Last updated: 15 October 2026
This policy explains what personal information Elevara collects when you use elevara.co.uk or contact us about a staircase, why we collect it, and the rights you have over it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Elevara designs, fabricates and installs bespoke staircases, based in Norfolk. Elevara is data controller for the information described here.
- Email: info@elevara.co.uk
- Phone: 07917 376680
- Post: 9 Dereham Road, Norfolk NR203QB
If you have any question about this policy or your information, email us and we will reply within one month.
What this policy covers
It covers information we collect through elevara.co.uk, including the internal and external 3D staircase configurators, the quick enquiry form and the contact form, and information you give us by email, phone or in person when you enquire about or buy a staircase. It does not cover other websites we link to, such as social media pages, which have their own privacy policies.
Information we collect
| Where it comes from | What we collect |
|---|---|
| Quick enquiry form | Name, email, phone (optional), town or postcode (optional), the staircase you are interested in, any note you add, the page you sent it from, and the date and time you agreed to this notice |
| 3D configurator enquiry | Name, email, phone, postcode or town, your message, your staircase design and dimensions, and the PDF and 3D images of your design |
| Contact form, email, phone | Whatever you choose to tell us – usually your contact details, address and details of your project |
| Customers | Site address, measurements, photos and drawings of the space, quotes, orders, invoices and payment records |
| Your visit to the website | Technical information such as IP address, browser and pages viewed, collected by our host and the services listed under Cookies |
We do not ask for special category information (such as health or religion). Please don’t include it in messages unless it is needed, for example for access requirements at your property.
If you use the configurators, your settings may be saved in your own browser so the tool reopens where you left off. That information stays on your device and is not sent to us unless you send an enquiry.
How we use it and our lawful basis
| What we do | Lawful basis (UK GDPR Article 6) |
|---|---|
| Reply to your enquiry, discuss your project and prepare a quote | Your consent, given when you send the form, and steps you ask us to take before a contract |
| Design, make, deliver and install your staircase, and look after any aftercare | Performing our contract with you |
| Send you a thank-you email and a copy of your enquiry | Legitimate interests – confirming we received it |
| Keep invoices and accounts | Legal obligation (HMRC record-keeping) |
| Keep the website secure, stop spam and fix problems | Legitimate interests – running a safe website |
| Measure how the website and our adverts perform | Your consent, given through the cookie banner |
We will never sell your information or add you to a mailing list without asking. You can withdraw consent at any time by emailing us; this doesn’t affect anything we did before you withdrew it.
Cookies and third-party services
We only set cookies that aren’t strictly necessary, such as advertising cookies, if you agree through the cookie banner. You can change your choice at any time from the cookie settings link in the footer, or by clearing cookies in your browser.
| Service | Why we use it | What it receives |
|---|---|---|
| Google Ads (conversion tracking) | To see which adverts lead to enquiries | Cookies and your IP address, only with your consent |
| Google Fonts | To show the website’s typefaces | Your IP address, when a page loads |
| cdnjs (Cloudflare) and jsDelivr | To load the animation and 3D viewer code | Your IP address, when a page loads |
| Facebook and Instagram feeds | To show our latest posts | Your IP address; Meta may set cookies if you interact with the feed |
| Website chat button | To let you message us | What you type, if you use it |
| WordPress | To run the site and the forms | Security cookies for logged-in staff only |
Who we share it with
We share only what each party needs to do its job:
- Our website host and email provider, who store the site, the enquiries and our emails.
- People who help deliver your staircase, such as a structural engineer, glass or timber suppliers, delivery firms and installers, when your project needs them.
- Our accountant, and HMRC, for tax and accounts.
- The services listed under Cookies, as described there.
- Anyone the law requires, such as the police or a court, when we must.
The companies that store or handle information for us act on our instructions and must keep it secure.
Transfers outside the UK
Some services we use, such as Google, Meta and Cloudflare, may process information in the USA or elsewhere. Where they do, they are covered by the UK–US data bridge or by the UK’s standard contract clauses (the International Data Transfer Addendum), which require your information to be protected to UK standards.
How long we keep it
| Information | How long |
|---|---|
| Enquiries that don’t go ahead | Up to 2 years from your last contact, then deleted |
| Customer project records (drawings, quotes, orders, correspondence) | 6 years after the project is finished, to cover guarantees and any claims |
| Invoices and accounts | 6 years after the end of the tax year they relate to, as HMRC requires |
| Website server logs | As set by our host, normally no more than 90 days |
You can ask us to delete your information sooner; we will, unless the law requires us to keep it.
Keeping it secure
The website uses an encrypted (HTTPS) connection. Enquiries are stored in a password-protected area of the website that only Elevara can access, and the configurator PDFs are kept in a folder that can’t be opened from the internet. We keep software up to date and limit who can see your information. No system is completely secure, but if something went wrong that put you at risk, we would tell you and the ICO as the law requires.
Your rights
You have the right to:
- See the information we hold about you and get a copy
- Correct anything that is wrong or incomplete
- Delete your information, where we don’t need to keep it
- Restrict how we use it, for example while a correction is checked
- Object to us using it for our legitimate interests
- Take it with you, in a common format, where we use it with your consent or under a contract
- Withdraw consent at any time, where consent is our reason for using it
To use any of these rights, email info@elevara.co.uk. It is free, and we will reply within one month. We may ask you to confirm who you are first.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We will update this policy when the way we use information changes; the date at the top shows the latest version. Significant changes will be shown on the website.