Privacy Policy

Last updated: August 2026

Ellievate Creative ("we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, subscribe to our marketing communications, or otherwise interact with us.

We are a marketing agency based in the United Kingdom and, where we determine the purposes and means of processing your personal data, we are the data controller.

Who we are

Our company is Ellievate Creative, trading as Ellievate Creative.

Registered office: Swadlincote, Derbyshire.

Email:hello@ellievatecreative.co.uk

Website: www.ellievatecreative.co.uk

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

The personal data we collect

Depending on how you interact with us, we may collect the following types of personal data:

Information you provide to us

This may include:

your name;
email address;
telephone number;
company or organisation name;
job title or role;
information contained in enquiries or messages you send to us;
information you provide when requesting a quote or our services;
information provided when subscribing to our newsletter or marketing communications;
information relating to our business relationship with you, including client and supplier information; and
any other information you voluntarily provide to us.
Information collected automatically

When you use our website, we may automatically collect information such as:

IP address;
browser type and version;
device type;
operating system;
approximate location;
pages visited and how you interact with our website;
referring website or source;
date and time of visits; and
information collected through cookies and similar technologies.

Some of this information may constitute personal data where it can be linked to you or your device.

How we collect your personal data

We may collect personal data:

directly from you when you complete a form on our website;
when you contact us by email, telephone or other means;
when you subscribe to our newsletter or marketing communications;
when you request information, a quotation or our services;
during the course of providing services to you;
when we communicate with you as a client, supplier or business contact;
through cookies and similar technologies when you use our website; and
from publicly available sources or third parties where this is lawful and appropriate.

Where we obtain personal data from a source other than you, we will provide the privacy information required by applicable data protection law.

How we use your personal data

We may use your personal data for the following purposes:

responding to enquiries and requests;
providing information about our services;
preparing quotations and proposals;
entering into and managing contracts;
providing marketing and other services to clients;
managing our relationships with clients, suppliers and other business contacts;
sending newsletters and other marketing communications where permitted by law;
understanding how visitors use our website;
analysing website traffic and improving our website;
measuring the effectiveness of our marketing campaigns;
delivering and measuring online advertising;
maintaining the security and functionality of our website and systems;
keeping appropriate business and financial records;
complying with legal and regulatory obligations;
establishing, exercising or defending legal claims; and
protecting our business, website, systems and users against fraud, abuse or security threats.

We will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by law.

Our lawful bases for processing

Data protection law requires us to have a lawful basis for processing personal data.

Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract

We may process your personal data where this is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.

For example, we may use your contact details to provide our services, prepare a proposal or manage our contractual relationship with you.

Legitimate interests

We may process personal data where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

operating and developing our business;
managing client and supplier relationships;
responding to business enquiries;
improving our services and website;
protecting our systems and business;
understanding and improving our marketing activities; and
carrying out appropriate business-to-business marketing where permitted by law.

Where we rely on legitimate interests, we will consider whether the processing is necessary and whether our interests are appropriately balanced against your rights.

Consent

Where required by law, we will ask for your consent before processing your personal data.

For example, we may ask for consent to send certain types of electronic marketing or to use non-essential cookies and similar technologies.

You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

Legal obligations

We may process personal data where necessary to comply with a legal or regulatory obligation.

Marketing communications

We may send you information about our services, news, events, insights and other marketing communications.

Where required, we will obtain your consent before sending electronic marketing communications. In limited circumstances, we may rely on the "soft opt-in" where the applicable requirements are met.

The Privacy and Electronic Communications Regulations 2003 (PECR) impose additional rules on electronic marketing. For example, marketing emails and similar electronic communications to individuals generally require consent unless a specific exception applies.

You can unsubscribe from our marketing communications at any time by:

clicking the unsubscribe link in our marketing emails; or
contacting us using the details provided in this Privacy Policy.

We will respect your marketing preferences and maintain appropriate records of individuals who have opted out.

Cookies and similar technologies

Our website may use cookies and similar technologies.

Cookies are small text files placed on your device that can help websites remember information, understand how visitors use the website and provide certain functionality.

We may use different categories of cookies, including:

Strictly necessary cookies – required for the website to operate or provide a service you have requested;
Analytics cookies – used to understand how visitors use our website and help us improve it;
Advertising cookies – used to help measure advertising campaigns and, where applicable, support personalised or targeted advertising; and
Preference or functionality cookies – used to remember choices and improve your experience.
Where required, we will ask for your consent before placing or accessing non-essential cookies or similar technologies on your device.

You can manage your cookie preferences through our cookie consent tool and, depending on your browser, through your browser settings.

The ICO's current guidance states that organisations generally need to explain what cookies do and obtain consent before using non-essential cookies, subject to limited exceptions for technologies that are strictly necessary.

Important: Our separate Cookie Policy should list the specific cookies and technologies actually used on our website.

