Privacy Policy.

Last updated: January 2026

1. Who we are

Elevate MedTech Limited (we, us, our) operates elevate-med.tech and offers regulatory services to medical device and SaMD companies. Our contact details are on the Imprint page.

2. What we collect

Depending on how you interact with us, we may collect:

• Contact details: name, email, phone number, company.
• Project information: details about your product, target markets and regulatory questions you share with us.
• Technical information: IP address, browser, device, pages visited. Collected through cookies and analytics where you have consented.
• Newsletter preferences: the categories you opt into and your subscription status.

3. Why we collect it

We process personal information to:

• Respond to your enquiries and provide the services you ask for.
• Send you regulatory updates, event invitations or press releases where you have opted in.
• Run our business: invoicing, project management, internal records.
• Improve the website and our service offering through aggregated analytics.
• Meet legal, tax and professional obligations.

4. Legal basis

Where the GDPR applies, our legal bases are: your consent (newsletters, optional cookies), performance of a contract (services), and our legitimate interest in running our business. For visitors outside the EU, we apply the relevant local privacy law and the principles in this policy.

5. Sharing your information

We do not sell your data. We share it only with:

• Trusted service providers (hosting, email, CRM, accounting) under written confidentiality terms.
• Authorities or professional advisors where required by law.
• With your explicit instruction, for example when we coordinate with a partner regulatory authority on your behalf.

6. International transfers

Some of our providers operate outside New Zealand and the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. How long we keep it

We keep personal information only as long as we need it for the purposes above, or as required by law. Enquiries that do not result in an engagement are typically deleted within 24 months. Client records are kept as required by professional and tax law.

8. Your rights

You can ask us to: access the personal data we hold about you; correct or delete it; restrict or object to processing; receive a copy in a portable format; or withdraw consent at any time. To exercise these rights, write to info@elevate-med.tech.

9. Cookies

This site uses essential cookies for functionality and, with your consent, analytics cookies to help us understand which pages are useful. You can change your preferences at any time through the cookie banner.

10. Changes

We may update this policy from time to time. The current version is always the one on this page, with the date noted at the top.