Privacy Policy

1. Who is responsible for your data

Elevate Unlimited is operated by Elevate Studio Ltd, registered in England & Wales under company number 09054088, registered office Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, England, BH16 6FA. We are the “data controller” for the personal data described here. For any privacy question, contact us at [email protected].

2. What we collect

• Account details — your name, business name, email address, and password (stored only as a salted scrypt hash, never in plain text).
• Billing information — your subscription tier and status, and payment records. Card details are collected and processed by Stripe; we never see or store your full card number.
• Your content — the video footage, audio, images, brand assets, briefs, and messages you upload or send so we can edit for you.
• Usage & technical data — IP address, device and browser information, and activity logs, used to run, secure, and improve the service.
• Applications — if you apply to edit with us, the details you submit (experience, software, portfolio, and notes).

3. How we use your data & our legal bases

• To provide the service — create your account, take your briefs, edit and deliver your videos, and support you. (Legal basis: performance of our contract with you.)
• To take payment and keep financial records. (Legal basis: contract and our legal obligations.)
• To secure and improve the service, prevent abuse, and communicate about your account. (Legal basis: our legitimate interests.)
• To send occasional service or product updates, where permitted. (Legal basis: legitimate interests or consent; you can opt out anytime.)

4. How we handle your footage & files

We know your source footage is sensitive, so we treat it accordingly:

• Where it’s stored. Uploads and deliverables are held in Cloudflare R2 object storage. Uploads and downloads happen over encrypted (HTTPS) connections using short-lived, single-purpose links.
• Who can access it. Access is limited to you, the editor assigned to your work, and the administrators who run the service. We do not sell your content and we do not use it to train AI models.
• How long we keep it. We keep your source files and deliverables while your subscription is active so you can access past work. After you cancel, we retain them for a short wind-down period so you can retrieve anything you need, then delete source material that is no longer required.
• Deletion. You can ask us to delete specific files or all of your content at any time by emailing [email protected], subject to any records we must keep by law. Please keep your own backup of your originals — you should not rely on us as your only copy.

5. Who we share data with

We share data only with the service providers (“processors”) that help us operate, each under contract and only as needed:

• Stripe — payments and subscription billing.
• Cloudflare — hosting, file storage (R2), and bot protection (Turnstile).
• Resend — sending transactional email.
• Cal.com — scheduling calls you choose to book.

We may also disclose data if required by law, or to protect our rights, users, or the service. We do not sell your personal data.

6. International transfers

Some of our providers process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK-approved standard contractual clauses or adequacy decisions) to protect your data to UK standards.

7. Cookies

We use a small number of essential cookies — mainly to keep you signed in and to secure forms. These are required for the service to work, so no consent banner is needed for them. Third-party content such as embedded video, the booking widget, and the chat assistant only loads when you interact with it, and we do not use advertising or cross-site tracking cookies.

8. How long we keep data

We keep account and billing data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution needs. Your content is retained as described in section 4.

9. Your rights

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to how we process it;
• receive your data in a portable format; and
• withdraw consent where we relied on it.

To exercise any of these, email [email protected]. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, though we’d appreciate the chance to put things right first.

10. Security

We protect your data with encryption in transit, hashed passwords (scrypt), scoped access controls so editors only see the work assigned to them, two-factor authentication for staff accounts, and bot protection on sign-in and public forms. No system is perfectly secure, but we work to keep your data safe and to respond quickly if something goes wrong.

11. Children

The service is for business and professional use and is not intended for anyone under 18. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. We’ll change the “last updated” date above and, for material changes, let you know by email or in the app.

13. Contact

For any privacy question or request, email [email protected] or write to Elevate Studio Ltd, Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, England, BH16 6FA. See also our Terms of Service.