Privacy Notice

Elphia Tech Ltd ("Elphia Tech", "we") is the controller for the personal data described in this notice. Our company registration number is 17525383. Contact: hello@elphiatech.co.uk.

• Programme enquiries (the "Express Interest" form): your name, job title, email address, phone number (optional), organisation name, postcode and approximate staff numbers, your description of the challenge you want solved, and how you heard about the programme (optional).
• Contact form: your name, email address, subject and message.
• Technical data: your IP address and browser user-agent, recorded with enquiry submissions solely to detect abuse and spam. We do not use advertising or tracking cookies.

We use enquiry and contact data to assess your submission, contact you about the Care Digital Innovation Programme, and administer any project that follows. Our lawful basis is consent (you actively submit the form and accept this notice) and, for the administration of any resulting project, contract and our legitimate interests in operating our business. We will never sell your data, and we do not use it for marketing unrelated to the programme.

• Enquiries that do not become projects: deleted after 24 months from submission.
• Qualified organisations and project records: kept for the duration of the project plus 6 years, to meet our accounting, contractual and accountability obligations.
• Contact messages: deleted after 24 months.

We use a small number of processors to operate this website: Supabase (database hosting, UK/EU region), Vercel (website hosting and CDN) and Resend (transactional email such as your confirmation). All are bound by data processing agreements and UK GDPR safeguards. We never sell your data and we do not share it for others' marketing. We will disclose data only where legally required.

Data is encrypted in transit and at rest, access is restricted to Elphia Tech staff who need it, and our systems follow security-by-design practices appropriate to a sector that handles sensitive information about vulnerable people. Enquiry data is never exposed publicly.

Under UK GDPR you have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time (withdrawal does not affect processing already carried out). To exercise any right, email hello@elphiatech.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.