Privacy Policy

Eliterate Solutions Limited trading as Elite Rated ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use this website (eliterated.co.uk) and our team survey platform and services.

By using this website or our services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use this website or our services.

If you are a survey participant: Your employer or the organisation that invited you to complete a survey is the data controller for your survey responses. We process that data as processor under a Data Processing Agreement. This policy explains how we handle your data in that context, and your rights.

Personal Information

We may collect the following types of personal information:

• Name and contact information (email address, phone number)
• Company and job title information
• Survey responses and feedback
• Account credentials and profile information
• Communication preferences

Usage Information

We automatically collect certain information about your use of our services:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our platform
• Error logs and performance data
• Cookies and similar tracking technologies

We use the information we collect for the following purposes:

• Provide and maintain our survey platform services
• Process and deliver survey results and reports
• Send important service updates and notifications
• Respond to your inquiries and provide customer support
• Improve our services and develop new features
• Ensure platform security and prevent fraud
• Comply with legal obligations and enforce our terms

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption for data in transit (TLS) and at rest
• Secure data centres with physical and digital security
• Access controls and authentication mechanisms
• Contractual requirements for our subprocessors to maintain adequate security

We retain your data only for as long as necessary to fulfil the purposes described in this policy or as required by law. For survey data processed on behalf of an organisation, retention is governed by our Data Processing Agreement with that organisation. Typically, we delete or return data at the end of a project or when requested.

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To service providers (subprocessors) who assist in operating our platform — see below
• To the organisation that commissioned a survey (for aggregated, anonymised reporting; individual responses are not disclosed)
• To comply with legal requirements or court orders
• To protect our rights, property, or safety
• In connection with a business transfer or merger

Service Providers (Subprocessors)

We use the following categories of subprocessors. Organisations that sign a Project Services Agreement receive a full subprocessor list and Data Processing Agreement:

• Google Cloud — Database, file storage, and authentication (UK, London)
• Mailgun — Transactional email such as survey invitations (EU servers)
• DocRaptor — PDF report generation (US; we use appropriate transfer safeguards including the EU–U.S. Data Privacy Framework)
• Stripe — Payment processing
• Vercel — Application hosting

Important: Survey responses are anonymised and aggregated in reports. Individual responses are never disclosed to team leaders or managers.

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent where applicable

To exercise these rights, please contact us at privacy@eliterated.co.uk

We use cookies and similar tracking technologies to enhance your experience on our platform. These technologies help us:

• Remember your preferences and settings
• Analyse platform usage and performance
• Provide personalised content and features
• Ensure platform security and functionality

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect platform functionality.

Your data may be processed in the UK, EU, and in some cases the US, depending on the service:

• UK (London): Our primary database and file storage are hosted in the UK
• EU: Transactional email is processed on EU servers (Mailgun)
• US: PDF report generation uses a US-based service (DocRaptor) that participates in the EU–U.S. Data Privacy Framework (including the UK Extension)

Where we transfer data outside the UK, we use appropriate safeguards (including the UK International Data Transfer Agreement, Standard Contractual Clauses, or adequacy frameworks such as the Data Privacy Framework) in accordance with UK GDPR.

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this website and updating the "Last updated" date. Your continued use of this website or our services after such changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us.