Privacy Policy

Last updated: 14 September 2026. This Privacy Policy explains how Eleva Pro Technology ("Eleva", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website at eleva-protech.com (the "Site"), contact us, subscribe to our newsletter, or use any of our products or services (collectively, the "Services").

Where a specific contract, data processing agreement, or master service agreement applies, that document governs.

1. Information We Collect

1.1 Information you give us directly

Contact and lead data — name, email, phone number (including WhatsApp), company, role, country, and the contents of any message you send us through the contact form or any other channel.
Newsletter data — email address and confirmation status when you subscribe to our newsletter.
Account data — if you are granted access to our admin area or a product dashboard, your name, email, hashed password, role, and authentication metadata.

1.2 Information collected automatically

Device and usage data — IP address, browser type and version, operating system, referring URL, pages visited, time spent on each page, and approximate location derived from the IP.
Cookies and similar technologies — see our Cookie Policy for the full list.
Server logs — request metadata retained by our hosting and edge providers for security and debugging.

1.3 Information from third parties

If you interact with us on social media (Facebook, LinkedIn, Instagram, X, YouTube, TikTok) or land on the Site through a paid advertisement, the relevant platform may share limited engagement data with us under their own privacy terms.

2. How We Use Your Information

We process the information described above for the following purposes:

To respond to enquiries and deliver the Services you request.
To send newsletters and product updates, only when you have opted in.
To operate, protect, and improve the Site and the Services.
To measure audience and campaign performance through analytics tools.
To comply with applicable laws, regulations, and contractual obligations.
To establish, exercise, or defend legal claims.

3. Legal Bases for Processing (EEA / UK / similar jurisdictions)

Where the GDPR or equivalent law applies, we rely on one or more of the following legal bases:

Consent — for newsletter subscriptions, non-essential cookies, and any optional analytics.
Contract — to take steps at your request prior to entering a contract, and to perform a contract we have with you.
Legitimate interests — for operating, securing, and improving the Services in a way that does not override your fundamental rights.
Legal obligation — to comply with applicable law.

We do not sell your personal data. We share information only as described below:

Service providers — vetted vendors that help us run the Site and the Services, including hosting, email delivery, cloud storage (Google Cloud Storage), analytics (Google Analytics, Google Tag Manager), and marketing (Meta / Facebook Pixel). Each provider is bound by a data processing or confidentiality agreement.
Professional advisers — auditors, lawyers, or insurers when reasonably necessary.
Authorities — when we are legally required to do so or to protect our rights.
Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality safeguards.

5. International Transfers

Some of our service providers are located outside Egypt, including in the European Economic Area and the United States. Where personal data is transferred internationally, we use contractual safeguards (such as the European Commission's Standard Contractual Clauses) and other lawful transfer mechanisms to protect your information.

6. Data Retention

We keep personal data only for as long as needed to fulfil the purposes set out in this policy, including to satisfy any legal, accounting, or reporting requirements. Specifically:

Contact and lead enquiries: up to 24 months from the last interaction.
Newsletter subscriptions: until you unsubscribe.
Server logs: typically 30 to 90 days.
Backups: retained on a rolling schedule for disaster recovery, then securely overwritten.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data.
Restrict or object to certain processing.
Request portability of your data.
Withdraw consent at any time, without affecting prior lawful processing.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit (HTTPS / TLS), access controls, and least-privilege principles. No system is perfectly secure; we cannot guarantee absolute security.

9. Children's Privacy

The Services are not directed to children under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can delete it.

10. Third-Party Links

The Site may link to third-party websites or services we do not control. We are not responsible for their privacy practices. Please review their policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be communicated through the Site or, where appropriate, by email.

12. Contact Us

The controller of personal data collected through the Site is Eleva Pro Technology, Cairo, Egypt.

If you have any questions about this Privacy Policy, or want to exercise any of the rights described above, email us or use our contact page. Please tell us which right you want to exercise and the email address or phone number you used with us, so we can locate your data.

Email: [email protected]