What happens to the details you send us.

This notice explains what EliteWorks does with your personal data when you use eliteworks.ai or write to us, and in any emails that follow. We have kept it as plain as the law allows. If anything is unclear, write to us and we will explain.

In short

• We collect what you send us through the contact form, when you ask us to email a tool result, or by email, plus a few technical details we need to run the site and block spam.
• We keep our own record of how the site is used: the pages people visit, where their visits came from, and how far they get in our tools and the enquiry form. It uses a random identifier kept in your browser and runs on our own systems. We use no third-party analytics and no advertising trackers.
• If you type a valid email address into the enquiry form, we save what you have entered so far, even if you don't press Send, so we can follow up about your enquiry. The form tells you this under the email field.
• We don't sell your information, share it for advertising or pass it to data brokers. EliteWorks sets no cookies.
• If your browser sends a Global Privacy Control signal, or you choose anonymous visits in Privacy choices, we record your visits without an identifier and save nothing from the enquiry form until you press Send.
• The AI Readiness Assessment and the Automation Payback Calculator work out your result in your browser. We record your progress and the broad result, never your individual answers or figures, unless you ask us to email the result or attach it to a message.
• You can ask to see, correct or delete what we hold, object to how we use it, or withdraw your consent, by writing to support@eliteworks.ai with the subject "Privacy request". We reply within 30 days.

Who is responsible for your data

EliteWorks is a consulting firm in Bengaluru, India, run by its two founders, Rahul Nath and Arjun Murthy. The founders decide how and why personal data sent to EliteWorks is used, and they are responsible for it. When EliteWorks is incorporated, we will update this notice with the company's name.

Under India's Digital Personal Data Protection Act, 2023, we are the data fiduciary. Under the EU and UK General Data Protection Regulation (GDPR), we are the controller.

Privacy questions and complaints. Rahul Nath, Co-founder and CEO, handles privacy requests and grievances. Write to support@eliteworks.ai with the subject "Privacy request". Both founders read that mailbox.

What we collect

When you use the contact form

What you type. The topic you pick, your message, when you need to act, your name, work email, organisation and country. If you choose to add them: your role, the size of your organisation, a phone or WhatsApp number, how you heard about us, and whether you would like a mutual non-disclosure agreement.

A tool result, only if you attach it. If you press "Discuss your result with a founder" on one of our tools and then tick the box to include it, we receive the summary shown to you on the form before you send it. Nothing else from the tool is sent.

Your consent record. Which version of the notice was shown above the consent box, and when you gave consent.

Details collected automatically with the form. Your IP address; the result of a Cloudflare Turnstile check, which looks at signals such as your IP address, browser type and connection details to tell people apart from automated software; your browser's time zone, so we can show our reply time in your local time; the page you came from, the page you first landed on and the site that referred you; any campaign tags in the link you followed; and how long the form took to fill in, which helps us filter out automated submissions.

Your visit history. Unless your visits are anonymous (see "When you browse the site" below), we link your enquiry to our record of your visits to this site, so we can see which pages and tools led you to write to us.

When you start the enquiry form but don't send it

Once you have typed an email address in a valid format into the enquiry form, and the note under the email field says we may follow up, the form sends us what you have entered so far and updates it as you continue. This can include your name, work email, organisation, role, organisation size, country, phone or WhatsApp number, how you heard about us, the topic, when you need to act, your message, which founders you chose to write to, whether you asked for a non-disclosure agreement and whether you chose to attach a tool result. We also note how far through the form you got, and link these details to your visit history.

We use these details only to follow up with you about that enquiry, for example to ask whether you still need help or whether something stopped you sending it. If you then send the form, the details become part of your enquiry and the separate copy is cleared.

We never save passwords or payment details (the site asks for neither), the spam check, your consent tick or the text of an attached tool result. Nothing is saved before a valid email address is entered or after you have sent the form. Nothing is saved at all when your browser sends Global Privacy Control, when you have chosen anonymous visits, or when you visit from the European Union, the European Economic Area or Switzerland. When saving is switched off in your browser, the note under the email field reads "Nothing is saved until you press Send."

When you ask us to email a tool result

Below each tool result you can ask us to email the result to you. To do that you enter an email address and tick "Email this result to me". We receive your email address, which tool you used, a code that records your answers or figures so our server can rebuild the result, whether you ticked the second box, and when and under which wording you gave consent. Unless your visits are anonymous, we link the request to your visit history.

