Privacy Policy

This website and the goatelevate.com content-intelligence platform ("the Service") are provided by Dogma Group Limited, trading as goatelevate.com ("GOAT Elevate", "we", "us"). We are a company registered in England and Wales, company number 12096627, with our registered office at 483 Green Lanes, London, N13 4BS. For any privacy matter, contact enquiries@goatelevate.com.

1. Who we are

This website and the goatelevate.com content-intelligence platform ("the Service") are provided by Dogma Group Limited, trading as goatelevate.com. We are a company registered in England and Wales, company number 12096627, with our registered office at 483 Green Lanes, London, N13 4BS. For any privacy matter, contact enquiries@goatelevate.com.

2. When this policy applies

This Policy applies to personal data we handle as a controller: data collected through our website, contact and demo enquiries, our newsletter, customer and agency account administration, and our own sales and marketing. It does not govern personal data we process on a customer's behalf when they use the Service to connect, optimise and publish their content; that processing is governed by our Data Processing Agreement (see section 3).

3. Our role: controller vs processor

Controller. For the website, account and marketing data described in this Policy, we decide why and how the data is used, so we are the data controller.

Processor. When the Service ingests, analyses, optimises and publishes content that a customer connects or uploads, we act only on that customer's instructions. The customer (or, for an agency, its own client) is the controller and we are the processor or sub-processor. That relationship is set out in our Data Processing Agreement.

4. Personal data we collect

• Contact and demo enquiries: name, work email, company, job role, and anything you include in your message.
• Newsletter subscribers: email address and subscription preferences.
• Website usage data: IP address, device and browser type, pages viewed, and referral source.
• Customer and agency account data: contact and billing details of named administrators and authorised users of paying customers and agency partners.

5. How we collect personal data

We collect personal data directly from you when you complete a form, book a demo, subscribe, or open an account; automatically through cookies and analytics when you use the website (see section 7); and occasionally from third parties, such as a referring agency or partner, or publicly available business contact information.

6. Why we use personal data and our lawful bases

We do not sell personal data, and we do not use the website or marketing data described in this Policy to make automated decisions that produce legal effects.

7. Cookies and analytics

We use cookies and similar technologies for security, to remember preferences, and to understand how the website is used. You can accept or reject non-essential cookies via our consent banner and change your choice at any time. Full details, including the categories and individual cookies, are in our separate Cookie Policy.

8. Marketing communications

We send the newsletter and product updates only with your consent, obtained on a double opt-in basis. Every message includes a one-click unsubscribe, and you can withdraw consent at any time by unsubscribing or emailing enquiries@goatelevate.com. Withdrawing consent does not affect the lawfulness of earlier processing.

9. How we share personal data

We share personal data only with service providers acting on our instructions, and where required by law or to protect our rights. We may also share data in connection with a business sale or reorganisation. All providers are bound by contract to protect the data and use it only for the purposes we specify.

10. Sub-processors and service providers

To run the website and administer accounts we rely on a small number of providers, including Microsoft (hosting), and our website host, analytics provider, newsletter platform, and demo-booking / CRM tool. Providers used to deliver the Service itself, including AI sub-processors, are listed in the Data Processing Agreement. A full, current list is maintained in our separate Sub-processor List, available on request.

11. International transfers

Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as adequacy decisions, the UK International Data Transfer Agreement or UK Addendum, and the EU Standard Contractual Clauses. Where required, we assess transfer risks and apply supplementary technical and organisational safeguards. Copies of relevant safeguards are available on request, subject to confidentiality and commercial restrictions.

12. How long we keep personal data

We keep enquiry data for up to 24 months after last contact, newsletter data until you unsubscribe, and customer account and billing records for the period required by law (typically 6 to 7 years). Website analytics data is retained for 14 months. We delete or anonymise personal data when it is no longer needed.

13. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest, multi-factor authentication, role-based access control, managed devices, and continuous threat monitoring. A fuller description is available in our separate Security Overview and in Schedule 3 of the Data Processing Agreement.

14. AI features and customer content

Does the product use AI? Yes. The Service uses artificial intelligence to analyse a customer's content, optimise it for answer engines (AEO and GEO), and monitor how AI engines such as ChatGPT, Claude, Perplexity, Gemini and Google AI Overviews describe and cite brands.

Whose data is processed, and in what role? Content that a customer connects or uploads, and any personal data within it, is processed on that customer's behalf as a processor, under the Data Processing Agreement, not under this Policy.

Is customer content used to train AI models? No. We do not use customer content to train AI models, and our AI sub-processors are engaged under terms that prohibit training on customer inputs and outputs.

Is content kept separate between customers? Yes. Each customer's workspace is logically isolated, and agency clients are separated within the white-label portal so one client cannot see another's data.

What is published? The Service publishes only content a customer has approved through the human-in-the-loop Review stage, to a curated user-facing site and a structured knowledge layer. Published content is, by design, publicly accessible. Source records in connected systems (for example CRM, billing or inventory) are used only to populate approved content and are not themselves published.

Who are the AI sub-processors? Our current AI sub-processors are listed in the Data Processing Agreement and Sub-processor List, with their locations and the safeguards in section 11.

AI-generated and AI-optimised outputs may be incomplete or inaccurate and should be independently verified before publication; the Review stage exists for this purpose. This processing is carried out on the customer's behalf and is governed by our Data Processing Agreement.

15. Your privacy rights

Under UK and EU GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. To exercise any right, email enquiries@goatelevate.com. Where the data relates to content processed on a customer's behalf, that customer is the controller and we will direct or assist your request accordingly.

16. Complaints and supervisory authorities

If you have a concern, please contact us first at enquiries@goatelevate.com so we can try to resolve it. You also have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU/EEA, you may contact your local data protection authority.

17. Children

The Service and website are intended for business users and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

18. Changes to this policy

We may update this Policy from time to time and will post the revised version here with a new "Last updated" date. Material changes will be notified where appropriate.

19. Contact us

Dogma Group Limited (trading as goatelevate.com), 483 Green Lanes, London, N13 4BS. Privacy enquiries: enquiries@goatelevate.com