Privacy Policy

1. Who We Are

This Privacy Policy applies to Elevate Impact Training, the trading name of The Academy for Training and Coaching Ltd, a company registered in England and Wales.

As the Data Controller, we are responsible for deciding how and why personal data about you is processed. If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. Data We Collect

We may collect and process the following categories of personal data:

Contact and identity information

• Your name
• Your job title and organisation name
• Your email address
• Your telephone number

Enquiry and communication data

• The content of messages you send us via our contact form or email
• Details of training requirements you share with us
• Records of telephone conversations where you have consented
• Your preferred contact method and availability

Technical data

• Your IP address and browser type (collected automatically by our website)
• Pages visited and time spent on our website
• Referring website or search term that brought you to our site
• Device type and operating system

3. How We Collect Your Data

We collect personal data in the following ways:

Directly from you

• Contact and enquiry forms on our website — when you submit an enquiry, request a callback or ask about a specific training programme
• Email — when you contact us directly at training@elevateimpacttraining.com
• Telephone — when you call us to discuss training requirements
• Calendly — when you book a consultation or discovery call through our scheduling tool
• In person — during meetings, events or training delivery

Automatically from your device

• When you visit our website, certain technical data is collected automatically through cookies and similar technologies (see Section 7)
• Google Fonts loads typeface files from Google's servers when you visit our site — this may involve your IP address being transmitted to Google

4. How We Use Your Data

We use the personal data we collect for the following purposes:

5. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

6. Third-Party Services

We use a small number of trusted third-party services to operate our website and handle enquiries. Each service is listed below with details of what data is shared and why.

Formspree

We use Formspree to process submissions from our website contact and enquiry forms. When you submit a form, your data (name, email, phone, message and any other fields you complete) is transmitted to Formspree's servers and forwarded to us by email.

• Formspree is based in the United States and processes data under Standard Contractual Clauses
• Data is retained by Formspree for a limited period for spam and abuse prevention
• Formspree Privacy Policy: formspree.io/legal/privacy-policy

Calendly

We use Calendly to allow visitors to book consultation and discovery calls directly. When you book through Calendly, you provide your name, email address and any additional information requested.

• Calendly is based in the United States and processes data under Standard Contractual Clauses
• Your booking data is used solely to schedule and manage the call
• Calendly Privacy Policy: calendly.com/privacy

Google Fonts

Our website uses Google Fonts to display the Poppins typeface. When you visit our site, your browser sends a request to Google's servers to load the font files. This request may include your IP address.

• We use Google Fonts via a direct embed — your IP address may be transmitted to Google each time a page loads
• Google may use this data in accordance with their privacy policy
• Google Privacy Policy: policies.google.com/privacy

7. Cookies

Cookies are small text files stored on your device when you visit a website. Our website uses a minimal number of cookies.

If you wish to disable cookies entirely, you can do so through your browser settings. Please note that disabling all cookies may affect the functionality of some websites you visit.

8. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law.

When data is no longer required, it is securely deleted or anonymised. If you would like your data deleted before this period, please contact us (see Section 13).

9. Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you (a Subject Access Request)
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data where there is no compelling reason for us to continue processing it
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances
• Right to data portability — where processing is based on consent or contract, you can ask us to provide your data in a structured, machine-readable format
• Right to object — you can object to processing based on legitimate interests, including for direct marketing
• Rights related to automated decision-making — we do not use automated decision-making or profiling, so this right is not currently applicable
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

Right to complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator:

• Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would always encourage you to contact us in the first instance so we have the opportunity to resolve your concern directly.

10. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These include:

• Secure email transmission using encrypted connections (TLS)
• Password-protected access to systems and devices holding personal data
• Limited access to personal data on a need-to-know basis
• Regular review of data handling practices
• Use of reputable third-party processors with appropriate data security standards

Where we transfer data to third-party processors based outside the UK or EEA (such as Formspree or Calendly), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

No method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required under UK GDPR.

11. Children

Our website and services are directed at business professionals and organisations. We do not knowingly collect personal data from anyone under the age of 18.

If you believe that a child has provided us with personal data, please contact us immediately at training@elevateimpacttraining.com and we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. If we make any material changes that significantly affect how we handle your data, we will take reasonable steps to notify you — for example by displaying a prominent notice on our website.

Continued use of our website after any changes to this policy constitutes acceptance of the updated terms.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a concern about how we handle your personal data, please contact us: