Privacy Policy

Information We Collect

elysirovanta collects various types of information to provide and improve our financial progress measurement services. We gather this information through different means when you interact with our platform, register for accounts, or use our measurement tools.

We collect information directly from you when you provide it voluntarily, automatically through your use of our services, and from trusted third-party sources such as financial institutions when you grant permission to connect accounts.

How We Use Your Information

elysirovanta uses collected information to provide personalized financial progress measurement services and enhance your experience on our platform. Our data usage is guided by legitimate business interests and your consent where required.

Service Provision: We process your information to deliver progress measurement tools, generate financial reports, track your goals, and provide personalized insights about your financial journey.

Platform Improvement: Usage data helps us understand which features are most valuable, identify areas for enhancement, and develop new measurement capabilities that better serve our users' needs.

Communication: We use contact information to send service updates, respond to inquiries, provide customer support, and share important changes to our platform or policies.

Security and Compliance: Information helps us detect fraudulent activity, prevent unauthorized access, comply with financial regulations, and maintain the integrity of our platform.

Information Sharing and Disclosure

elysirovanta takes a conservative approach to information sharing. We limit disclosure to situations where it's necessary for service provision, legally required, or explicitly authorized by you.

Service Providers: We share information with trusted third-party vendors who help operate our platform, including cloud hosting services, data analytics providers, and customer support tools. These partners are contractually bound to protect your information and use it only for specified purposes.

Financial Institutions: When you connect bank accounts or credit cards for progress tracking, we share necessary authentication information with your financial institutions to retrieve account data. This sharing occurs through secure, encrypted connections.

Legal Requirements: We may disclose information when required by UK law, court orders, government investigations, or to protect elysirovanta's legal rights. In such cases, we will notify affected users unless legally prohibited from doing so.

Business Transfers: If elysirovanta is acquired, merged, or undergoes significant business restructuring, user information may be transferred as part of business assets. Users will be notified of any such changes with details about data handling under new ownership.

Your Privacy Rights Under UK Law

Under UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, you have comprehensive rights regarding your personal information. elysirovanta is committed to honoring these rights and providing clear mechanisms for exercising them.

To exercise these rights, contact our Data Protection Officer at info@elysirovanta.com with your full name, account email, and specific request details. We will respond within 30 days and may require identity verification to protect against unauthorized access.

You also have the right to lodge complaints with the Information Commissioner's Office (ICO) if you believe elysirovanta has mishandled your personal information or violated UK data protection laws.

Data Security and Protection Measures

elysirovanta employs comprehensive security measures to protect your financial information from unauthorized access, alteration, disclosure, or destruction. Our security framework follows industry best practices and compliance standards.

Encryption: All data transmission occurs over SSL/TLS encrypted connections. Financial information is encrypted at rest using AES-256 encryption standards, ensuring data remains protected even in unlikely security breaches.

Access Controls: Employee access to user data is strictly limited based on job responsibilities. Multi-factor authentication is required for all system access, and we maintain detailed logs of who accesses what information and when.

Infrastructure Security: Our servers are hosted in secure, certified data centers with 24/7 monitoring, redundant systems, and regular security updates. We conduct quarterly penetration testing to identify and address potential vulnerabilities.

Data Minimization: We collect and retain only information necessary for service provision. Automated systems regularly review data age and purpose, deleting information that's no longer needed for business or legal reasons.

Data Retention and Deletion

elysirovanta maintains clear data retention schedules based on information type, legal requirements, and business necessity. We don't keep personal information longer than required for legitimate purposes.

Account Information: Personal details and account settings are retained while your account remains active and for seven years after account closure to comply with UK financial services regulations.

Financial Data: Progress measurements, transaction histories, and financial insights are kept for the duration of your account relationship plus six years as required by financial record-keeping laws.

Usage and Analytics Data: Website usage information, click patterns, and performance data are retained for two years to support service improvement and security monitoring.

Communication Records: Customer support conversations and email correspondence are kept for three years to ensure service continuity and resolve potential disputes.

When deletion periods expire, information is securely destroyed using industry-standard data destruction methods. Users can request earlier deletion of certain data types by contacting our privacy team, subject to legal and regulatory requirements.

International Data Transfers

elysirovanta primarily processes data within the United Kingdom. However, some service providers and technology partners may process information in other countries. When international transfers occur, we ensure adequate protection through approved transfer mechanisms.

For transfers to countries without adequacy decisions from UK authorities, we use Standard Contractual Clauses approved by UK data protection authorities. These contracts include strict data protection obligations and user rights equivalent to UK standards.

Cloud service providers storing UK user data are carefully vetted for security standards and contractual protections. We maintain oversight of international processing activities and regularly audit compliance with transfer requirements.

Cookie Policy and Tracking Technologies

elysirovanta uses cookies and similar tracking technologies to enhance user experience, maintain login sessions, and gather analytics about platform usage. Our cookie practices comply with UK privacy regulations and user consent requirements.

Users can manage cookie preferences through browser settings or our cookie consent tool. Disabling certain cookies may limit platform functionality but won't prevent access to core financial progress measurement features.

Children's Privacy Protection

elysirovanta's financial progress measurement platform is designed for adults aged 18 and older. We don't knowingly collect personal information from children under 16 years of age without verifiable parental consent.

If we discover that a child under 16 has provided personal information without appropriate consent, we will delete such information promptly. Parents or guardians who believe their child has provided information to elysirovanta should contact us immediately for removal.

For users aged 16-17, we require parental awareness of account creation and may request additional verification before providing access to comprehensive financial tracking features.

Policy Updates and Changes

elysirovanta may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service offerings. Significant changes will be communicated through multiple channels to ensure user awareness.

Major policy revisions will be announced via email to registered users, platform notifications, and prominent website notices at least 30 days before implementation. Users will have opportunity to review changes and make informed decisions about continued service use.

Minor updates, such as contact information changes or clarifications of existing practices, may be implemented immediately with notice posted on this page. We encourage periodic review of this policy to stay informed about privacy practices.