Privacy Policy

1. Introduction

ElkaLabs Ltd. ("ElkaLabs", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal data when you visit our website or engage with us as a prospective or existing client.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

2. Data Controller

We have not appointed a Data Protection Officer as we do not meet the threshold requiring one under Article 37 of the GDPR. For data protection enquiries, please contact info@elkalabs.com.

3. Personal Data We Collect

We collect personal data that you provide to us directly:

• Contact information (name, email address, phone number) when you submit an enquiry
• Business contact details when your organisation engages our services
• Billing and payment information for clients
• Communications you send to us

We also collect limited technical data automatically when you visit our website, such as IP address and browser type, for security and website functionality purposes.

4. How We Use Your Data

Where we rely on legitimate interests, we have assessed that these do not override your rights and freedoms. You may object to such processing at any time.

5. Providing Your Data

Providing your personal data is voluntary. However, if you do not provide contact details, we will be unable to respond to your enquiry. For clients, providing contact and billing information is necessary for us to provide our services.

6. Data Sharing

We may share your personal data with:

• Service providers who assist in operating our business
• Professional advisers where necessary
• Regulatory authorities when required by law

We do not sell your personal data. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place.

7. Data Retention

We retain personal data only as long as necessary:

• Enquiries: 2 years from last contact
• Client records: duration of contract plus 6 years
• Billing records: 7 years (legal requirement)

8. Your Rights

Under data protection law, you have rights including:

• Access to your personal data
• Correction of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent (where applicable)

To exercise these rights, contact info@elkalabs.com. We will respond within one month.

9. Cookies

Our website uses only essential cookies necessary for the website to function. We do not use advertising, marketing, or third-party tracking cookies.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.

12. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via our website. The date at the top indicates the last update.

13. Complaints

If you have concerns about how we handle your data, please contact us at info@elkalabs.com.

You also have the right to complain to a supervisory authority:

• UK: Information Commissioner's Office (ICO) – ico.org.uk
• Hungary: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) – naih.hu

14. Contact