3. Cookies and Tracking Technologies  

Elvra uses cookies and similar tracking technologies to ensure our website and digital services function efficiently, securely, and in a user-friendly manner. These technologies allow us to recognize users, understand how our website is used, and continuously improve performance and functionality.

Cookies are small data files stored on your device when you visit our website. They help us provide a smoother, more personalized experience by remembering your interactions and preferences over time.

3.1 Types of Cookies We Use

Elvra may use the following categories of cookies: 

Essential Cookies
These cookies are necessary for the core functionality of our website. They enable features such as secure access, form submissions, booking processes, and payment-related functionality. Without these cookies, certain services may not operate correctly.

Performance and Analytics Cookies
These cookies collect anonymous information about how visitors use our website, such as pages visited, time spent on pages, and navigation behavior. This data helps us analyze traffic patterns, identify areas for improvement, and optimize website performance.

Functionality Cookies
These cookies allow the website to remember choices you make, such as language preferences or previously submitted information, to provide a more customized and efficient user experience.

Security and Fraud-Prevention Cookies
These cookies help us detect suspicious activity, protect user data, prevent unauthorized access, and maintain the overall security of our systems.

3.2 How Cookies Help Us 

Cookies and tracking technologies help Elvra to:

• Remember user preferences and settings to improve usability

• Ensure smooth navigation and reliable website functionality

• Monitor and analyze website traffic and usage trends

• Improve page performance and system reliability

• Identify and mitigate potential security threats or fraudulent activity

All data collected through cookies is used strictly for operational, analytical, and security-related purposes.

3.3 Managing Cookies 

You may choose to accept or decline cookies by adjusting your browser settings. Most web browsers allow you to control cookies through their settings preferences.

Please note that disabling or restricting cookies may impact:

• Website functionality

• Form submissions

• Booking or checkout processes

• Overall user experience

By continuing to use the AIvo website without adjusting your cookie settings, you consent to the use of cookies as described in this Privacy Policy.

3.4 Third-Party Cookies 

In some cases, Elvra may use trusted third-party services (such as analytics or security providers) that set cookies on our behalf to help us understand website performance or enhance security. These third parties are contractually obligated to comply with applicable data protection standards and use information solely for authorized purposes. 

4. Data Sharing and Third Parties 

Elvra is committed to protecting your personal information and maintaining transparency regarding how data is shared. We do not sell, rent, lease, or trade personal information to third parties for marketing or commercial purposes.

Personal information is shared only when necessary to deliver services, operate our business effectively, or comply with legal obligations.

4.1 Third-Party Service Providers 

Elvra may share limited personal information with carefully selected and trusted third-party service providers who support our operations. These providers assist us in delivering reliable, secure, and high-quality services and may include:

Payment Processing Providers
Third-party payment processors are used to securely handle transactions, billing, subscriptions, and refunds. Elvra does not store full payment card details on its own servers.

Hosting and Cloud Infrastructure Providers
We use secure hosting and cloud service providers to store data, host applications, and maintain system availability and performance.

Analytics and Performance Monitoring Services
These services help us understand how users interact with our website and systems, enabling us to optimize performance, usability, and reliability.

Security, Fraud Prevention, and Compliance Providers
We engage security and compliance partners to monitor systems, prevent unauthorized access, detect fraudulent activity, and ensure compliance with applicable laws and regulations.

4.2 Conditions for Data Sharing  

When personal information is shared with third-party service providers, Elvra ensures that:

• Data is shared strictly on a need-to-know basis

• Third parties use information only for the specific services they provide to Elvra

• Appropriate contractual safeguards are in place

• Confidentiality obligations are enforced

• Industry-standard security measures are implemented
  
  

Third-party providers are prohibited from using personal information for their own purposes or disclosing it to additional parties without authorization.

4.3 Legal and Regulatory Disclosure 

Elvra may disclose personal information when required to do so by law, regulation, legal process, or government request. This may include responding to subpoenas, court orders, or lawful requests from authorities.

We may also disclose information when necessary to:

• Enforce our terms and agreements

• Protect the rights, property, or safety of AIvo, our users, or others

• Prevent fraud, misuse, or security threats

Such disclosures are made only to the extent legally required and appropriate.

4.4 Business Transfers 

In the event of a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of the business transaction. Any such transfer will be subject to appropriate confidentiality and data protection obligations. 

4.5 International Data Transfers 

Some third-party service providers may operate in jurisdictions outside your country. In such cases, Elvra takes reasonable steps to ensure that personal information is protected in accordance with applicable data protection laws and standards. 

5. Data Security 

Elvra places a high priority on the security and integrity of personal information. We implement industry-standard technical, administrative, and organizational safeguards designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure.

Our security practices are continuously reviewed and improved to address evolving technological and security risks.

5.1 Technical Security Measures 

Elvra uses a range of technical safeguards to protect personal information, including:

• Secure server infrastructure hosted in controlled environments

• Encrypted data transmission using secure communication protocols

• Firewalls and intrusion detection systems to prevent unauthorized access

• Secure authentication mechanisms to protect accounts and systems

These measures help ensure that personal information remains protected during storage and transmission.

5.2 Access Controls 

Access to personal information is strictly limited to authorized personnel, contractors, or service providers who require such access to perform their duties.

Elvra enforces:

• Role-based access controls

• Authentication and authorization procedures

• Regular access reviews and permission updates

All individuals with access to personal data are subject to confidentiality obligations.

5.3 Monitoring and Risk Management 

We actively monitor our systems for potential security threats, vulnerabilities, and unauthorized activity. This includes:

• Continuous system monitoring

• Log analysis and anomaly detection

• Security audits and assessments

• Incident detection and response procedures
  
  

These practices help us identify and respond to potential risks in a timely manner.

5.4 System Maintenance and Updates 

Elvra maintains up-to-date systems through:

• Regular software updates and security patches

• Infrastructure improvements

• Ongoing performance and security optimization
  
  

This proactive approach reduces vulnerabilities and strengthens overall system resilience.

5.5 Data Breach Response 

In the unlikely event of a data breach or security incident, Elvra has procedures in place to:

• Assess the scope and impact of the incident

• Take immediate steps to contain and mitigate risks

• Notify affected parties and relevant authorities where required by law

• Implement corrective actions to prevent future occurrences

5.6 Security Limitations

While Elvra takes reasonable and proactive steps to protect personal information, no digital system can guarantee absolute security. Users acknowledge that data transmission over the internet carries inherent risks.

Elvra cannot be held responsible for security breaches beyond our reasonable control but remains committed to taking all appropriate measures to safeguard your data at all times.

6. Your Rights and Choices  

Elvra respects your rights regarding the personal information we collect and process. Depending on your jurisdiction and applicable data protection laws, you may have certain rights and choices in relation to your personal data.

These rights are designed to give you transparency and control over how your information is used.

6.1 Right of Access 

You have the right to request confirmation of whether Elvra processes personal information about you and to request access to the personal data we hold.

Upon request, we may provide:

• A copy of your personal information

• Information about how and why your data is processed

• Details regarding the categories of data collected and recipients of such data
  
  

Requests for access may be subject to identity verification to protect your information.

6.2 Right to Correction or Rectification 

You have the right to request correction, updating, or completion of personal information that is inaccurate, incomplete, or outdated.

Elvra takes reasonable steps to ensure personal information remains accurate and up to date and will address correction requests promptly where appropriate.

6.3 Right to Deletion (Right to Erasure) 

You may request the deletion of your personal information where:

• The data is no longer necessary for the purpose it was collected

• You withdraw consent and there is no other legal basis for processing

• The data has been processed unlawfully
  
  

Please note that Elvra may be required to retain certain information to comply with legal, contractual, or regulatory obligations.

6.4 Right to Object or Restrict Processing 

You may object to or request restriction of certain data processing activities, particularly where processing is based on legitimate interests or used for direct marketing purposes.

Elvra will evaluate such requests and comply where required by law, unless there are compelling legitimate grounds to continue processing.

6.5 Right to Withdraw Consent 

Where Elvra processes personal information based on your consent, you have the right to withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal but may impact your ability to access certain services.

6.6 Exercising Your Rights 

 To exercise any of your rights, you may contact Elvra using the contact details provided at the end of this Privacy Policy.

We will:

• Acknowledge your request

• Verify your identity where necessary

• Respond within timeframes required by applicable laws

Requests are handled confidentially and free of charge unless otherwise permitted by law.

7. Data Retention 

Elvra retains personal information only for as long as it is reasonably necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy. We are committed to ensuring that personal data is not retained longer than required and is handled responsibly throughout its lifecycle. 

7.1 Retention Purposes 

Personal information may be retained to:

• Provide, operate, and maintain Elvra services

• Fulfill contractual obligations with clients and partners

• Maintain accurate business, financial, and operational records

• Comply with applicable legal, regulatory, tax, and accounting requirements

• Resolve disputes, investigate issues, and enforce agreements

• Ensure system security, integrity, and continuity

7.2 Retention Periods 

Retention periods vary depending on the type of information collected, the purpose for which it is processed, and legal or regulatory requirements.

Elvra determines appropriate retention periods based on:

• The nature and sensitivity of the data

• Legal obligations and statutory retention requirements

• Business and operational needs

• Risk management and compliance considerations

Where possible, personal data is anonymized or aggregated to minimize risk.

7.3 Secure Deletion and Anonymization 

When personal information is no longer required, Elvra takes appropriate steps to ensure it is:

• Securely deleted from active systems

• Permanently erased or anonymized in backups where feasible

• Rendered inaccessible in accordance with security standards
  
  

Anonymized data may be retained for analytical, statistical, or improvement purposes without identifying individuals.

7.4 Exceptions 

In certain circumstances, Elvra may retain personal information for longer periods where:

• Required by law or regulatory authorities

• Necessary to establish, exercise, or defend legal claims

• Needed to prevent fraud, misuse, or security threats

Such retention is limited to what is legally permissible and strictly necessary.