We send the result once, to that address. The second box, "EliteWorks may contact me about this result", is separate and starts unticked. If you don't tick it, we won't follow up unless you reply.

When you email us directly

Your email address, name, message and any attachments, plus the ordinary details that come with any email, such as when it was sent.

When you apply to join our network

Whatever you choose to send in your application, such as your name, contact details, speciality, city, experience and links to your work.

When you browse the site

Cloudflare, which delivers and protects the site, handles standard connection data such as your IP address, browser details and the pages you request, so it can serve the pages and block attacks.

Our own site analytics. A small script served from eliteworks.ai sends a record of your visit to our own server. No third-party analytics, advertising or social media scripts are involved. We record:

• the pages you view, how far down you scroll, roughly how long you actively spend on them, and which buttons and outside links you click (for email and phone links, only that you clicked one, not the address or number);
• where your visit came from: the referring website, any campaign tags in the link you followed and the page you landed on;
• your use of the AI Readiness Assessment and the Automation Payback Calculator: when you start, how far you get, when you finish, and the broad result, such as the readiness stage or the payback period band, but not your individual answers or figures;
• your use of the enquiry form: when it is shown, which fields have something in them (not what you typed), how complete it is, and whether it was sent or left unfinished;
• device details: the type of device, the browser and operating system family, the window size, your language setting and time zone, and signals that suggest automated software, so we can leave bots out;
• your country, as reported by Cloudflare, and the network your connection comes from, such as your internet provider or, for organisations that run their own network, the organisation's name. We find the network in a public table of IP address ranges kept on our own server, so your address is never sent to anyone for the lookup;
• a shortened IP address, with the last part removed (the last of the four numbers of an IPv4 address, or everything after the first 48 bits of an IPv6 address), and a scrambled form of your full address made with a secret key that we destroy after 48 hours, after which it can't be matched to any address. We never store your full IP address in these records.

The visitor identifier. Unless your visits are anonymous, the script creates a random identifier and keeps it in your browser's local storage. It is not built from anything about your device, and we don't use fingerprinting. It lets us recognise return visits from the same browser and connect a visit's source to what happened next. On its own it doesn't tell us who you are. It becomes linked to you if you send the enquiry form, type your email address into it, or ask us to email a tool result.

Anonymous visits. Your visits are anonymous when your browser sends a Global Privacy Control signal, when you choose anonymous visits in Privacy choices, when your browser blocks site storage, or when you visit from the European Union, the European Economic Area or Switzerland. We still record page views, clicks and progress through the tools and the enquiry form, but with no visitor identifier, no history of earlier visits, no stored traffic source, no network organisation name, no shortened IP address and no saving of the enquiry form before you press Send. We keep your country, the kind of network you are on (for example, a mobile carrier or a hosting provider, which helps us spot automated traffic) and the scrambled address with its 48-hour key. A session identifier is kept in session storage, which your browser deletes when you close the tab.

If JavaScript is switched off, or a content blocker stops our script, no visit record is sent.

How we use the visit record. We use it to understand which pages, articles and outside posts bring people to us, to improve the site and our tools, to leave automated traffic out of our figures, and to decide whom to follow up with. The founders see it in a daily summary sent to the company's own mailboxes and on a password-protected page on our own server. The summary lists people who have given us their contact details on this site, with the pages and tools they used, and the organisations whose own networks visited. A founder decides whether to get in touch. Nothing is decided automatically.

What we do not collect

We can't find out who an anonymous visitor is, and we don't try. We use no identity lookup, data enrichment or data broker service.

We don't ask for sensitive personal data such as health, bank account, identity document or biometric details, and we ask you not to send it. Please keep confidential business information out of a first message. If you would like a mutual non-disclosure agreement before sharing details, tick the box on the form or ask in your email.

