Privacy Policy

We collect only what we need to operate, including:

• Enquiries and assessment requests. When you reach out or start a scoping form, we collect the details you provide — such as your name, email address, company, the app or URL you want assessed, and the contents of your message.
• Applicant and expert details. If you apply to work with us, we collect the information you submit and the information we gather as part of vetting — for example contact details, professional background, identity and right-to-work documentation, and the results of background or sanctions screening.
• Basic site analytics. Like most websites, we collect limited technical and usage information automatically — such as pages viewed, approximate location, device and browser type, and referring links — to understand how the site is used and to keep it secure.

We use the information we collect to:

• respond to your enquiries and provide our services;
• evaluate, vet, and onboard applicants and experts, and manage ongoing working relationships;
• operate, maintain, secure, and improve our website and services;
• send you communications you’ve requested or that relate to a relationship between us; and
• comply with our legal, regulatory, and contractual obligations.

Under UK GDPR we rely on: contract (operating the working relationship with applicants and experts, and responding to enquiries you make); legal obligation (identity verification, sanctions screening, and accounting or regulatory record keeping); legitimate interests (running, securing, and improving the platform, and verifying billed work — balanced against your rights, with monitoring covered by a documented impact assessment and a transparency notice shown to workers); and consent where we ask for it (for example optional communications), which you can withdraw at any time.

We do not sell your personal information. We share it only with service providers who help us run our business — for example email delivery, analytics, hosting and infrastructure, and identity or background-check providers — and only to the extent they need it to perform services for us. These providers are required to protect your information and use it solely for the purposes we specify. We may also disclose information where required by law, to enforce our agreements, or to protect the rights, safety, and security of Elitor, our clients, or others.

We work with people and service providers in more than one country. Where personal data leaves the UK, we rely on UK adequacy regulations where they apply, and otherwise on appropriate safeguards — the UK International Data Transfer Agreement or EU Standard Contractual Clauses with the UK Addendum — under data-processing agreements with each provider. A current list of our service providers is available on request at team@elitor.ai.

We keep personal information only for as long as we need it for the purposes described in this policy — for example, for the duration of a working relationship or enquiry, and for a reasonable period afterwards to meet legal, accounting, or dispute-resolution requirements. When we no longer need it, we delete or anonymise it.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct or delete it, to object to or restrict certain processing, and to request a copy of it. To exercise any of these rights, contact us using the details below and we’ll respond as required by applicable law. You can also ask us to stop sending you non-essential communications at any time.

Elitor Ltd is the data controller responsible for your personal information (registered in England & Wales, company no. 17318982; registered office Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE). We are registered with the UK Information Commissioner’s Office (ICO) as a data controller, registration reference C1976881.

If you have questions about this policy or how we handle your information, contact us at team@elitor.ai.

If you are unhappy with how we have used your personal data, you can make a complaint to us and we will acknowledge it within 30 days and respond without undue delay. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) at any time.