Privacy Policy
Last updated 5 September 2026
This policy explains exactly what happens to your data when you use aelvora.io. It describes what the site genuinely does, not what a template says it might.
Who is responsible for your data
The data controller for aelvora.io is:
Aelvora, contactable at hello@aelvora.io. If you need our full registered details in writing — for a DPA, a procurement form, or a subject access request — email that address and we will provide them.
You can reach us about anything in this policy at hello@aelvora.io.
What we collect, and when
Nothing about you is collected simply because you read a page, beyond what is described under Analytics and Hosting below. We do not have accounts, and there is nothing to sign up for.
| When | What | Why |
|---|---|---|
| You submit the enquiry form | Your name, email address, and the message you write | So we can read it and reply. Nothing else is done with it. |
| You submit the enquiry form | Your IP address | Rate limiting, to stop the form being flooded. Held in memory only, and never stored with your message. |
| You book a call | Whatever Calendly asks for — typically name, email, and your answers to the booking questions | Scheduling the call. This is collected by Calendly, on Calendly's systems. |
| You arrive from a campaign link | The utm_ parameters in the URL | So we can tell which outreach a visit came from. Stored in your browser's sessionStorage and cleared when you close the tab. |
| Any page view | Cookie ID, IP address, pages and events | Aggregate analytics. See the Cookie Policy. |
We do not collect special category data, we do not buy or enrich contact data from third parties, and we do not run advertising or retargeting pixels of any kind.
Our lawful basis
- Enquiries and bookings — legitimate interests, and steps taken at your request before entering a contract. You contacted us; replying is the obvious purpose.
- Analytics cookies — your consent, which you can withdraw at any time. See the Cookie Policy for how.
- Security and rate limiting — legitimate interests in keeping the site available and abuse-free.
Who your data is shared with
We do not sell data and we do not share it for anyone else's marketing. The processors below are the complete list of third parties that receive data through this site:
| Processor | What it does | What it receives | Their policy |
|---|---|---|---|
| Vercel | Hosting and request logs | IP address, user agent, requested URL | vercel.com/legal/privacy-policy |
| Google Analytics | Aggregate traffic and conversion measurement | Cookie ID, IP address, pages viewed, events | policies.google.com/privacy |
| Google Fonts | Serving the Inter typeface | IP address (from loading the font file) | policies.google.com/privacy |
| Fontshare | Serving the Clash Display typeface | IP address (from loading the font file) | fontshare.com |
| Calendly | Booking calls, via an embedded scheduler | Name, email, and anything you type when booking | calendly.com/privacy |
| Resend | Delivering enquiry emails and your auto-reply | Name, email, message content | resend.com/legal/privacy-policy |
Some of these providers are based in, or transfer data to, the United States. Where that happens it is covered by the providers' own standard contractual clauses and equivalent safeguards.
How long we keep it
- Enquiry emails — kept in our inbox while the conversation is live and for up to 24 months after, then deleted.
- Analytics data — retained according to the Google Analytics retention setting on the property, currently the platform default.
- UTM parameters — held in your own browser only, and gone when you close the tab.
- IP addresses used for rate limiting — held in server memory for at most one hour and never written to storage.
Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable format, or to object to processing based on legitimate interests. Email hello@aelvora.io and we will respond within one month.
If you think we have handled your data badly, you can complain to the relevant supervisory authority. In the UK that is the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes materially we will update the date at the top. There is no mailing list to notify, because we do not run one.
Questions about this page? hello@aelvora.io. See also our Cookie Policy and Terms of Service.