1. Who we are
CH Elevate Consultancy Limited provides consulting, training and related services. For personal data collected through this website and portal, CH Elevate is generally the data controller. This policy should be read with our Data Protection statement.
2. Information we collect
Depending on how you use our services, we may collect:
- identity and contact details, including your name, email address, phone number, country and organisation;
- account and profile details, including job title, time zone and authentication records;
- enquiry, booking, course application and participant-roster information;
- registration status, attendance, completion, certificates and course-material download activity;
- offline payment, invoice, receipt and administrative information;
- communications, support requests, cancellation requests and marketing preferences; and
- technical and security information such as session, device, browser, IP address and audit-log data.
We do not use this website to process payment-card details. Passwords are handled by the authentication system and are not stored as readable text.
3. How we collect information
We collect information directly from you, from an authorised organisation coordinator registering participants, through your use of the website and portal, and from service providers supporting our operations. If you provide another person's information, you must be authorised to do so and should make this policy available to them.
4. Why we use personal data
We use personal data to respond to enquiries, manage bookings and consulting engagements, create and secure accounts, assess and administer course registrations, manage capacity and waitlists, issue invoices and receipts, provide private materials, record attendance, issue and verify certificates, send service notifications, maintain business records, improve service reliability, prevent misuse and meet legal obligations.
Where applicable, our grounds for processing may include your consent, steps requested before a contract, performance of a contract, compliance with a legal obligation, and our legitimate interests in operating and protecting the business. We will seek specific consent or rely on another lawful condition where the law requires it.
5. Sharing personal data
We may share only the information reasonably necessary with technology, hosting, email and professional service providers; authorised CH Elevate personnel; an organisation coordinator acting for the participant's organisation; and regulators, courts or public authorities where legally required. Coordinators are restricted to records belonging to their organisation and cannot access individual participant credentials or certificates.
We do not sell personal data. Providers acting for us are expected to protect information and use it only for the agreed service.
6. Cookies and similar technology
We use cookies or comparable storage that is necessary for account authentication, session security and core website operation. If we introduce non-essential analytics or advertising technology, we will update our notice and provide any choice required by law.
7. International processing
Some service providers may process information outside Jamaica. Where a transfer is subject to Jamaican data-protection requirements, we will assess the destination and use appropriate contractual, organisational or other safeguards.
8. Retention and security
We keep personal data only for as long as needed for the purpose collected, the service relationship, security, dispute handling, audit and applicable legal or financial recordkeeping requirements. Retention varies by record type, and backups are removed or overwritten through their normal lifecycle.
We use role-based access, authenticated downloads, private file storage, audit records and other technical and organisational measures appropriate to the information. No system is completely secure, but we review protections and respond to suspected incidents.
9. Your rights
Subject to the Data Protection Act, 2020 and applicable exceptions, you may have rights to be informed, request access, correct inaccurate data, object to or restrict certain processing, withdraw consent, prevent direct marketing, address certain automated decisions, request transfer of data and complain to the Information Commissioner.
See our Data Protection statement for request details.
10. Children's information
Our general website and services are not directed to children. We will not knowingly collect a child's personal data without appropriate authority or consent where required. A guardian or sponsoring organisation should contact us before submitting a minor's information.
11. Updates and contact
We may update this policy to reflect service, technology or legal changes. For privacy questions or requests, email info@ch-elevateconsultancy.com with the subject “Data protection request”. We may need to verify your identity before acting on a request.