Privacy Policy

Last updated: February 2026

1. Controller

Elanova AI
The Netherlands
Email: hello@elanova.ai
Phone: +31 6 40747312

Elanova AI is the data controller within the meaning of the General Data Protection Regulation (GDPR / AVG).

2. What personal data we collect

We only collect personal data that you voluntarily provide to us:

  • Contact information — name, email address, phone number, company name — when you reach out to us via email, phone, or WhatsApp.
  • Message content — the text of your enquiry or conversation.

We do not use analytics services, tracking pixels, or any third-party data collection on this website.

3. Purpose and legal basis

Purpose Legal basis (GDPR Art. 6)
Responding to your enquiry Legitimate interest (Art. 6(1)(f))
Entering into or performing a contract Performance of a contract (Art. 6(1)(b))
Complying with legal obligations (e.g. tax records) Legal obligation (Art. 6(1)(c))

4. Data sharing

We do not sell your data. We may share personal data with:

  • Hosting provider — Cloudflare, Inc. (to deliver this website). Cloudflare processes data under its Privacy Policy and is certified under the EU-U.S. Data Privacy Framework.
  • Email provider — the provider handling our business email, for responding to your messages.

5. Data retention

We retain your contact details and correspondence for as long as necessary to handle your enquiry or maintain our business relationship. Financial records are kept for the legally required period (7 years under Dutch tax law). After these periods, data is deleted.

6. Your rights

Under the GDPR you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Restriction — limit how we process your data
  • Data portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interest

To exercise any of these rights, email us at hello@elanova.ai. We will respond within 30 days.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

7. Cookies

This website does not use cookies. See our Cookie Policy for details.

8. Security

We take appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, security headers, and access controls.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the most recent revision.