8. Third-Party Links 

The Elvra website may contain links to external websites, platforms, or services that are operated by third parties. These links are provided for convenience, informational purposes, or to support integrations and services offered through our platform.

Elvra does not control and is not responsible for the content, privacy practices, security measures, or data handling policies of third-party websites or services. Accessing third-party links is done at your own discretion and risk.

8.1 Third-Party Privacy Practices 

When you leave the Elvra website and access a third-party platform, your interaction is governed solely by that third party’s privacy policy, terms, and data handling practices.

Elvra does not:

• Endorse or guarantee third-party services

• Monitor how third parties collect or use personal information

• Assume liability for third-party data processing activities

8.2 User Responsibility 

We strongly encourage users to review the privacy policies, terms, and security practices of any external websites before submitting personal information, making payments, or engaging with third-party services.

Elvra is not responsible for any loss, misuse, or unauthorized access to personal information that occurs on third-party platforms.

8.3 Integrations and External Tools 

In some cases, Elvra services may integrate with third-party tools or platforms at your request. Any data shared through such integrations is subject to the privacy policies and security practices of the respective third-party providers. 

9. Children’s Privacy 

Elvra’s website, products, and services are intended for business and professional use only and are not designed for or directed toward individuals under the age of 18.

Elvra does not knowingly collect, solicit, or process personal information from minors. We do not permit the use of our services by individuals who are under the age of 18 without appropriate parental or legal guardian consent, where required by law.

9.1 Awareness and Prevention 

We take reasonable measures to prevent the collection of personal information from minors, including limiting access to our services and avoiding marketing or content that is targeted toward children.

9.2 Removal of Minor Data 

If Elvra becomes aware that personal information has been collected from a minor without proper authorization, we will take prompt steps to:

• Investigate the matter

• Remove or delete the personal information from our systems

• Prevent further collection where possible
  
  

9.3 Parental and Guardian Rights 

Parents or legal guardians who believe that a minor has provided personal information to Elvra may contact us using the details provided at the end of this Privacy Policy. We will respond in accordance with applicable data protection laws and take appropriate corrective action. 

10. Changes to This Privacy Policy  

Elvra may update or revise this Privacy Policy from time to time to reflect changes in legal requirements, regulatory obligations, technological developments, or our business practices.

We reserve the right to modify this Privacy Policy at our discretion to ensure continued compliance and transparency.

10.1 Notification of Changes 

When updates are made, the revised Privacy Policy will be posted on this page with an updated “Last Updated” or revision date at the top of the document.

For significant or material changes that affect how personal information is processed, Elvra may provide additional notice where required by law, such as through email notifications or prominent notices on our website.

10.2 Effective Date 

Any changes to this Privacy Policy become effective as of the date they are published on this page, unless otherwise stated.

10.3 Continued Use of Services  

Your continued access to or use of Elvra’s website, products, or services after changes are posted constitutes your acknowledgment and acceptance of the revised Privacy Policy.

If you do not agree with the updated terms, you should discontinue use of our services.

11. Contact Information 

Elvra is committed to transparency and accountability in how personal information is handled. If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our data protection practices, you are encouraged to contact us.

You may contact Elvra for matters including:

• Questions about this Privacy Policy

• Requests to access, update, or delete personal information

• Withdrawal of consent or objections to data processing

• Data security or privacy-related concerns

• General inquiries regarding how information is handled
  
  

How to Contact Us 

Elvra
📧 Email: elvratechbusiness@gmail.com
🌐 Website: www.elvra.co.za

We will make reasonable efforts to respond to all legitimate privacy-related inquiries in a timely manner and in accordance with applicable data protection laws and regulations.

Response Time and Verification 

For your protection, Elvra may require verification of identity before processing certain requests related to personal information. This helps ensure that personal data is disclosed only to authorized individuals.

Responses will be provided within the timeframes required by applicable law. 

POPIA Compliance (South Africa) 

POPIA Compliance Notice 

Elvra processes personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) of South Africa.

We are committed to ensuring that all personal information is:

• Processed lawfully and in a reasonable manner

• Collected for specific, explicitly defined, and lawful purposes

• Adequate, relevant, and not excessive

• Accurate and kept up to date where reasonably practicable

• Secured using appropriate technical and organizational measures

Elvra acts as a Responsible Party under POPIA when determining the purpose and means of processing personal information.

Lawful Basis for Processing (POPIA) 

Under POPIA, Elvra processes personal information on one or more of the following lawful grounds:

• With the consent of the data subject

• When necessary to perform a contract or provide requested services

• To comply with legal or regulatory obligations

• For legitimate business interests, provided such processing does not infringe on the rights of the data subject

Data Subject Rights Under POPIA 

In addition to the rights outlined in Section 6, South African users have the right to:

• Lodge a complaint with the Information Regulator of South Africa

• Request correction or deletion of personal information held by Elvra

• Object to the processing of personal information on reasonable grounds

Elvra will cooperate fully with lawful requests made under POPIA.