Why we use it, and on what basis

Purpose	What we use	Basis in India (DPDP Act)	Basis in the EU and UK (GDPR)
Reply to your enquiry and arrange a conversation you ask for	Form or email content, contact details	Your consent, given on the form. For email you send us directly, the use for which you voluntarily provided it	Steps you ask us to take before any contract, and your consent
Prepare for that conversation	Form or email content, organisation, role, linked visit history	Your consent	Steps you ask us to take before any contract
Keep a record of what we have said to each other	Form or email content, consent record, dates	Your consent, and our legal obligations where they apply	Our legitimate interest in keeping an accurate record, and legal obligations where they apply
Block spam and protect the form	IP address, Turnstile result, time taken, form metadata	Reasonable security safeguards the Act requires of us	Our legitimate interest in keeping the service secure
Show our reply time in your time zone	Browser time zone	Your consent	Steps you ask us to take before any contract
Consider a network application	Application content	Your consent, or the use for which you voluntarily provided it	Steps you ask us to take before any contract, and your consent
Understand how people find us	How you heard about us, landing page, referring site, campaign tags	Your consent	Our legitimate interest in knowing which of our pages and activities are useful
Understand how the site is used, where visits come from and which pages and tools interest visitors, and leave automated traffic out	Visit record, visitor identifier, device details, country, network, shortened and scrambled IP address	A record that is not linked to you doesn't identify you. Once it is linked to details you give us, the basis for those details applies, as in the rows above and below	UK: our legitimate interest in understanding how our site is used and who is interested in our services. You can object at any time in Privacy choices. EU and EEA: only anonymous visits are recorded, under the same legitimate interest
Follow up about an enquiry you started but did not send	Details typed into the enquiry form, how far you got, linked visit history	The use for which you voluntarily provided your details, which the note under the email field states before anything is saved	UK: our legitimate interest in replying to people who have started to ask for our help. You can object at any time. EU and EEA: not collected
Email you a tool result you asked for, and follow up about it if you ticked that box	Email address, result code, consent record, linked visit history	Your consent	Your consent

We don't make decisions about you by automated means that have legal or similarly significant effects. We do keep the visit record described above, which shows the pages and tools a browser has used over time and helps us judge whether someone may want to hear from us. A founder reads it and decides whether to contact you, and you can object to this at any time.

You can withdraw your consent, or object to our use of your data, at any time by writing to support@eliteworks.ai with the subject "Privacy request". Withdrawing is as easy as giving consent, and it doesn't affect anything we did with your data before you withdrew. Once you withdraw, we stop using your data for the purposes that relied on consent, and we delete it unless the law requires us to keep it. You can also switch to anonymous visits at any time in Privacy choices, and you can ask us to stop following up by replying to any email from us.

Who receives it

Your enquiry, unsent form details, results-by-email requests and visit records are read by the two founders, Rahul Nath and Arjun Murthy. A small number of service providers run the site and our email for us, and they handle personal data only on our instructions.

Provider	What they do for us	Where
Cloudflare	Delivers and protects the website, runs the Turnstile spam check on the contact page, tells our server which country a visit comes from, and routes form submissions and visit records securely to our server	Cloudflare's global network
Hostinger	Hosts our business email mailboxes, including support@eliteworks.ai, and carries the results emails you ask for and the daily summary the founders receive	Hostinger's data centres (location being confirmed)
Our own server	Receives form submissions, unsent form details, results-by-email requests and visit records, stores them, and sends the confirmation and results emails, using software we run ourselves	Bengaluru, India

The service we use to check that the site and form are up receives no personal data. The public table of network address ranges we use for the network lookup is downloaded to our server, and no visitor data goes to its publisher.

We don't share your enquiry with anyone outside EliteWorks without telling you first. If you later hire us, everyone who works on your project is bound by confidentiality.

We may disclose personal data where the law requires it, to a court, regulator or law enforcement authority, or to our professional advisers, who owe us a duty of confidentiality.

We don't sell personal data, we don't share it for advertising, and we don't pass it to data brokers.

Where it is processed

EliteWorks is based in India, and your data is processed in India. Our service providers may also process it in the places shown above.

If you are in the EU or UK and send us your details directly, you are giving them to us in India. Where we pass personal data from the EU or UK to a service provider outside India, we use the transfer safeguard the law requires, and we will name it here once our legal review is complete.

