Privacy Policy
Effective date and last updated: 7 October 2026.
1. Who is responsible for your information
Accessible Futures Ltd, trading as Elevate Consultancy & Management Services (Elevate CMS), is responsible for the personal information described in this notice.
Email: hello@elevatecms.co.uk
Website: elevatecms.co.uk
Correspondence address:
c/o Linggard and Thomas Ltd
Kew an Lergh
Stret Mygthern Arthur
Nansledan
Cornwall
TR8 4UX
This notice covers the consultancy website, enquiries, discovery calls and consultancy engagements. The Accessible Futures directory should have its own service-specific privacy information.
2. Information we collect and where it comes from
- Contact and business details, such as your name, organisation, role, email address and telephone number.
- Information you provide in enquiries, booking forms, correspondence and meetings.
- Information needed for an agreed engagement, such as supplied documents, photographs, plans and relevant project information.
- Contract, invoice and payment records where applicable.
- Technical information associated with website use, such as IP address, device and browser details, where collected by the website or hosting service.
We obtain information directly from you, from the organisation commissioning our work, and from service providers supporting enquiries and bookings. Where supplied material identifies other people, we ask clients to remove personal information that is not needed for the agreed work.
3. How we use information and our lawful bases
- Enquiries and discovery calls: to respond, discuss suitability and agree possible scope. We rely on legitimate interests in managing business enquiries, or steps taken at your request before entering a contract where that basis applies.
- Agreed consultancy work: to administer and deliver services. Contract applies where you are personally a party to the contract. For an organisation’s staff and business contacts, our legitimate interests in delivering and managing the engagement generally apply.
- Accounting and records: to issue invoices, maintain accounts and meet applicable legal obligations. We rely on legal obligation where required, and legitimate interests for necessary business administration.
- Website operation and security: to keep the website functioning and protect it against misuse. We rely on legitimate interests where appropriate. Consent is used for non-essential technologies where required.
- Optional marketing: where offered, we explain the applicable basis when collecting your details and provide a way to opt out.
Where we rely on legitimate interests, we consider whether our use is necessary and proportionate and how it affects your rights.
4. Disability, health and other sensitive information
Please do not include unnecessary medical details or identifiable adjustment records in an initial enquiry. For reviews, we ask clients to provide anonymised documents wherever possible.
If an engagement requires identifiable health or disability information, please contact us before supplying it. The purpose, our role, the applicable lawful basis and special-category condition, access restrictions and retention arrangements must be established before that information is processed. Supplying information does not by itself constitute consent.
5. Who may receive information
We do not sell personal information. Information may be handled by providers supporting website hosting, email, document storage, appointment booking and meetings, and by accountants or other professional advisers where necessary. Information may also be disclosed where required by law.
Our supporting services include Krystal for website hosting, Microsoft 365 for email and document handling, TidyCal for appointment bookings, and Zoom for meetings where used.
Providers receive only information appropriate to their role. A service you visit through an external booking or meeting link may also provide its own privacy notice.
6. Information processed outside the UK
Our service providers may process information outside the UK, including in the United States. Their published privacy and data-processing terms describe their international processing arrangements. Microsoft and Zoom publish transfer protections, including contractual provisions and applicable Data Privacy Framework arrangements. TidyCal is based in the United States and its published data-processing agreement refers to EU standard contractual clauses. Krystal publishes hosting data-processing terms.
You can read the providers’ information here: Microsoft data protection terms, Zoom privacy statement, TidyCal privacy policy and Krystal privacy policy. Contact us if you need information about the arrangements relevant to your engagement. These links describe provider terms and do not imply that all data stays in the UK.
7. How long we keep information
We keep personal information only for as long as necessary for its purpose. Retention depends on the nature of the enquiry or engagement, applicable accounting and tax requirements, contractual and insurance obligations, and any need to establish or defend a legal claim.
Sensitive review material should be minimised and its retention agreed for the specific engagement. Information no longer needed should be securely deleted or anonymised.
Information may be retained longer where necessary for a legal claim or another documented obligation. Records no longer needed should be securely deleted or anonymised.
8. Your information rights
Depending on the circumstances and our lawful basis, you may ask to access your information, correct inaccuracies, erase information, restrict its use, or receive and transfer certain information.
Your right to object: you may object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time.
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal.
Contact hello@elevatecms.co.uk to exercise your rights. We may need to verify your identity. Rights are subject to applicable conditions and exemptions.
9. Questions and complaints
Please contact us if you have a concern about how your information is used so we can investigate and respond. You also have the right to complain directly to the Information Commissioner’s Office (ICO). You do not need to obtain our permission.
10. Security
We use appropriate technical and organisational measures to protect personal information, taking account of the information’s sensitivity and the risks involved. Access is limited to those who need it for the relevant purpose.
11. Cookies and similar technologies
The website loads a Google tag through Google Site Kit, WooCommerce scripts and an Elementor accessibility widget. These services may use cookies or similar technologies for website functions, preferences or measurement. External booking and meeting services have their own privacy and cookie information.
Your browser allows you to inspect, block and delete cookies. Blocking cookies may affect some website features. Contact us with questions about these technologies. This notice does not represent browser controls as a substitute for any consent required for non-essential technologies.
12. Providing information
Some information is needed to respond to your enquiry, arrange a booking or deliver an agreed service. If it is not provided, we may be unable to carry out that activity. Optional information will be identified as such.
13. Changes to this notice
We review this notice when our services or information-handling arrangements change. The published version will show its effective date and the date of its most recent update.