Legal
Privacy Policy
Last updated: 4 October 2026
This policy explains what personal data we process when you visit itbackupnow.co.uk or send us a trial request, why we process it, who receives it and what rights you have. We keep it short because we collect very little.
1. Who we are
The controller of your personal data, operating the ITBackupNow service (“ITBackupNow”, “we”, “us”), is:
ELEVORTA CAPITAL spółka z ograniczoną odpowiedzialnościąul. Augustyna Szamarzewskiego 21/2
60-514 Poznań, Poland
NIP: 7812103685 · KRS: 0001218119
Email: Show e-mail address
Our work is invoiced through this company. Contact us at the address above for all privacy matters. We do not currently meet the threshold that requires a Data Protection Officer.
2. What data we collect and why
We process personal data only in the situations below.
| Situation | Data | Purpose & legal basis |
|---|---|---|
| Trial request form | Work email address you enter; country (derived by Cloudflare from your IP address); time of the request. | To reply to your request and scope the trial task. Legitimate interests — responding to a business enquiry you initiated (UK GDPR / GDPR Art. 6(1)(f)). |
| Emailing us | Your email address, name, message content and any attachments you send. | To correspond with you and, if we work together, to perform the contract or take pre-contract steps (Art. 6(1)(b), (f)). |
| Visiting the website | IP address, browser type, requested page and time, processed in server logs by our hosting provider. | Delivering the site, preventing abuse and keeping it secure (Art. 6(1)(f)). |
| Cookie choice | A cookie recording your consent choices (see section 3). | To remember your preference and meet our legal obligation to ask for consent (Art. 6(1)(c), (f)). |
| Client work and billing | Business contact details, billing details, time reports and invoices. | Performing our contract and meeting accounting and tax obligations (Art. 6(1)(b), (c)). |
We do not ask for, and you should not send us, special-category data. We do not sell personal data and do not make decisions based solely on automated processing or profiling.
3. Cookies
On your first visit we ask for your choice. You can accept all, reject all or choose categories, and change your mind at any time via Cookie settings in the footer.
- Essential —
cookie_consent(first-party, 12 months): stores your consent choices. Always on; it does not track you. - Analytics and Marketing: off unless you allow them. At the date of this policy the site does not set analytics or marketing cookies; if that changes, they will load only after you consent and we will list them here.
The site loads the Inter typeface from Google Fonts, which means your IP address is sent to Google when the page is displayed.
4. Who we share data with
We use a small number of service providers (processors) who handle data on our instructions:
- Cloudflare, Inc. — hosting, content delivery, DNS and security of this website, including delivery of the trial-request form.
- Google LLC (Google Workspace) — email. Trial requests are delivered to our Google Workspace mailbox.
- Google LLC (Google Fonts) — typeface delivery (see section 3).
- Our accountants and, where legally required, tax authorities or other public bodies.
We do not share your data with third parties for their own marketing.
5. International transfers
We are based in Poland (EEA). Data about UK-based visitors can be transferred to us under the UK’s data-protection regulations, and the EU and UK recognise each other’s adequacy decisions. Our providers may process data in the United States and other countries; such transfers rely on an adequacy decision (including the EU–US and UK–US Data Privacy Framework where the provider is certified) or on standard contractual clauses.
6. How long we keep data
- Trial requests and general correspondence: up to 24 months after our last contact, then deleted.
- Contracts, invoices and accounting records: for the period required by law (in Poland, generally 5 years from the end of the tax year).
- Consent cookie: 12 months, or until you delete it.
- Server logs: kept by our hosting provider for a short, security-limited period.
7. Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, or its use restricted, in the cases provided by law;
- object to processing based on our legitimate interests;
- receive data you provided in a portable format, where processing is based on contract or consent;
- withdraw consent at any time (without affecting earlier processing).
To exercise any right, email us (see section 1). We will respond within one month. You also have the right to complain to a supervisory authority: in the UK the Information Commissioner’s Office (ICO), or in Poland the President of the Personal Data Protection Office (UODO). We would appreciate the chance to resolve your concern first.
8. Security
The website is served over HTTPS only. Access to our mailbox is protected by multi-factor authentication, and we limit access to personal data to the people who need it. Our contact address is obfuscated in the page source to reduce harvesting by bots. No system is perfectly secure, but we take proportionate measures to protect your data.
9. Changes to this policy
We may update this policy as our service or the law changes. The date at the top shows the latest revision; material changes will be highlighted on this page.