Privacy policy

This explains what we hold about you, why, who else sees it and how long we keep it. We have tried to write it so that reading it is worth your time. If anything here is unclear, ask us and we will explain it properly.

Who we are

PM Elevation Ltd is the data controller for the information described here. We are a company registered in Scotland, number SC881958, at:

For anything about your information, including the rights set out below, email support@pmelevation.co.uk.

What we hold, and why

If you contact us or join a waiting list

Your name, email address, the organisation you mention and whatever you write in the message. We use it to reply to you and to keep your place on a waiting list. Our basis is our legitimate interest in answering a question you asked us.

If you become a member

Your name, email address, job title, organisation and years of experience; your ChPP application and every saved version of it, including the projects and competency evidence you write; your coach’s feedback on it; which guidance you have completed and how far through the journey you are; your coaching sessions and bookings; and your payment history. We hold this to provide what you have paid for, so our basis is our contract with you.

We also record when you were in the Academy, by half-hour slot and by area of the portal. That is so a coach can tell somebody who has stopped coming from somebody who comes often and finishes nothing, because those two people need different help. It is not a record of what you clicked, and we keep it for twelve months. If your employer paid for your place, we tell them how much time you have spent in the Academy as a monthly total: a number of hours, not a record of when you were there.

Your referees

Your ChPP application asks for two referees, and we hold nothing about them. We used to: there were fields in the Academy for each referee’s name, relationship to you, telephone number and email. We have removed them and deleted what had been entered, including in saved earlier versions of applications. You give those details to APM on APM’s own form instead, which is where they were always going. The Academy gives you guidance on who to choose and asks you to confirm that you have two referees lined up and have asked them, and that confirmation is the only thing we keep.

If your employer paid for your place

Your application and your drafts are yours, and your employer cannot see them. We do tell the organisation that sponsored you four things: whether you attended and completed the programme, how much time you have spent in the Academy each month, how far you have progressed, and the outcome of your APM assessment. The time figure is a monthly total and nothing finer: they do not see which days or hours you worked. We will tell you this when you enrol as well as here, because the last of those matters and you should not find it out from a policy page.

Who else sees it

We do not sell your information, and we do not share it for anyone else’s marketing. These companies process it on our behalf, under contract, and only to do the job named:

Everything that identifies you is held in the UK or the European Economic Area. Our database is in Ireland and our servers are in Germany. What leaves that area is limited and specific: your email address goes to Stripe when you pay, the text of the emails we send you goes to Resend, and your IP address reaches Mux when you watch a video and Cloudflare when you submit a form. Your drafts, your evidence and your coach’s feedback never leave. Where information does leave, it is covered by the standard contractual protections those companies publish.

We do not use any artificial intelligence service to read, score or review your application. If that ever changes we will update this policy and tell you before it does, not afterwards.

We will also disclose information if the law requires it, which in practice means a court order or a regulator. We have never had such a request.

How long we keep it

When you delete your account we remove it and everything in it, and that cannot be undone. Two things survive, and only these: the record of your payment, which tax law requires us to keep for six years, and a note that your account was deleted and when. That note is how we make sure that restoring a backup cannot quietly bring you back after you asked to go. Your information may also remain in a backup for a few days afterwards.

Your rights

You can ask us for a copy of what we hold, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Two of those do not need us at all:

• A copy of your data. Sign in and use “Download my data” on your account page. It is immediate.
• Deleting your account. Ask from the same page. It reaches us straight away and we action it within one month. You can change your mind until we do.

For anything else, email support@pmelevation.co.uk. We answer within one month. There is no charge. If you want the full picture including any internal notes we have written about you, ask for a subject access request and say so, and that is what you will get.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk, or call them on 0303 123 1113. We would rather you told us first so we can put it right, but you do not have to.

Cookies

We use no analytics, no advertising and no tracking cookies, so there is no consent banner on this site and nothing to opt out of. The Academy stores a sign-in token in your browser so that you stay signed in, and Cloudflare sets a short-lived check when you submit a form, to tell a person from a bot. Both are necessary for the thing you asked for. If we ever add analytics we will ask you first.

Keeping it safe

Your application and your files are private to you, your coach and our administrators. Course files are never public: each one is released through a short-lived link after we have checked you are entitled to it. Our error monitoring is configured to record no names, no email addresses and no IP addresses, only an account reference, so that a technical fault never becomes a leak. Card details never reach us at all, because payment happens on Stripe’s own pages.

Changes to this policy

If we change what we do with your information we will update this page and change the date at the top. Where a change matters we will email members rather than rely on you noticing.