Privacy notice
This notice explains how Elvar Systems Ltd uses personal data when you visit elvarsystems.co.uk or contact us through it. It covers this website only. Our products have their own terms and data processing agreements, which apply to the firms that use them.
1. Who we are
Elvar Systems Ltd (“Elvar”, “we”, “us”) is the controller of the personal data described here. We are a private limited company registered in England and Wales under company number 17180679, with our registered office at 66 Paul Street, London, EC2A 4NA. We are registered with the Information Commissioner’s Office under registration number ZC221456.
For anything about your personal data, write to contact@elvarsystems.co.uk.
2. What we collect, and why
Contact, waitlist and pilot forms
When you press “Send message” on our contact page, your browser sends the form to our contact service. We receive an email containing:
- your name, work email address, company, role and company type;
- what you are interested in (the waitlist, a pilot, investing, careers or a general question);
- your message;
- whether you ticked the box asking for occasional product news.
At the Cloudflare contact-service cutover, a same-origin Cloudflare Worker checks each submission. Cloudflare Turnstile provides security processing and may ask you to complete a challenge; Cloudflare may process your IP address, browser and device information and challenge interactions for this purpose. Rate limiting is configured in the Cloudflare dashboard. We do not operate an application-owned submission database or an application-owned IP-hash rate-limiting store. Cloudflare’s processing and retention are governed by its terms and our configuration, which the owner must confirm and counsel must review before cutover.
After those checks, the Worker calls the Hostinger Mail API directly. Hostinger delivers the message to our mailbox and keeps a copy in the mailbox’s Sent folder. There is no separate application-owned database of contact submissions.
We use this to reply to you, to contact you about the waitlist or a pilot if you asked about one, and to decide whether a pilot is a fit. Our lawful basis is our legitimate interest in responding to enquiries and developing business relationships, and, for a pilot, taking steps at your request before entering into a contract.
We send product news only if you ticked the box for it, and our lawful basis for that is your consent. The box starts unticked, and you can withdraw your consent at any time by writing to us.
If you email us directly, we receive whatever you choose to send, and use it in the same way.
Website analytics
We use PostHog, an analytics service hosted in the European Union, to understand how this website is used. It works without cookies and without storing anything on your device: nothing it uses survives beyond the page you are on. It records:
- the pages you view, and the site or link that referred you to us;
- your IP address, and your approximate location (country and region) derived from it;
- your browser, operating system and device type, and your screen size;
- a few named actions: reading the FAQ, reading a blog post, and submitting the waitlist, pilot or contact form. For a form, it records only that a form was submitted and which kind; it does not record anything you typed.
PostHog keeps your IP address with these records for the analytics retention period below. It does not build a profile of you or follow you between visits. Our lawful basis is our legitimate interest in understanding how people find and use the site, so that we can improve it. You can object at any time (see section 6), and your browser’s Do Not Track setting is honoured.
Hosting
When your browser requests a page, our hosting provider processes your IP address and the technical details of the request in order to deliver the page and protect the service.
Fonts
This site loads its typefaces from Google Fonts. To fetch them, your browser connects to Google’s servers, which receive your IP address. Google Fonts does not set cookies.
3. Who we share it with
We do not sell personal data, and we do not run advertising or cross-site tracking on this website. We use these processors, each under a contract that limits what they may do with it:
- Google (Firebase Hosting) hosts this website and serves Google Fonts.
- Cloudflare will provide the contact Worker, Turnstile security processing and dashboard rate limiting at the contact-service cutover.
- PostHog, using its EU Cloud with data hosted in the European Union, provides website analytics when it is switched on.
- Hostinger hosts our email and its Mail API delivers contact messages, so it holds the messages you send us and the corresponding Sent mailbox copies.
We may also disclose personal data where the law requires it, or to professional advisers under a duty of confidentiality.
4. International transfers
Some of our processors, or their sub-processors, may process data outside the UK. Where they do, we rely on UK adequacy regulations (for example, for the European Economic Area) or on safeguards approved for UK transfers, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details.
5. How long we keep it
- Enquiries and pilot applications: 24 months after our last contact with you.
- Waitlist details: until you ask to be removed, or 12 months after Elvar is generally available, whichever is sooner.
- Website analytics events: 12 months.
- Hosting request logs: 30 days, or as set by our hosting provider.
We delete or anonymise data at the end of these periods unless the law requires us to keep it.
6. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct it, or to complete it;
- ask us to erase it;
- ask us to restrict how we use it;
- object to our use of it where we rely on legitimate interests, including for analytics;
- receive data you gave us in a portable format, where the law provides for it;
- withdraw your consent to product news at any time.
To use any of these rights, write to contact@elvarsystems.co.uk. We respond within one month, as the law requires, or tell you within that month if we need longer and why. We do not make decisions about you based solely on automated processing.
7. Complaints
If you are unhappy with how we have handled your data, please tell us first at contact@elvarsystems.co.ukso that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection: ico.org.uk/make-a-complaint, or 0303 123 1113.
8. Children
This website is meant for businesses and is not directed at children.
9. Cookies
This website does not set cookies. Our cookie notice has the detail.
10. Changes to this notice
We may update this notice. The date at the top shows when it last changed, and material changes are flagged on this page.