Privacy Policy

Last updated: 3 July 2026

1. Introduction

EllzTech (“EllzTech”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, transfer, and protect personal data when you use our websites, software platforms, mobile applications, cloud-based systems, and related services (“Services”).

This Privacy Policy applies to website visitors, customers, business contacts, authorised account users, and individuals whose personal data may be processed through our software platforms.

EllzTech may operate internationally and may provide Services to users and customers in the United States, the United Kingdom, Africa, the European Economic Area, and other countries. Depending on your location, the location of the relevant customer, the Services used, and the nature of the processing, applicable privacy and data protection laws may include United States federal and state privacy laws, the laws of the State of Wyoming, the UK General Data Protection Regulation, the Data Protection Act 2018, the EU General Data Protection Regulation, and other applicable privacy, data protection, consumer protection, or electronic communications laws.

Where UK GDPR, EU GDPR, or another mandatory privacy law applies, nothing in this Privacy Policy is intended to limit or remove any rights you may have under those laws.

This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy, and any applicable service agreement, quotation, order form, data processing agreement, or contract.

2. Important Data Protection Roles

Depending on the situation, EllzTech may act as a data controller, data processor, service provider, or similar role under applicable privacy laws.

2.1 When EllzTech Is a Data Controller

EllzTech acts as a data controller, business, or similar responsible party when we decide why and how personal data is processed. This may include personal data used for:

• Creating and managing customer accounts

• Billing and payment administration

• Website enquiries

• Customer support

• Marketing communications

• Security monitoring

• Business administration

• Legal and compliance purposes

2.2 When EllzTech Is a Data Processor or Service Provider

EllzTech acts as a data processor, service provider, or similar role when our customers use our software to store or manage personal data relating to their own customers, employees, students, parents, borrowers, suppliers, staff members, or other individuals.

For example, this may include data entered into:

• POS systems

• Payroll and HR systems

• School management systems

• Loan management systems

• Restaurant management systems

• Custom software systems

In these cases, the customer is usually responsible for deciding why and how the data is collected and used, and EllzTech processes the data on the customer’s behalf and in accordance with the customer’s instructions, applicable agreements, and applicable law.

Where EllzTech acts as a processor or service provider, we will not use customer-controlled personal data for our own unrelated purposes unless permitted by the customer, required by law, or otherwise allowed under applicable privacy laws.

6. Lawful Bases for Processing Personal Data

Where UK GDPR, EU GDPR, or similar data protection laws apply, we rely on one or more lawful bases for processing personal data.

These may include:

6.1 Performance of a Contract

We process personal data where necessary to provide the Services you have requested, manage your account, process subscriptions, deliver customer support, and perform our contractual obligations.

6.2 Legal Obligation

We process personal data where necessary to comply with legal, tax, accounting, regulatory, security, or law enforcement obligations.

6.3 Legitimate Interests

We process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

This may include:

• Improving our Services

• Maintaining platform security

• Preventing fraud

• Managing customer relationships

• Internal administration

• Business development

• Service analytics

6.4 Consent

We may rely on consent where required, for example for certain marketing communications, optional cookies, or specific data uses.

Where we rely on consent, you may withdraw your consent at any time.

6.5 Vital Interests or Public Task

These lawful bases are not commonly used by EllzTech but may apply in limited situations where required by law or necessary to protect someone’s vital interests.

9. International Data Transfers

Your personal data may be stored, accessed, transferred, or processed in countries outside your country of residence, including the United States, the United Kingdom, Africa, the European Economic Area, or other locations where EllzTech, our customers, hosting providers, software providers, support providers, or third-party processors operate.

Where personal data is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place where required by applicable data protection law.

These safeguards may include:

• Adequacy regulations or adequacy decisions

• International data transfer agreements

• Standard contractual clauses

• Data processing agreements

• Contractual, technical, and organisational safeguards

• Other lawful transfer mechanisms permitted by applicable law

12. Your Data Protection Rights

Depending on your location and applicable law, you may have certain rights in relation to your personal data.

These may include:

• The right to be informed about how your personal data is used

• The right to access your personal data

• The right to correct inaccurate or incomplete data

• The right to request deletion of your personal data

• The right to restrict processing

• The right to object to processing

• The right to data portability

• The right to withdraw consent where processing is based on consent

• The right to complain to a data protection authority, regulator, or other competent authority

These rights are not absolute and may be subject to legal limits, exemptions, identity verification, security checks, customer instructions, or our need to retain certain information.

To exercise your rights, contact us at:

Email: [email protected]
Subject: Data Protection Request

Where your data was entered into an EllzTech system by one of our customers, such as your employer, school, lender, restaurant, shop, organisation, or service provider, you should usually contact that customer directly because they are generally responsible for deciding how your personal data is used.

15. Data Breaches

If we become aware of a personal data breach or security incident affecting personal data, we will take reasonable steps to investigate, contain, and address the issue.

Where required by applicable law, we will notify affected customers, individuals, regulators, authorities, or other required parties.

Where EllzTech acts as a processor or service provider, we will notify the relevant customer where required so that the customer can meet its own legal obligations.

20. Contact Information

If you have any questions about this Privacy Policy, our data practices, or your data protection rights, contact us:

EllzTech
Email: [email protected]
Website: https://ellztech.com/

For privacy or data protection requests, please use the subject line:

Data Protection Request

21. Complaints

If you are based in the United Kingdom and are unhappy with how we handle your personal data, you may have the right to complain to the UK Information Commissioner’s Office.

If you are based in the European Economic Area or another country with applicable privacy laws, you may also have the right to complain to your local data protection authority, privacy regulator, or other competent authority.

We encourage you to contact us first so we can try to resolve your concern.

22. Governing Law and Privacy Rights

To the extent this Privacy Policy forms part of EllzTech’s contractual terms, it shall be governed by the laws of the State of Wyoming, United States, unless mandatory applicable law requires otherwise.

This governing law wording does not limit, exclude, or override any mandatory privacy, data protection, consumer protection, or electronic communications rights that apply to users in the United Kingdom, the European Economic Area, or any other jurisdiction.