Privacy Policy

8levate^™ Privacy Policy

Effective Date: 09-August-2025

Introduction & Organizational Info:

Welcome to 8LEVATE^™ ("we," "our," "us"). We are committed to protecting your personal information and your right to privacy. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

If you have any questions or concerns about this privacy notice or our practices with regards to your personal information, please contact us at privacy@8levate.co.uk.

Our primary goals in processing this information include:

• - Enhancing the user experience on our platform by understanding customer needs and preferences.
• - Providing timely support and responding to inquiries or service requests.
• - Improving our products and services to meet the evolving demands of our users.
• - Conducting necessary business operations, such as billing and account management.

We collect personal information in the following ways:

a) Information You Provide to Us

• - Account Information: When you register for an account, we collect your email address and password. You may also provide your full name and other profile details. This information is processed by our identity provider, Google Firebase Authentication.
• - Payment Information: When you subscribe to a paid plan, your payment is processed by our third-party payment processor, Paddle. We do not collect or store your full credit card information ourselves. We receive a token and confirmation of your payment status from Paddle to manage your account.
• - Information for AI Features: When you use our AI-powered tools such as the CV Builder, Interview Prep, or Personal Statement Generator, you provide us with detailed personal and professional information, including your work history, educational background, skills, and personal aspirations.
• - Communications: When you contact us via our contact form or email, we collect your name, email address, and the content of your message. Emails issued from the contact form are processed by our email partner Resend, who will only have access to your email address and email content. No other personal information or password would be shared to them.
• - Testimonials: We may post testimonials on our site that may contain personal information. We would always obtain your consent prior to posting a testimonial.

b) Information We Collect Automatically

• - Usage and Log Data: Like most websites, we automatically collect information when you access and use our services. This data may include your IP address, browser type, operating system, pages visited, the dates and times of your visits, and other usage statistics.
• - Cookies and Tracking Technologies: We use cookies and similar tracking technologies to access and store information. We use Google Analytics to help us understand how our users interact with the website, which helps us improve our services. You can control the use of cookies (including opt out from analytical cookies) as highlighted in our detailed cookies policy.

We use the information we collect for the following purposes:

• - To Provide and Manage Our Services: To facilitate account creation, manage your user account, and provide you with access to our platform's features.
• - To Power Our AI Tools: The personal and professional data you provide is sent to Google's AI Platform to generate the content you request, such as an enhanced CV or interview questions. We store the generated output in your account for your use.
• - To Process Transactions: To manage your subscriptions, process payments through Paddle, and handle billing issues.
• - To Communicate With You: To respond to your feedback and support requests, and to send you administrative information, such as updates to our terms or policies.
• - For Analytics and Improvement: To analyze usage trends and improve the functionality and user experience of our website.
• - For Legal and Security Purposes: To comply with legal obligations and to protect the security and integrity of our services.

We do not sell your personal information. We only share your information with the following third-party service providers who help us operate our business:

• - Google (Firebase, Google Cloud, Google AI): We use Google's services for user authentication (Firebase Authentication), database hosting (Cloud Firestore), website analytics (Google Analytics), and for processing the data you submit to our AI features (Google AI Platform). The information you provide to our AI tools is processed by Google's models to generate a response.
• - Paddle: Our payment processor, Paddle, handles all payment transactions. They receive the necessary billing information to process your payment and prevent fraud.
• - Resend: Our contact form email processor, Resend, is used to exchange emails between you and us.

We may also disclose your information where we are legally required to do so in order to comply with applicable law, a judicial proceeding, court order, or other legal process.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements).

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction. Our practices are designed to safeguard the confidentiality and integrity of your personal information, while enabling us to deliver the services you trust us with.

We do have a designated Data Protection Officer (DPO). Should you have any questions or require further information about how we manage personal information, please feel free to contact us at margherita.pasquariello@8levate.co.uk.

Your privacy is our priority. We are committed to processing your personal information transparently and with your safety in mind. This commitment extends to our collaboration with third-party services that may process personal information on our behalf, such as in the case of sending invoices. Rest assured, all activities are conducted in strict compliance with applicable privacy laws.

Scope and Application:

Our privacy policy is designed to protect the personal information of all our stakeholders, including website visitors, registered users, and customers. Whether you are just browsing our website 8levate.co.uk, using our services as a registered user, or engaging with us as a valued customer, we ensure that your personal data is processed with the highest standards of privacy and security. This policy outlines our practices and your rights related to personal information.

Data Storage and Protection:

Data Storage:

• - Personal information is stored in secure servers located in the EU (Netherlands). For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.
• - Data Hosting Partners: We partner with reputable data hosting providers committed to using state-of-the-art security measures. These partners are selected based on their adherence to stringent data protection standards. Our core infrastructure is hosted on the very secure Google Cloud Platform, which ensures state-of-the-art compliance and threat protection.

Data Protection Measures:

• - Encryption: To protect data during transfer and at rest, we employ robust encryption technologies.
• - Access Control: Access to personal information is strictly limited to authorized personnel who have a legitimate business need to access the data. We enforce strict access controls and regularly review permissions.
• - Security Audits and Monitoring: Regular security audits are conducted to identify and remediate potential vulnerabilities. We also monitor our systems for unusual activities to prevent unauthorized access.

