ELEVATE STATE
Privacy Policy
Human Performance Assessment™ and Elevate State website services
|
IMPORTANT NOTICE The Human Performance Assessment™ and Elevate State services are educational and performance-coaching resources. They do not provide medical, mental health, legal, or financial advice and are not designed to diagnose or treat any condition. Do not use the Assessment to seek help for an emergency or immediate safety concern. If you are in immediate danger or need urgent support, contact your local emergency services or an appropriately qualified professional. |
Effective date: 8 August 2026
1. Who we are
Elevate State Holding AB ("Elevate State", "we", "us" or "our") is the controller of the personal data described in this policy. We provide educational performance-development content, the Human Performance Assessment™ (HPA), and related Human Performance Blueprint™ services.
Controller details: Elevate State Holding AB, organization number 559476-5512, registered address Lilla Håjumsgatan 2, 46135 Trollhättan, Sweden. Privacy contact: leaders@elevate-state.com . Website: [elevatestate.io].
2. What this policy covers
This policy explains how we process personal data when you visit our website, contact us, subscribe to communications, complete the HPA or another form, apply for or buy a service, or otherwise interact with Elevate State. It does not replace any separate privacy notice or agreement supplied for a specific client engagement.
3. Personal data we may collect
Depending on how you interact with us, we may process:
- Contact and identity information, such as your name, email address, telephone number, company, role and country.
- Assessment, application and inquiry responses, including the goal you describe, your performance priorities and information you choose to provide in open-text answers.
- Commercial information, such as purchases, invoices, payment status, service selections and relevant communications.
- Technical and usage information, such as IP address, device, browser, approximate location, pages viewed, referral source, and cookie or similar technology data.
- Support, feedback and correspondence information.
4. How we use personal data and our lawful bases
We process personal data only where we have a lawful basis under applicable data-protection law. The following summary reflects the main processing we expect to carry out:
|
Topic |
What this covers |
|---|---|
|
Answer requests and deliver services |
To reply to an inquiry, provide the HPA, deliver a purchased product or service, administer a client relationship and provide support. Lawful basis: performance of a contract or steps taken at your request before entering into a contract. |
|
Improve and protect our services |
To maintain our website, prevent misuse, protect security, keep records and understand how services are used. Lawful basis: our legitimate interests in operating a secure, effective business, balanced against your rights. |
|
Send marketing |
To send newsletters, invitations or relevant offers where you have opted in, or where another lawful basis permits it. Lawful basis: consent where required; you can unsubscribe at any time. |
|
Meet legal obligations |
To maintain records, respond to lawful requests, manage tax and accounting obligations, and establish, exercise or defend legal claims. Lawful basis: legal obligation or legitimate interests, as applicable. |
5. Assessment information and sensitive data
The HPA is an educational performance-development assessment; it is not medical, psychological or mental-health diagnosis or treatment. Please do not submit information that is unnecessary for the assessment, including detailed health information, unless we have clearly asked for it and provided an appropriate lawful basis.
If you choose to provide information that is special-category personal data under the GDPR (for example, health-related information), we will process it only where you have given explicit consent or another lawful basis under Article 9 GDPR applies. Any HPA form collecting that information should include a separate explicit-consent control before publication.
6. Service providers and sharing
We may use carefully selected providers to host our website, collect forms, process communications, automate administrative workflows, manage applications and process payments. Depending on the service you use, these may include Kajabi, Typeform, Kit (formerly ConvertKit), Zapier, Airtable and payment providers. We share data only as necessary for the purposes described above, with providers acting under appropriate contractual and security obligations.
We may also disclose data where required by law, to protect our rights or safety, or as part of a bona fide corporate transaction. We do not sell personal data.
7. International transfers
Some providers may process personal data outside the EU/EEA. When that occurs, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, and implement supplementary safeguards where appropriate. You may contact us for more information about the transfer safeguards relevant to your data.
8. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting and reporting requirements. Our current intended retention schedule is: assessment and application responses for [24 MONTHS] after completion or last meaningful contact; newsletter data until you withdraw consent or we stop the program; and transactional records for the period required by applicable law. We may retain limited information longer where needed to resolve disputes, enforce agreements or meet legal obligations.
9. Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise a right, contact us at leaders@elevate-state.com .
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority. We would appreciate the chance to address your concern first.
10. Cookies and similar technologies
You can adjust or delete cookies through your browser settings. We will update this Privacy Policy if we introduce a cookie-consent tool or a separate Cookie Notice.
11. Security
We use reasonable organizational, technical and contractual measures intended to protect personal data. No transmission or storage system can be guaranteed to be completely secure; please use care when submitting information online.
12. Changes to this policy
We may update this policy from time to time. We will post the revised version on our website and update the effective date. Material changes will be communicated where required by law.
