Lotivra privacy

Effective 18 October 2026. Controller: Yolleg Ltd. Contact [email protected].

Data and purpose

We store the business, lot, operational audit and appliance records you choose to enter, dates, notes and evidence references to provide your workspace. Do not enter unnecessary personal information, health details, identity-document images, card numbers or secret share codes. Elmbra stores non-identifying operational evidence references, not resident or clinical records. You remain responsible for the lawful handling of your staff or customers’ information. Workspace access uses a random bearer key retained in this browser; its recovery file grants access to the same records on another device. We store a keyed identifier and encrypt record payloads at rest. Our server can decrypt them to provide the service, so this is not end-to-end encryption.

Billing and communications

Stripe processes card payments and receives checkout, subscription and payment details. We retain scoped purchase references, plan, contract consent/time and your payment email to confirm contracts and administer subscriptions/refunds. SendGrid delivers transactional purchase confirmations and cancellation/withdrawal acknowledgments. No automatic record-reminder or marketing emails are enabled. Optional ad measurement is described below. Do not send sensitive record contents to support unless needed.

Technical data and providers

Essential session cookies protect requests; local browser storage holds workspace and purchase recovery information. Server logs may record IP addresses, request times, URLs and errors. Workspace keys travel in HTTPS request bodies, not URLs; do not put them in links. We use the existing hosting provider, Stripe and SendGrid as service providers. Some processing can occur outside the UK/EEA subject to provider safeguards. We do not sell workspace data.

Basis and retention

We process data to deliver the requested service/contract, meet legal obligations and protect service security under legitimate interests. The business using the workspace determines its own basis for staff/customer data. Live workspace records remain until you erase them; cancelling does not erase them. Erasure removes the live encrypted payload; a revision tombstone may remain to prevent stale clients recreating records. Hosting-provider backups, where maintained, follow the provider’s operational backup schedule. Contact us for deletion enquiries. Billing, consent, tax and complaint records may be retained for six years where needed for accounting/legal purposes. Technical abuse counters are periodically cleared. Keep your own record exports.

Choices and rights

Use Export records JSON for a portable copy, or Erase records for live record deletion. Contact [email protected] for access, correction, deletion, restriction, objection or other applicable rights, providing a purchase reference if relevant; never email your recovery file or card number. You may complain to the UK Information Commissioner or your local authority. We cannot locate a workspace from a lost secret key alone. No automated legal, employment or credit decisions are made.

Cancellation and refund request form