Privacy Policy

Last updated: 15 August 2026

Who we are

ELAL Dev Limited (“we”, “us”) is a technology and management advisory registered in England & Wales, company number 17027033. We are the data controller for the personal data described in this policy.

For any privacy question, or to exercise the rights set out below, contact rob@elal.dev.

What we collect, and why

Enquiries you send us

When you submit the contact form we collect the name, email address, and message you provide, together with the company, phone number, and service of interest if you choose to supply them.

We use this solely to respond to your enquiry and, if it leads somewhere, to carry on that conversation. We do not use it for marketing, and we do not sell it or share it for anyone else’s marketing.

Lawful basis: legitimate interests — responding to a business enquiry you have chosen to send us. Where a conversation progresses towards an engagement, we also rely on taking steps at your request prior to entering a contract.

Analytics

We use Google Analytics to understand how the site is used — which pages are visited, roughly where visitors come from, and how they navigate. Google Analytics sets cookies and processes your IP address and device information. This data is shared with Google, which acts as our processor and may transfer it outside the UK.

Analytics only runs if you accept it. On your first visit we ask, and until you accept, the Google Analytics script is not loaded at all — no request is made to Google and nothing is stored on your device. If you decline, we record only that choice, so we do not ask again.

To change your mind later, clear this site’s data in your browser settings and you will be asked again on your next visit. You can also opt out of Google Analytics across all websites using Google’s browser add-on.

Lawful basis: consent. You may withdraw it at any time by the method above, without affecting anything done beforehand.

Security and spam prevention

The contact form is protected by Cloudflare Turnstile, which checks that submissions come from a person rather than an automated script. It processes your IP address and limited browser signals for that purpose. We also apply automated filtering to submitted messages to detect spam.

Lawful basis: legitimate interests — protecting our systems and inbox from abuse.

Who processes data on our behalf

• Cloudflare, Inc. — website hosting, content delivery, and bot protection (Turnstile).
• Google LLC — website analytics, only where you have accepted analytics.
• Resend — delivery of contact form submissions to our inbox.

These providers process data on our instructions under contract. Some are based outside the UK, so your data may be transferred internationally. Where that happens, transfers are covered by the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision.

Cookies

This site sets no cookies of its own and no advertising cookies at all.

Analytics cookies are set by Google Analytics, and only after you accept them. Nothing analytics-related is written to your device beforehand.

Your choice is remembered in your browser’s local storage rather than a cookie, so that we can honour it without storing anything before you have decided. This is strictly necessary to respect your preference and is not used for any other purpose.

Strictly necessary cookies may be set by Cloudflare for security and performance, including by the Turnstile check on our contact form. These do not track you across sites.

You can block or delete cookies through your browser settings; the site will continue to work.

How long we keep it

Enquiry correspondence is kept for up to 24 months from our last exchange, unless it forms part of a client relationship, in which case it is retained for the duration of that relationship and for six years afterwards to meet legal and accounting obligations. Analytics data is retained according to Google Analytics’ default retention period.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent, where we rely on it.

To exercise any of these, email rob@elal.dev. We respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address it first.

Security

The site is served over HTTPS with a strict content security policy. Contact form submissions are transmitted over encrypted connections and delivered directly to our inbox. We keep access to enquiry data limited to those who need it to respond.

Changes

We may update this policy as our services or providers change. The date at the top reflects the most recent revision.