PRIVACY
Your information.
Handled carefully.
This draft explains what information Element Rise uses when you enquire, upload records or buy a report.
Draft: retention periods, processors and international-transfer arrangements must be confirmed before launch.
Who is responsible?
Muhammad Ahsan Zaheer trading as Element Rise is the data controller. Contact: contact@elementrise.co.uk. Business correspondence: Suite RA01, 195–197 Wood Street, London, E17 3NU, United Kingdom.
Information we collect
We may collect your name, business contact details, order details, correspondence, payment status and the files and information you choose to upload. Uploaded business records may contain information about other people. Please remove names and other personal information that are not needed for the report, and do not upload passwords or unrelated sensitive information.
Why we use it
- To answer enquiries and take steps you request before entering a contract
- To accept, manage and deliver an order under our contract with you
- To keep tax, accounting and legal records where required by law
- To protect the service, prevent misuse and resolve disputes where we have a legitimate interest
We do not use uploaded client files for advertising, sell them, or make automated decisions about people.
Who receives it
Information may be handled by suppliers that provide website hosting, secure file storage, email delivery and payment processing. The current preview uses Cloudflare for hosting and file storage. Stripe and a transactional-email provider will be added only after their configuration and terms are confirmed. We do not authorise processors to use client files for their own marketing.
International processing
Some technology suppliers may process information outside the UK. Before launch, Element Rise will confirm the locations and safeguards used for any restricted transfer.
How long we keep it
Retention policy: unsuccessful or abandoned uploads are deleted after 30 days; working files and delivered reports are deleted 90 days after delivery unless a longer period is agreed; enquiry correspondence is kept for up to 12 months. Invoices, payment records and other records needed for Self Assessment are kept for at least five years after the 31 January submission deadline for the relevant tax year, and longer where HMRC rules require it. Automated deletion must be technically enforced before launch.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to our use of your personal information. Contact us at the email above. You can also complain to the Information Commissioner’s Office.
Security and updates
Access to uploaded files is restricted through private storage and time-limited upload credentials. No internet service can promise absolute security. We will update this notice when the live providers or processing change.
Draft version: 18 September 2026.