Data Processing Agreements:

When we share your data with third-party service providers, we do so under the protection of Data Processing Agreements (DPAs) that ensure your information is managed in accordance with GDPR and other relevant data protection laws. These agreements mandate that third parties implement adequate technical and organizational measures to ensure the security of your data.

Transparency and Control:

We believe in transparency and providing you with control over your personal information. You will always be informed about any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes.

Your trust is important to us, and we strive to ensure that your personal information is disclosed only in accordance with this policy and when there is a justified reason to do so. For any queries or concerns about how we share and disclose personal information, please reach out to us at privacy@8levate.co.uk.

User Rights and Choices:

At 8levate Ltd, we recognize and respect your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR), UK Data Protection Act 2018 and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:

Your Rights:

• - Right of Access (Article 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
• - Right to Rectification (Article 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
• - Right to Erasure (‘Right to be Forgotten’) (Article 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
• - Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
• - Right to Data Portability (Article 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
• - Right to Object (Article 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
• - Right to Withdraw Consent (Article 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• - Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.

Exercising Your Rights:

To exercise any of these rights, please contact us at privacy@8levate.co.uk. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

Cookies and Tracking Technologies:

At 8levate Ltd, we value your privacy and are committed to being transparent about our use of cookies and other tracking technologies on our website 8levate.co.uk. These technologies play a crucial role in ensuring the smooth operation of our digital platforms, enhancing your user experience, and providing insights that help us improve.

Understanding Cookies and Tracking Technologies:

Cookies are small data files placed on your device that enable us to remember your preferences and collect information about your website usage. Tracking technologies, such as web beacons and pixel tags, help us understand how you interact with our site and which pages you visit.

How We Use These Technologies:

• - Essential Cookies: Necessary for the website’s functionality, such as authentication and security.
• - Performance and Analytics Cookies: These collect information about how visitors use our website, which pages are visited most frequently, and if error messages are received from web pages. These cookies help us improve our website.
• - Functional Cookies: Enable the website to provide enhanced functionality and personalization, like remembering your preferences.
• - Advertising and Targeting Cookies: Used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of the advertising campaign.

Your Choices and Consent:

Upon your first visit, our website will present you with a cookie consent banner, where you can:

• - Accept All Cookies: Consent to the use of all cookies and tracking technologies.
• - Reject Non-Essential Cookies: Only essential cookies will be used to provide you with necessary website functions.
• - Customize Your Preferences: Choose which categories of cookies you wish to allow.

Changes to Our Cookie Use:

We may update our use of cookies and tracking technologies to improve our services or comply with legal requirements. We will notify you of any significant changes and seek your consent where necessary.

For more detailed information about the cookies we use, their purposes, and how you can manage your preferences, please visit our detailed Cookie Policy https://8levate.co.uk/cookies.

Should you have any questions or concerns about our use of cookies and tracking technologies, please do not hesitate to contact us at privacy@8levate.co.uk. Your privacy and the integrity of your personal data are of utmost importance to us.

Compliance with United States Privacy Laws

For residents of the United States of America the following provisions apply:

A. Individual rights

The California Consumer Privacy Act provides residents of California specific rights regarding their personal information, additional to what has been described before.

B. Right to Know

You may request that we disclose to you what personal information we have collected, used, shared, or sold about you, and why we collected, used, shared, or sold that information. Specifically, you may request the disclosure of:

• - The categories of personal information collected
• - Specific pieces of personal information collected
• - The categories of sources from which we collected personal information
• - The purposes for which personal information is used
• - The categories of third parties with whom personal information is shared
• - The categories of information that are sold or disclosed to third parties

C. Right to Delete

You may request that we delete personal information we have collected about you.

D. Right to Correct

You may ask us to correct inaccurate information that we have about you.

E. Right to Limit

You can request us to only use your sensitive personal information (for example, your social security number, your genetic data, etc.) for limited purposes, such as providing you with the services you requested.

F. Right to Opt-Out

8levate Ltd does not sell or share personal information. In case your data is sold or shared you can make use of your right to opt-out of the sale or sharing of personal information by submitting your request through the link on our website.

G. Right to Non-Discrimination

You have the right to be protected from discrimination for exercising your rights.

H. Submitting requests

You may submit your request by sending an email to privacy@8levate.co.uk. We will compare the information you submit to us with the information we have in our records to verify your request. We will then respond to your request in accordance with the requirements.

Direct Marketing and Communications:

At 8levate Ltd, we may use your personal information to send you direct marketing communications about our products, services, promotions, and other relevant information that we believe may be of interest to you. We are committed to ensuring that our direct marketing practices are transparent, lawful, and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

Obtaining Consent for Direct Marketing:

• - Opt-In Consent: We will obtain your explicit opt-in consent before sending you direct marketing communications, where required by law. This means that you will have the opportunity to actively consent to receiving marketing messages from us before we send them to you.
• - Unsubscribe Option: Every direct marketing communication we send will include clear instructions on how to unsubscribe or opt-out from receiving future marketing communications. You can exercise your right to opt-out at any time, and we will promptly honor your request to stop sending you marketing messages.

Types of Direct Marketing Communications:

We may use your personal information to send you direct marketing communications via various channels, including:

• - Email
• - Social media

Managing Your Preferences:

You have control over the direct marketing communications you receive from us. You can manage your communication preferences by using the unsubscribe link provided in our marketing emails or text messages.