Elevale is committed to GDPR, UK GDPR, and global privacy standards. This page explains how we protect your data, who is responsible for what, and where to find our legal documents.
Legal documents (authoritative)
- Privacy Policy: How we collect, use, and protect personal data (agreed at signup)
- Terms & Conditions: Contractual terms for using Elevale (agreed at signup)
- Cookie Policy: Cookies and similar technologies on the platform and marketing site
- Data Processing Agreement (DPA): Controller and processor obligations for business customers
- Subprocessor list: Third parties that process personal data on our behalf
Legal notice
Last updated: 20 July 2026. Elevale is a trading name of Saint Financial Group Limited, a limited company registered in England under number 12280700, whose registered office is at St Osyth Grange, 677 St Johns Road, St Osyth, Essex, CO16 8BJ.
This section satisfies common legal identification requirements (including Impressum, mentions légales, and aviso legal) for elevale.com and elevale.app.
- Legal entity: Saint Financial Group Limited
- Trading name: Elevale
- Company number: 12280700 (England and Wales)
- Registered office: St Osyth Grange, 677 St Johns Road, St Osyth, Essex, CO16 8BJ
- VAT number: 342209234
- Data Protection Officer: Dylan O'Rourke
- Privacy enquiries: contact form
- Telephone: 01255 443844
- General contact: contact form
- Platform operator: Saint Financial Group Limited (Elevale)
- Hosting: Fly.io (application hosting); Cloudflare (CDN and edge)
White-label agency domains may display partner branding; Saint Financial Group Limited remains the service provider unless your agency contract states otherwise.
Global privacy rights
Elevale does not sell personal data. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, and to withdraw consent where processing is consent-based.
- UK, EU, EEA, and Switzerland: GDPR rights. See Privacy Policy (Your rights).
- United States: State privacy laws (for example California, Colorado, Connecticut, Virginia). We do not sell or share personal data for cross-context behavioural advertising. See US state privacy rights.
- Canada: PIPEDA and provincial laws (including Quebec Law 25): access, correction, and withdrawal of consent where applicable.
- Brazil: LGPD: confirmation, access, correction, anonymisation, and portability where applicable.
- Australia: Privacy Act and APPs: access and correction.
Submit requests via Profile → Privacy in the app or our contact form. We aim to respond within 30 days. See Privacy Policy (How to exercise your rights) for details.
Data roles
Saint Financial Group Limited (Elevale) is typically the controller for platform account data (login credentials, billing profile, support correspondence). For workspace content you upload (OKRs, KPIs, business data, files), Elevale acts as processor on your instructions.
Agencies and resellers using white-label branding may act as controller for their client workspaces. See Agency and reseller data responsibilities.
Saint Financial Group Limited operates core platform infrastructure as a processor to Saint Financial Group Limited under our Data Processing Agreement.
Security and privacy programme
Our compliance documentation covers:
- Security and data protection: Authentication, encryption, and access controls
- Audit logging: Immutable records of workspace and admin activity
- Data retention and deletion: How long we keep data and when it is deleted
- Incident response and data breaches: How we handle security incidents
- Accessibility commitment: WCAG standards and how to report barriers
In-app controls
- Privacy Center: Profile → Privacy: export your data or submit a privacy request
- Account deletion: Profile → Security → Delete my account
- Audit log: Workspace admins can view who changed what in workspace settings
- MFA: Required for all accounts after signup
- Integration controls: Enable or disable third-party connections per workspace
International transfers
Data may be processed in the UK, EEA, United States, and other countries where our subprocessors operate. We use Standard Contractual Clauses and the UK International Data Transfer Agreement where required. Details are in our DPA.
Contact
Privacy enquiries: contact form
Security issues: contact form
General contact: contact form
Company identification: Legal notice