Analytics and advertising

We may use third-party analytics and advertising services to understand website usage, measure marketing campaigns and improve our advertising.

Depending on the services we use, these providers may process information such as:

IP address;
device and browser information;
pages visited;
interactions with our website;
advertising identifiers;
referral information; and
information about interactions with our advertisements.

Where these technologies require consent, we will obtain consent before activating them.

The specific providers we use may change from time to time. Our Cookie Policy should provide further information about the technologies currently active on our website.

Who we share personal data with

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Policy.

These may include:

website hosting and infrastructure providers;
email and newsletter platforms;
customer relationship management (CRM) systems;
analytics providers;
advertising and social media platforms;
IT and software providers;
payment and accounting providers;
professional advisers such as accountants, lawyers and insurers;
suppliers and subcontractors supporting our business or services; and
law enforcement, regulators, courts or other authorities where required or permitted by law.

We require appropriate third parties that process personal data on our behalf to handle that data securely and in accordance with applicable data protection law.

We do not sell your personal data.

International transfers

Some of our service providers may process personal data outside the United Kingdom.

Where we transfer personal data outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your personal data continues to receive an appropriate level of protection.

Depending on the circumstances, this may include relying on UK adequacy regulations, appropriate safeguards such as the International Data Transfer Agreement or UK Addendum to EU standard contractual clauses, or another lawful transfer mechanism.

How long we keep your personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, contractual or reporting requirements.

The retention period will depend on the nature of the information and our relationship with you.

For example:

enquiry information may generally be retained for a reasonable period after the enquiry has been dealt with;
client information may be retained for the duration of our relationship and for an appropriate period afterwards;
financial and accounting records will be retained for the periods required by applicable law; and
marketing preferences and suppression records may be retained for as long as necessary to ensure that we respect your marketing choices.

We regularly review the personal data we hold and delete or securely dispose of information that is no longer required.

How we protect your personal data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

access controls;
password and authentication controls;
secure systems and software;
appropriate staff training;
supplier due diligence;
backups and security monitoring; and
procedures for identifying and responding to personal data breaches.
However, no method of transmitting or storing information can be guaranteed to be completely secure

Your data protection rights

Subject to applicable legal conditions and exemptions, you may have the following rights in relation to your personal data:

The right to be informed about how we use your personal data;
The right of access to the personal data we hold about you;
The right to rectification of inaccurate or incomplete personal data;
The right to erasure of your personal data in certain circumstances;
The right to restrict processing in certain circumstances;
The right to data portability in certain circumstances;
The right to object to certain processing, including direct marketing; and
Rights relating to automated decision-making and profiling, where applicable.

Where we process your personal data based on consent, you can withdraw your consent at any time.

If you wish to exercise any of these rights, please contact us using the details in section 1.

The ICO confirms that individuals have rights in relation to access, rectification, erasure, restriction, portability, objection and certain automated decision-making, subject to the applicable legal requirements and exemptions.

Direct marketing and your right to object

You have the right to object to the processing of your personal data for direct marketing purposes.

If you ask us to stop sending you marketing communications, we will update our records and stop sending marketing communications to you, subject to any limited communications that we may need to retain or send for legitimate administrative or legal purposes.

We will not make you create an account or take unnecessarily complicated steps to unsubscribe from our marketing communications.

Third-party websites

Our website may contain links to websites operated by third parties.

This Privacy Policy does not apply to those websites. We are not responsible for the privacy practices, content or security of third-party websites.

We recommend that you read the privacy policies of any third-party websites you visit.

Children's privacy

Our website and services are not specifically directed at children.

We do not knowingly collect personal data from children where this is not appropriate or permitted. If you believe that a child has provided us with personal data, please contact us so that we can review and, where appropriate, delete the information.

Automated decision-making and profiling

We do not currently use personal data to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

We may use analytics, advertising and marketing technologies that involve profiling or automated processing for advertising and measurement purposes. Where applicable, information about these technologies will be provided through our Cookie Policy and relevant consent mechanisms.

Personal data breaches

If we become aware of a personal data breach, we will assess it and take appropriate steps to contain, investigate and remedy the breach.

Where required by applicable data protection law, we will notify the Information Commissioner's Office (ICO) and/or affected individuals within the applicable timeframes.

Complaints

If you have concerns about how we have handled your personal data, please contact us first so that we can investigate and try to resolve your concerns.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: Information Commissioner's Office

The ICO provides information about data protection rights and how to make a complaint.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, services or legal and regulatory requirements.

The latest version will always be published on this page, with the "Last updated" date shown at the top.

Where required, we will take additional steps to notify you of significant changes or bring new uses of your personal data to your attention.

If you have any questions about this Privacy Policy, our use of your personal data, or your data protection rights, please contact:

Ellievate Creative
Email: hello@ellievatecreative.co.uk