How long we keep it

Data	How long
Enquiries, including form records, related emails and consent records	18 months after our last contact with you, unless we start working together, in which case the terms of that engagement apply
Network applications	12 months after we receive them
Submissions rejected as spam	Up to 30 days
Visit records: page views, clicks, tool and form progress, and visits	13 months after they are collected
The visitor identifier and the history linked to it on our server	13 months after your last visit. If it is linked to an enquiry we still hold, we keep only the first and most recent source of your visits, for as long as we keep that enquiry
Details typed into the enquiry form but not sent	12 months after you last typed in the form. If you send the enquiry, they become part of it and the enquiry period applies
Results by email: your email address, name if given, and result code	12 months after your request, unless you have since sent us an enquiry from that address, in which case the enquiry period applies
The secret key used to scramble IP addresses	48 hours
Daily totals, such as the number of visits, with no identifiers	Kept, as they contain no personal data
Connection data handled by Cloudflare	As set out in Cloudflare's own terms, for delivery and security only

After these periods we delete the data or make it anonymous. Deleted records also drop out of our encrypted backups as those backups are replaced on their normal cycle.

How we protect it

The site is only served over encrypted connections. Form submissions and visit records pass through a gate that accepts requests only from eliteworks.ai, limits how many it takes from each address and checks them before they reach our server. Visit records, unsent form details and results-by-email requests are kept in a separate database from enquiries, on the same server, and your full IP address is never written to it. Only the founders can access enquiry records, visit records and the mailboxes, and the page where they review visit records is password-protected. Backups are encrypted and kept under our control. No way of sending or storing data is completely secure. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires.

Your privacy choices

You decide how much of your visit history we keep, and you don't need to write to us to do it.

• Privacy choices. Use the "Privacy choices" link at the foot of every page to switch this browser to anonymous visits. We then stop using a visitor identifier, delete it and the stored traffic source from your browser, detach the visits already recorded under it on our server and delete its record there. From then on nothing you type into the enquiry form is saved until you press Send. You can turn visit history back on in the same place. The choice applies to the browser you make it in, and clearing that browser's site storage resets it. Details you already typed into the enquiry form stay with us for the period above; write to us if you want them deleted.
• Global Privacy Control. If your browser or an extension sends the Global Privacy Control signal, we treat every visit as anonymous automatically, on every page, and our server applies the signal too. We also treat it as a request to opt out of the sale or sharing of your personal information, though we don't sell or share it in the first place.
• Follow-up emails. If we contact you and you would rather we didn't, reply and say so, or write to support@eliteworks.ai, and we will stop.
• Deletion. Write to support@eliteworks.ai with the subject "Privacy request" and we will delete the unsent form details and results-by-email records we hold for your email address and remove the address from our visit records, unless the law requires us to keep something.

Your rights

To use any of the rights below, write to support@eliteworks.ai with the subject "Privacy request". Please write from the email address you used with us, so we can confirm the request is yours. We reply within 30 days, and there is no fee. If we can't do what you ask, we will explain why.

If you are in India

Under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, you have the right to:

• get a summary of the personal data we hold about you and how we use it, and who we have shared it with;
• have your personal data corrected, completed or updated;
• have your personal data erased, unless the law requires us to keep it;
• withdraw your consent;
• nominate someone to use your rights for you if you die or become unable to use them yourself; and
• have a grievance dealt with by us.

Please come to us first, by writing to Rahul Nath at the address above. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

If you are in the United Kingdom or the European Union

Under the UK GDPR and the EU GDPR, you have the right to access your personal data, to have it corrected, to have it erased, to restrict how we use it, to object to our use of it where we rely on legitimate interests, to receive it in a portable format, and to withdraw consent at any time. You can object at any time to our use of your data to follow up with you, including the use of your visit history for that purpose, and we will stop.

You also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner's Office. In the EU, it is the authority in the country where you live or work, or where you think the problem happened. We would like the chance to put things right first, but you don't have to come to us before complaining.

If you are in the United States

We include this section voluntarily. Given our size and what we do, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and similar state privacy laws do not currently apply to EliteWorks. We follow their main principles anyway.

We collect these categories of personal information, for the purposes and periods described above: identifiers, such as your name, email address, phone number, IP address, shortened IP address and the random visitor identifier; professional information, such as your organisation and role; internet or other electronic network activity information, such as the pages you view, the site that referred you, your progress through our tools and forms, and the Turnstile check; your country, which is not precise geolocation; and inferences, such as which of our services you seem interested in. We don't collect sensitive personal information.

