Who we are

Elora is a brand consistency platform operated by Fully OnBrand Ltd, a company registered in England and Wales under company number 17075634, with its registered office at 5 Brayford Square, London, E1 0SG. Elora is a trading name of Fully OnBrand Ltd.

For the personal data described in this policy, Fully OnBrand Ltd is the data controller. We are registered with the Information Commissioner's Office under reference ZC169231.

If you have any questions about this policy or about how we handle your data, contact us at hello@eloratech.co.

What we collect

When you contact us: Your name, company name, email address, and anything else you choose to tell us in a form, an email, or a message.

When you visit our website: Basic analytics data such as pages visited, browser type, and device information, collected through cookies. See the cookies section below.

When you join a call with us: We may record the audio and video. You will be told at the start of the call and can ask us not to record. If you ask us not to, the recording stops and the call continues without it.

When you use the platform: Account details for you and your colleagues — name, email address, role, and a record of activity within your organisation's account. The content your organisation uploads is governed by our Terms of Service and Data Processing Agreement rather than by this policy.

Why we collect it, and our lawful basis

We use your information to respond to your enquiries, arrange and prepare for calls, provide and support the platform, and keep you informed about Elora. book and prepare for calls, and follow up with you afterwards.

Our lawful bases are:

Consent, where you submit a form, agree to a call being recorded, or opt in to updates. You can withdraw consent at any time.

Legitimate interests, where we contact people in a professional capacity about a service relevant to their role, and where we use anonymised insight from enquiries and calls to improve what we offer. We have assessed this against the privacy interests of the people concerned and you can ask us for that assessment.

Contract, where we process the data necessary to provide the platform to a customer organisation.

Legal obligation, where we are required to keep records for tax, accounting, or regulatory reasons.

Every marketing email we send includes an unsubscribe link. If you opt out, we keep a record of your email address solely to make sure we do not contact you again.

Insight drawn from calls and enquiries is anonymised before use. No individual or organisation is identified without explicit consent.

Cookies

Our website uses essential cookies that are required for the site to function. These do not need your consent.

We also use analytics cookies to understand how visitors use the site. These are only set if you consent to them, and you can change or withdraw that consent at any time through the cookie settings on our website.

We do not use advertising cookies and we do not track you across other websites.

Who we share it with

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We use service providers who process data on our behalf under contract. These fall into the following categories:

• Cloud hosting and storage
• AI processing, used to analyse content within the platform
• Email, calendar, and document tools
• Website hosting and analytics
• Video conferencing
• Payment processing

A current list of the providers who process platform data on behalf of customer organisations is maintained in our Data Processing Agreement.

We may also disclose personal data where we are required to do so by law, or to establish, exercise, or defend legal claims.

International transfers

Platform data is hosted in the United Kingdom.

Where any personal data is transferred outside the UK, we rely on appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Addendum to the European Commission's standard contractual clauses. You can ask us which safeguard applies to a particular transfer.

How long we keep it

Enquiries and correspondence. Up to 12 months after your last interaction with us, unless you ask us to delete it sooner.

Call recordings and transcripts. Up to 12 months after the call, unless you ask us to delete them sooner.

Website analytics. Retained in anonymised form.

Customer account data. For the duration of the subscription and for 30 days after it ends, after which it is deleted automatically. Earlier deletion is available on written request.

Records we must keep by law. For as long as the relevant legislation requires, typically six years for financial records.

If you become a customer

Additional terms apply to customer organisations, including our Terms of Service and our Data Processing Agreement. Those documents govern how we handle the content and brand documents an organisation uploads to the platform. We do not use that content to train external AI models.

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict how we use your data
• Object to processing carried out on the basis of legitimate interests, including direct marketing
• Receive your data in a portable format, or have it transferred to another provider
• Withdraw consent at any time, where consent is the basis we rely on

We do not make decisions about you by automated means that produce legal or similarly significant effects.

To exercise any of these rights, contact us at hello@eloratech.co. We will respond within one month, and there is no charge.

Complaints

If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Where a change is material, we will tell customer organisations directly.