Privacy Policy
This policy explains how Business Elevate Pte. Ltd. (“Elevates”, “we”, “us”), a company registered in Singapore, collects, uses and protects personal data when you visit www.elevates.sg, contact us, or book a discovery call. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA), Malaysia’s Personal Data Protection Act 2010, and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR).
1. What we collect
- Enquiry details. When you book a discovery call we collect your company name, first and last name, email, phone number and anything you write in the remarks field.
- Correspondence. Emails and messages you send us, and our replies.
- Usage data, only with your consent. If you accept analytics cookies, Google Analytics records pages viewed, approximate location (city level), device and browser type, referring site and interactions such as form submissions.
- Technical logs. Our hosting provider records IP addresses and request details in short-lived server logs to keep the site secure and working.
We do not ask for, and ask you not to send, sensitive data such as NRIC numbers, health or financial account details.
2. How we use it
- To reply to your enquiry, arrange and hold the discovery call, and prepare a proposal if you ask for one.
- To deliver services if you become a client, and to keep business records we are legally required to keep.
- To understand how the website is used so we can improve it (analytics, only with consent).
- To protect the site against spam and abuse.
We do not sell personal data. We will not add you to a marketing list or send you marketing calls, SMS or emails unless you have separately agreed to it, and we check Singapore’s Do Not Call Registry where the law requires.
3. Consent and legal basis
Under the PDPA, we rely on the consent you give by submitting the form or contacting us, for the purposes described above. If the GDPR applies to you, our legal bases are: taking steps at your request before entering into a contract (enquiries and calls), our legitimate interests in running and securing our business (logs, correspondence), legal obligation (records), and your consent (analytics cookies). You can withdraw consent at any time; see section 8.
4. Who we share it with
We share personal data only with service providers that process it on our behalf, under contract, and only as needed:
- Vercel Inc.: website hosting and form handling.
- Google LLC: Google Workspace (email and documents) and, with your consent, Google Analytics.
- HighLevel Inc. (GoHighLevel / LeadConnector): our CRM, which stores enquiries submitted through the booking form.
- BunnyWay d.o.o. (bunny.net): hosting and streaming of video examples shown on the site.
We may also disclose data where required by law, or to professional advisers under a duty of confidentiality.
5. International transfers
Some providers above store or process data outside Singapore, including in the United States and the European Union. Where we transfer personal data overseas, we make sure the recipient is bound to protect it to a standard comparable to the PDPA, for example through contractual clauses such as the EU Standard Contractual Clauses or the provider’s data processing terms.
6. How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months after our last contact, then deleted.
- Client records: for the duration of the engagement and as long as required for legal, tax and accounting purposes (generally 5 years).
- Google Analytics data: no longer than 14 months.
- Server logs: kept by our hosting provider for a short period, typically days.
7. Cookies
We only set analytics cookies if you click Accept analytics in the cookie banner. If you reject them, or make no choice, Google Analytics runs without cookies and cannot recognise you between visits. You can change your choice at any time: open cookie settings.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
elevates-consent (local storage) | Elevates | Remembers your cookie choice. Strictly necessary. | Until you clear it |
_ga | Google Analytics | Distinguishes visitors. Only with consent. | 2 years |
_ga_8RC7K1DHJG | Google Analytics | Keeps session state. Only with consent. | 2 years |
8. Your rights
You can ask us to:
- tell you what personal data we hold about you and how it has been used in the past year (access);
- correct data that is wrong or incomplete (correction);
- stop using your data, or withdraw a consent you gave (withdrawal);
- if the GDPR applies to you, also erase your data, restrict or object to its use, or receive it in a portable format.
Email us at the address in section 10. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Personal Data Protection Commission of Singapore (pdpc.gov.sg), Malaysia’s Personal Data Protection Department, or, in the EU or UK, your local data protection authority.
9. Security
The site is served only over HTTPS. Access to enquiry data is limited to the people at Elevates who need it, and our providers are required to keep it secure. If a data breach is likely to cause you significant harm, we will notify you and the relevant authority as the law requires.
10. Contact our Data Protection Officer
Data Protection Officer, Business Elevate Pte. Ltd., Singapore
Email: hello@elevates.sg
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on this page.