Privacy Policy

1. INTRODUCTION AND WHO WE ARE

Elon Group Limited ('we', 'us', or 'our') is committed to protecting the privacy and personal data of everyone who visits our website or engages with our services. This Privacy Policy explains how we collect, use, store, share, and protect your personal data, and sets out your rights under applicable data protection law.

We are a data controller under UK GDPR and the Data Protection Act 2018. This means we determine the purposes and means of processing your personal data.

Our details:

Company name: Elon Group Limited Registered in England and Wales Website: www.elongroup.co.uk Email: contact@elongroup.co.uk Address: 20-22 Wenlock Road, London, N1 7GU

If you have any questions about this policy or our data practices, please contact us at the details above.

2. OUR REGISTRATION WITH THE ICO

We are registered with the Information Commissioner's Office (ICO), the UK's independent authority set up to uphold information rights.

You have the right to lodge a complaint with the ICO at any time if you are unhappy with how we have handled your personal data. The ICO can be contacted at:

Website: www.ico.org.uk Telephone: 0303 123 1113 Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, and ask that you contact us in the first instance.

3. PERSONAL DATA WE COLLECT

3.1 Data you provide to us

We may collect the following categories of personal data that you voluntarily provide when you contact us, submit an enquiry, or engage our services:

Identity data: full name, job title, organisation name
Contact data: email address, telephone number, postal address
Professional data: details of your role, sector, and procurement or business challenges
Communications data: the content of emails, messages, or enquiry forms you send us
Contractual data: information necessary to provide our consulting or managed services

3.2 Data we collect automatically

When you visit www.elongroup.co.uk, we may automatically collect certain technical data, including:

IP address and approximate geographic location
Browser type and version
Pages visited, time and date of visit, and time spent on each page
Referring website or source
Device type and operating system

This data is collected through cookies and similar technologies. Please refer to Section 9 (Cookies) for further information.

3.3 Data we receive from third parties

We may receive your professional contact information from publicly available sources such as LinkedIn, Companies House, or publicly published organisational directories, where we have a legitimate interest in contacting you for business development purposes.

4. HOW AND WHY WE USE YOUR PERSONAL DATA

We will only use your personal data where we have a lawful basis for doing so under UK GDPR. The lawful bases we rely on are:

Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms
Legal obligation: where we must process data to comply with a legal obligation
Consent: where you have given clear and explicit consent for us to process your data for a specific purpose

How we use your data and the lawful basis we rely on:

Responding to your enquiry or contact form submission: Legitimate interests / Contract Providing procurement consultancy, managed services, or advisory services: Contract Managing our business relationship and client accounts: Contract / Legitimate interests Sending relevant information about our services to prospective clients: Legitimate interests / Consent Improving and maintaining our website: Legitimate interests Complying with legal or regulatory obligations: Legal obligation Keeping records for accounting and tax purposes: Legal obligation Preventing and detecting fraud or misuse of our services: Legal obligation / Legitimate interests

5. MARKETING COMMUNICATIONS

Where you are a business contact or prospective client, we may contact you with information about our services that we consider may be of legitimate professional interest to you. We do this on the basis of our legitimate interests in promoting our services to relevant business audiences.

You have the right to opt out of receiving marketing communications from us at any time. You can do so by:

Clicking the 'unsubscribe' link in any marketing email we send you
Emailing us at contact@elongroup.co.uk with the subject line 'Unsubscribe'

We will not sell, rent, or share your personal data with third parties for their own marketing purposes.

6. WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We may share your personal data with the following categories of recipient where necessary and proportionate:

Service providers: third-party suppliers who process data on our behalf, such as IT support providers, cloud storage providers, email platforms, and website hosting providers, all of whom are bound by confidentiality and data processing agreements
Professional advisers: solicitors, accountants, and insurers where required
Regulatory authorities: the ICO, HMRC, or other authorities where required by law
Successor organisations: in the event of a business sale, merger, or restructuring, your data may be transferred to the acquiring entity

Any third parties we engage are required to process your personal data only on our documented instructions and in accordance with applicable data protection legislation.

7. INTERNATIONAL TRANSFERS OF PERSONAL DATA

We primarily process personal data within the United Kingdom and the European Economic Area (EEA). Where we use third-party service providers that operate outside the UK or EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK ICO, to protect your personal data in accordance with UK GDPR requirements.

8. HOW LONG WE KEEP YOUR DATA

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Enquiry and contact data: up to 2 years from last contact, unless a contract is formed
Client and contract data: 7 years from the end of the contractual relationship (in line with HMRC requirements)
Marketing opt-out records: retained indefinitely to ensure we respect your preferences
Website analytics data: up to 26 months

When data is no longer required, we will delete or anonymise it securely.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies to distinguish you from other users and to provide you with a good experience. A cookie is a small file of letters and numbers that we store on your browser or device.

Types of cookies we use:

Strictly necessary cookies: essential for the website to function. These cannot be disabled.
Analytics cookies: help us understand how visitors interact with our website. These are only set with your consent.
Functionality cookies: remember your preferences. These are only set with your consent.

On your first visit to our website, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies at that time, and you can change your preferences at any time via our cookie settings.

10. YOUR RIGHTS UNDER UK GDPR

You have the following rights in relation to your personal data:

Right of access: you may request a copy of the personal data we hold about you (a Subject Access Request)
Right to rectification: you may ask us to correct inaccurate or incomplete personal data
Right to erasure: you may ask us to delete your personal data in certain circumstances (the right to be forgotten)
Right to restrict processing: you may ask us to restrict how we process your data in certain circumstances
Right to data portability: you may request that we provide your personal data in a structured, commonly used, and machine-readable format
Right to object: you may object to processing based on legitimate interests, including for direct marketing purposes
Rights in relation to automated decision-making: you have the right not to be subject to solely automated decisions that produce legal or similarly significant effects

To exercise any of these rights, please contact us at contact@elongroup.co.uk. We will respond to all legitimate requests within one calendar month.

We may need to verify your identity before processing your request. We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

11. HOW WE KEEP YOUR DATA SECURE

We have implemented appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:

Use of secure, password-protected systems and encrypted file storage
Access controls limiting data access to authorised personnel only
Regular review of our information security practices
Use of reputable, security-certified third-party service providers

Please be aware that the transmission of information over the internet is not completely secure. While we take all reasonable steps to protect your personal data, we cannot guarantee the security of data transmitted to our website.

12. THIRD-PARTY WEBSITES AND LINKS

Our website may contain links to third-party websites or resources. This Privacy Policy applies only to www.elongroup.co.uk. We are not responsible for the privacy practices or content of any external websites, and we encourage you to read the privacy policies of any site you visit.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do so, we will update the 'Last updated' date at the top of this document. We encourage you to review this policy periodically to stay informed about how we protect your data.

14. CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, please contact us:

Elon Group Limited Email: contact@elongroup.co.uk Website: www.elongroup.co.uk

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

This Privacy Policy was last reviewed and updated on 12 April 2025 and is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.