Privacy Policy

    Privacy Policy

    Effective date: 8 July 2026. This explains what we collect when you visit elevaite.in or work with us, why, and the choices and rights you have.

    Download the archived PDF version

    1. Who we are

    ElevAIte Automations Private Limited ("ElevAIte", "we", "our", "us") is the data controller for the personal information described in this policy. We are based in Ahmedabad, Gujarat, India, and this policy is written to meet the requirements of the EU/UK General Data Protection Regulation (GDPR) for visitors and customers in the European Economic Area and United Kingdom, alongside applicable Indian law.

    2. Information we collect

    We collect information in three ways: what you give us directly, what your device sends automatically, and aggregate traffic signals that identify no one.

    Information you provide directly

    Name, email address, phone number, company name, and any message or context you share through our contact form, the floating enquiry form, a booked call, or email — only when you choose to submit it.

    Information collected automatically (with your consent)

    If you accept analytics or marketing cookies in our consent banner, Google Analytics (via Google Tag Manager) and the LinkedIn Insight Tag may collect device, browser, approximate location, pages viewed, and referring site, tied to a cookie identifier. See Cookies & tracking below.

    Aggregate traffic data (no consent required, no one identified)

    Independently of the cookie banner, we record a minimal, anonymous count of page views: the page path, the referring site's domain, a coarse device type (mobile, tablet, desktop), and a country derived from your network location. No cookie is set, no IP address is stored, and no persistent identifier is created — see Cookies & tracking for exactly how this works and why it doesn't require consent.

    3. Cookies & tracking

    We use three distinct layers, and we're specific about which ones need your consent.

    Strictly necessary (always on)

    Used to remember your cookie preference itself and to keep the site secure and functional. These cannot be switched off, as required by law.

    Analytics & marketing cookies (only after you say yes)

    Google Analytics and the LinkedIn Insight Tag only load in a tracking capacity, and only set a cookie or read a device identifier, after you actively accept analytics/marketing in the consent banner. Google Consent Mode is used to keep both storage and requests blocked by default until then. You can change your choice at any time from the cookie icon in the site footer.

    Anonymous page-view counter (no cookie, no consent gate)

    Separately, we run a first-party, cookieless counter so we can see basic traffic volume even for visitors who decline cookies. For each page view it records: the page path, the referring website's domain, a coarse device category, and a country code. To count same-day unique visitors without identifying anyone, it computes a one-way hash of your IP address and browser string combined with a secret that changes every day, and only that hash is stored — your IP address itself is never written to a database or log. Because the daily secret is not retained, the hash cannot be reversed to recover your IP, and the same visitor produces an unrelated hash the next day, so no one can be tracked across sessions or days from this data. This does not read or write anything on your device, so it falls outside the ePrivacy cookie-consent requirement, and we rely on our legitimate interest (GDPR Article 6(1)(f)) in understanding basic, non-identifying traffic volume to run and improve the site.

    5. How we use your information

    • Responding to enquiries and booking calls
    • Delivering, managing, and supporting the services you engage us for
    • Understanding, in aggregate, how the site is used so we can improve it
    • Meeting our legal, accounting, and security obligations

    We do not sell personal information, and we do not use it for purposes beyond what is described here.

    6. Who we share it with

    We share personal information only with service providers who process it on our behalf, under contract, to run the site and our business:

    • HubSpot — CRM and enquiry/lead management, once you submit a form.
    • Google (Analytics, Tag Manager) — only after analytics consent.
    • LinkedIn — only after marketing consent.
    • Supabase — hosts our published content and the anonymous page-view counter described above.
    • Vercel — hosts and serves the website.

    We do not share personal information with third parties for their own marketing purposes.

    7. International transfers

    Some of the providers above process data outside the EEA/UK (including in the United States and India). Where that happens, we rely on the provider's Standard Contractual Clauses or equivalent safeguards recognised under GDPR Chapter V.

    8. Data retention

    • Enquiry and contact data: kept while we're in an active conversation or engagement, and for a reasonable period after in case you follow up, then deleted or anonymised.
    • Analytics cookies: per Google's and LinkedIn's own retention windows, controllable from your browser at any time.
    • Anonymous page-view records: since they identify no one, we keep aggregate counts indefinitely for year-on-year comparison; the daily visitor hash cannot be linked back to you.

    9. Your rights

    If you're in the EEA or UK, GDPR gives you the right to:

    • Access the personal information we hold about you
    • Correct inaccurate information
    • Request erasure ("right to be forgotten")
    • Restrict or object to processing
    • Receive your data in a portable format
    • Withdraw consent at any time, without affecting processing before that withdrawal
    • Lodge a complaint with your local data protection supervisory authority

    To exercise any of these, email us at the address below — we aim to respond within one month.

    10. Security

    We use industry-standard safeguards — encrypted transport (HTTPS), access-controlled databases, and least-privilege service credentials — to protect information in our care. No system is perfectly secure, but we treat this seriously and review it on an ongoing basis.

    11. Children's privacy

    Our site and services are directed at businesses and are not intended for children under 16. We do not knowingly collect personal information from children.

    12. Changes to this policy

    We may update this policy as our practices or the law changes. Material changes will be reflected by a new effective date at the top of this page.

    13. Contact us

    [email protected]

    ElevAIte Automations Private Limited, Ahmedabad, Gujarat, India – 380015