We don't sell personal information, and we don't share it for cross-context behavioural advertising. We honour Global Privacy Control as described above. You can ask us to tell you what we hold, to correct it or to delete it. You can use an authorised agent, and we won't treat you any differently for making a request.

If you are in the United Arab Emirates

Under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to be told what personal data we hold and how we use it, and to ask us to correct, erase or restrict it, to object to how we use it, including for direct marketing and for decisions based only on automated processing, and to receive it in a portable format, as the law provides. Where we rely on your consent, you can withdraw it at any time.

Cookies and similar technologies

This section is our cookie statement.

EliteWorks sets no cookies. We run no third-party analytics, no advertising trackers and no social media embeds, and our fonts and media come from our own site. Our own site analytics uses your browser's local storage and session storage instead, as listed below.

Items kept in your browser. Local storage stays until you clear it. Session storage is deleted when you close the tab.

Name	Type	What it does	Sent to us	How long
ew-theme	Local storage	Remembers whether you picked the light theme, the dark theme or your system setting	No	Until you clear it
ew-vid	Local storage	Holds the random visitor identifier and the date it was created. Not created for anonymous visits	Yes, the identifier, with each visit record	Until you clear it or choose anonymous visits
ew-sess	Local storage, or session storage for anonymous visits	Holds the current visit: a random session identifier, when the visit started and was last active, how many visits this browser has made, and the campaign and referring site of this visit	Yes, the session identifier, and the visit count except for anonymous visits	Local storage: until you clear it or choose anonymous visits. Session storage: until you close the tab
ew-attr	Local storage	Remembers the first and most recent source of your visits: the referring site, campaign tags and landing page. Not created for anonymous visits	Yes, at the start of each visit	Until you clear it or choose anonymous visits
ew-privacy	Local storage	Remembers that you chose anonymous visits in Privacy choices	Your choice is sent once, when you make or change it, so our server can act on it	Until you turn visit history back on or clear it
ew-internal	Local storage	Set only in browsers used by EliteWorks and people testing the site for us, so their visits are left out of our figures	Yes, as a yes or no flag	Until it is cleared
ew-landing	Session storage	Remembers the first page you opened in this tab	Only with an enquiry form you send	Until you close the tab
ew-assessment-progress	Session storage	Keeps your place in the AI Readiness Assessment	No	Until you close the tab
ew-tool-summary	Session storage	Holds a tool result you chose to take to the contact form, so you can see it before you send it	Only if you attach it to an enquiry you send	Until you send the form or close the tab

To check that storage is available, the site also writes a test item called ew-t and removes it straight away.

Tool results are also kept in the web address of the result page, after the # sign. Browsers don't send that part to any server, and our site analytics removes it from every address it records. A result reaches us only if you ask us to email it or attach it to a message. Anyone you share the link with can see the result.

Security cookies set by Cloudflare. Cloudflare, which delivers and protects the site, may set strictly necessary security cookies to tell people apart from automated software. These include __cf_bm, set when bot protection is active, and cf_clearance, set when a visitor passes a security challenge. The Turnstile check on the contact page also relies on strictly necessary signals and cookies, used only to detect bots, never to identify or profile you. Cloudflare explains these in its own cookie and Turnstile privacy documents.

Why there is no cookie banner. The analytics items above are not strictly necessary, so we keep them to a minimum. We don't use them for visitors from the European Union, the European Economic Area or Switzerland, or when your browser sends Global Privacy Control, and everyone else can switch them off at any time in Privacy choices. If we add anything else that is not strictly necessary, we will update this notice before we do.

You can clear or block cookies and site storage in your browser settings. Blocking site storage makes your visits anonymous. Blocking Cloudflare's security cookies may stop the contact form from working. If that happens, you can always write to support@eliteworks.ai instead.

Children

This site is for business visitors. It is not aimed at anyone under 18, and we don't knowingly collect personal data from children. If you think a child has sent us personal data, write to us and we will delete it.

Changes to this notice

When we change how we handle personal data, we update this notice, change its version and effective date, and record the change below. If a change significantly affects data we already hold, we will tell the people affected before it takes effect.

Version history. privacy-v1-2026-09: first version. privacy-v2-2026-09: adds our own site analytics with a random visitor identifier, details typed into the enquiry form but not sent, results by email, Global Privacy Control and Privacy choices, new retention periods and the updated list of items kept in your browser.