Privacy Policy
Last updated: 1 January 2026
This policy explains what personal information ELEPHANT TECH (“we”, “us”) collects through elephanttechhq.com, why we collect it and what rights you have over it. Questions about anything below can be sent to contact@elephanttechhq.com.
Information we collect
We only collect what you choose to send us. When you submit the contact form we receive your name, email address, and optionally your company, the service you are interested in, an indicative budget and the message you write. Our server also records the time of submission and the browser user-agent string, which we use to detect automated abuse.
We do not use advertising trackers, third-party analytics cookies or behavioural profiling on this website.
How we use it
Your information is used to respond to your enquiry, to prepare a proposal if you ask for one, and to keep a record of our correspondence. We do not sell personal information, and we do not share it with third parties for marketing.
Where it is stored
Enquiries are stored in a managed PostgreSQL database provided by Supabase, and the website is hosted on Vercel. Both providers process data on our behalf under their own security and data-processing terms. Access to the enquiry dashboard is restricted to named Elephant Tech accounts and protected by authentication and database-level access policies.
How long we keep it
We keep enquiry records for as long as needed to deal with your request and to meet our legal and accounting obligations. You can ask us to delete your record earlier and we will do so unless we are required to retain it.
Cookies
The public website sets no marketing or analytics cookies. The admin dashboard at /admin sets a session cookie that is strictly necessary to keep an authorised administrator signed in. It is not used for tracking.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or erased, to object to or restrict our use of it, and to receive a copy in a portable format. To exercise any of these rights, email contact@elephanttechhq.com and we will respond within 30 days.
Security
Data is encrypted in transit using TLS and at rest by our infrastructure providers. Administrative access follows least-privilege principles, secrets are held in managed environment stores rather than in source code, and dependencies are monitored for known vulnerabilities.
Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes affecting how we use information already collected will be communicated directly where we hold contact details for you.