How Elevate Management & Advisory collects, uses and protects personal data — written to be readable, in line with the GDPR and the Belgian Data Protection Act of 30 July 2018.
Last updated · 27 April 2026
Elevate Management & Advisory ("Elevate", "we") is the controller of the personal data described in this policy. You can reach us at hello@elevateadvisory.be or by post at our registered office in Waregem, Belgium.
We process the minimum personal data required to provide our services and run our business:
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Replying to your enquiry, scheduling a discovery call | Pre-contractual measures (art. 6.1.b) |
| Delivering a signed engagement | Performance of a contract (art. 6.1.b) |
| Invoicing, accounting, tax records | Legal obligation (art. 6.1.c) |
| Newsletters and direct outreach to existing clients | Legitimate interest (art. 6.1.f) |
| Newsletters to new prospects who opted in | Consent (art. 6.1.a) |
| Anonymous website analytics | Legitimate interest (art. 6.1.f) |
We do not sell personal data. We share it only with carefully selected processors strictly necessary to operate, under written data processing agreements:
Where a processor is located outside the EEA, transfers are governed by the European Commission's Standard Contractual Clauses or an equivalent recognised mechanism.
We keep data only as long as necessary for the purpose it was collected for:
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time without affecting the lawfulness of past processing. Send any such request to hello@elevateadvisory.be; we respond within 30 days.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussel, dataprotectionauthority.be.
We apply reasonable organisational and technical measures to protect personal data against unauthorised access, loss or alteration: encrypted laptops, two-factor authentication on all systems, role-based access, and regular reviews of access rights. We notify the competent authority and affected individuals of any qualifying personal data breach within the legal deadlines.
We may update this policy to reflect changes in our practices or in the law. The date at the top of this page reflects the latest revision. Material changes are communicated to active clients and newsletter subscribers.
Questions about this document?