Privacy Notice

1. Who we are

Elanvia Consulting Ltd ("Elanvia", "we", "our" or "us") is the controller responsible for the personal data described in this notice. We are registered in England and Wales under company number 16802763, with our registered office at 128 City Road, London, EC1V 2NX, England. You can contact us at enquiries@elanviaconsulting.com.

This notice explains how we handle personal data when you use our website, contact us, or complete the Delivery Confidence Assessment.

2. Personal data we collect

• Contact form: your name and email address, optionally your organisation and role, and the content of your message.
• Delivery Confidence Assessment: the responses you select. If you choose to request a follow-up, we also collect the name, email address, and optionally the organisation and message you provide.
• Website analytics: aggregated, anonymised usage data collected through Vercel Analytics. This does not identify you personally.

We do not ask for special category data. Please do not include confidential organisational information or sensitive personal data in free-text fields.

3. How and why we use personal data

We use the personal data you provide to:

• respond to an enquiry you send us;
• take steps you ask us to take before entering into a possible contract, such as discussing a potential engagement;
• provide the indicative assessment result you requested and, where you share contact details, follow up on it;
• operate, secure and improve our website, which reflects our legitimate operational interests;
• send marketing communications only where you have asked us to, as described in section 10.

We use analytics data only in aggregate to understand how the website is used.

4. Delivery Confidence Assessment data

The Delivery Confidence Assessment produces an indicative organisational-state result based only on the responses you select. It is a guide to support discussion, not a definitive measurement.

Your assessment responses are not linked to your personal details unless you choose to submit your contact details through the follow-up form.

The assessment does not make a legal or similarly significant decision about you by automated means. Any decision about working together is taken by a person.

5. Lawful bases

We rely on the following lawful bases under UK GDPR:

• Legitimate interests: responding to and managing enquiries, providing the assessment result you requested, and keeping our website secure and effective. You can object to processing based on legitimate interests.
• Steps prior to a contract: where you contact us to explore a possible engagement, we process your information to take the steps you have requested before any contract is entered into.
• Consent: where you have opted in to receive marketing communications. You can withdraw your consent at any time.

6. Service providers and recipients

We use a small number of trusted service providers who process personal data on our behalf:

• Resend: contact form and assessment follow-up submissions are delivered to our mailbox using Resend, our transactional email provider.
• Vercel: our website is hosted on Vercel, which also provides the anonymised analytics described above.

We do not sell your personal data. We share it only with these providers, or where we are required to do so by law.

7. International transfers

Some of our service providers are based outside the United Kingdom. This means your personal data may be transferred to and processed in countries outside the UK. Where this happens, we take reasonable steps to ensure your personal data remains protected to a standard consistent with UK data protection law.

8. How long we retain personal data

We keep personal data only for as long as we need it. Enquiry and assessment correspondence received in our email system is generally retained for up to two years, after which it is reviewed and deleted unless an ongoing relationship or a legal obligation requires us to keep it for longer. Aggregated analytics data does not identify you and is retained by our analytics provider in line with its own retention practices.

9. Individual rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data in certain circumstances;
• restrict or object to our processing of your data;
• request a copy of certain data in a portable format;
• withdraw consent where we rely on it.

To exercise any of these rights, contact us using the details in section 13. We will respond within the time limits set by UK data protection law.

10. Marketing communications

We send marketing communications only to people who have asked to receive them. Submitting an enquiry or assessment does not automatically add you to a marketing list. Where you have opted in, you can withdraw your consent and unsubscribe at any time by contacting us.

11. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at https://ico.org.uk/make-a-complaint/.

12. Changes to this notice

We may update this notice from time to time. When we do, we will revise the "Last updated" date below and, where appropriate, tell you about significant changes.

13. Contact details

Elanvia Consulting Ltd
Company number: 16802763
Registered in England and Wales
Registered office: 128 City Road, London, EC1V 2NX, England
Email: enquiries@elanviaconsulting.com

Last updated: August 2026