tell you about material changes.

13. Contact us

For any privacy question or request, contact us at [email protected], by phone on +44 (0)1392 542 833, or by post at Elevate Market Intelligence Limited, 6 Lucky Lane, Exeter, EX2 4UJ.

Contact: [email protected] · +44 (0)1392 542 833 · Elevate Market Intelligence Limited, 6 Lucky Lane, Exeter, EX2 4UJ · ICO registration ZB970398