Privacy Policy
How we collect, use, and protect your information
Last reviewed: November 2024
Table of Contents
1. Introduction
Elevance is a trading name of Tom Sykes Limited, part of the Stiperstone Group. We are committed to protecting your privacy and handling personal data responsibly and transparently.
This Privacy Policy explains how we collect, use, store, and protect personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) 2003.
Unless stated otherwise, all personal data processed by Elevance relates to business-to-business (B2B) contacts and commercial engagements. Elevance is registered with the Information Commissioner’s Office (ICO) as a Data Controller.
Tom Sykes Limited t/a Elevance
Registered Office: Grosvenor House, Central Park, Telford, TF2 9TW
Company Number: 06947397
ICO Registration Reference: C1598969
Telephone: 01952 972 404
Email: hello@elevance.co
2. What Is Personal Data?
Under UK GDPR, personal data is any information that can identify a living individual, either directly or indirectly. This includes electronic data and manual records (such as paper files). This may include:
- •Name
- •Business email address
- •Job title
- •Business contact details
- •Any information linked to an identifiable individual
3. Special Category Personal Data
The ICO defines “Special Category Personal Data” as information relating to:
- •Racial or ethnic origin
- •Political opinions or religious/philosophical beliefs
- •Physical or mental health
- •Sexual life or orientation
- •Criminal convictions or alleged offences
- •Trade union membership
Elevance does not routinely process special category personal data. Where such data is required (e.g. in employment or legal contexts), it will only be processed with appropriate legal basis, safeguards, and security controls in place.
4. The Personal Data We Process
4.1 Commercial and Business Contacts
For clients, partners, and professional contacts, Elevance may process:
- •Name
- •Job title
- •Organisation name
- •Business email address
- •Business phone number
- •Commercial correspondence and engagement history
4.2 Employment and Recruitment (where applicable)
In line with legal and contractual obligations, we may process:
- •Name, address, date of birth
- •Employment history and qualifications
- •National Insurance number
- •Payroll and banking details
- •Performance, attendance, and HR records
- •System access and security logs
5. How We Process Personal Data
Elevance processes personal data in line with the seven UK GDPR principles:
- •Lawfulness, fairness, and transparency
- •Purpose limitation
- •Data minimisation
- •Accuracy
- •Storage limitation
- •Integrity and confidentiality
- •Accountability
Processing is carried out under appropriate lawful bases, including:
- •Contractual necessity
- •Legal obligation
- •Legitimate business interests
- •Explicit consent (where required)
All processing of employee and recruitment data complies with UK GDPR Article 6 and the Data Protection Act 2018.
6. How Long We Keep Your Data
Personal data is retained only for as long as necessary and in accordance with our Data Retention Schedule:
- •Financial records: 6 years plus the current financial year
- •Employee data: Duration of employment + 3 years
- •Unsuccessful job applicants: 6 months
- •Commercial contact data: retained while a legitimate business relationship exists
Where applicable, individuals may request early deletion of their data under the right to erasure.
7. Your Data Protection Rights
Under UK GDPR, individuals have the following rights:
- •Right to be informed
- •Right of access
- •Right to rectification
- •Right to erasure (“right to be forgotten”)
- •Right to data portability
- •Right to restrict processing
- •Right to object (including to direct marketing)
- •Rights relating to automated decision-making and profiling
Requests can be made by contacting Elevance using the details below.
8. Policy Updates
This Privacy Policy may be updated periodically to reflect changes in legislation or business practices. Where material changes occur, we will provide appropriate notice.
Last reviewed: November 2024.
9. How to Raise a Concern or Complaint
If you have questions or concerns about how Elevance uses personal data, please contact our Data Protection Officer:
Data Protection Officer
Tom Sykes Limited t/a Elevance
Grosvenor House, Central Park
Telford, TF2 9TW
Telephone: 01952 972 404
Email: hello@elevance.co
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk