Privacy policy | Elad Attia Translation Services

Last updated: 30 October 2026

This policy explains what personal data we collect when you use eatranslations.co.uk or order a translation, why we need it, who we share it with, how long we keep it and what your rights are.

In short

We use your data only to translate and certify your documents, deliver them and keep the records the law requires.
Your documents may contain sensitive information. We only use it with your explicit consent and only for your translation.
Uploaded documents are deleted automatically 30 days after your order is completed, or when a quote request or a quote expires.
No analytics, no advertising, no tracking. We never sell your data or use it for marketing.

1. Who is responsible for your data

The controller of your personal data is Elad Attia, trading as Elad Attia Translation Services, Belfast, Northern Ireland. ICO registration number: 00016132422.

For any question about your data, contact Elad by email at contact@eatranslations.co.uk or by WhatsApp at +44 7404 142224. We have not appointed a Data Protection Officer because the law does not require one for a business of our size.

2. What we collect

When you send the order form

First and last name
Email address
Phone or WhatsApp number, if you give it
Postal address, only if you choose delivery by post
The documents you upload
Names as they appear in the passport
Your notes, the purpose of the translation (for example Home Office, university, court or use in Israel) and your deadline, if you give one
The language you ordered in (English or Hebrew)
A one-time code we email you to confirm your email address. We keep only a scrambled (hashed) form of it, for up to 15 minutes.

Automatically, with your order

Your IP address, used only in scrambled (hashed) form for a temporary counter that stops the order form being flooded. It is not stored with your order and the counter expires within 24 hours.

When you pay

A record of the order and payment: amount, date, what you ordered and the payment reference. Your card details are collected by Stripe and never reach us or our website.

When you contact us

Your emails or WhatsApp messages and anything you attach to them

3. Sensitive information in your documents

Some documents contain information that the law treats as especially sensitive:

Special category data, for example health information in medical documents
Criminal offence data, for example in police certificates or court documents

We use this information only to translate and certify your documents, and only with your explicit consent, which you give by ticking a separate box in the order form. You can withdraw your consent at any time by contacting us. If you withdraw it before we deliver, we will stop work and delete the documents, and the order cannot go ahead. Any refund is worked out as explained in section 10 of our Terms. Withdrawing consent does not affect what we did before you withdrew it.

4. Information about other people

Your documents may include information about other people, for example family members on a marriage certificate or a child on a birth certificate. We use it only to translate the document and keep it only as long as we keep your documents. When you send a document about someone else, please make sure you are entitled to share it for this purpose, for example because you are their parent or have their permission.

Our service is not aimed at children. If a translation is for a child, a parent or guardian should place the order.

5. Why we use your data and our legal basis

To prepare and send you a quote, take your order and payment, check the page count, prepare the translation for you to check, deliver the final translation, make corrections, handle any difference in price or refund, and deal with questions or complaints. Legal basis: taking steps at your request before a contract, and performing the contract with you.
To use sensitive information in your documents (see section 3). Legal basis: your explicit consent (UK GDPR Article 9(2)(a) and, for criminal offence data, the Data Protection Act 2018, Schedule 1, paragraph 29).
To use information about other people in your documents (see section 4). Legal basis: our legitimate interest, and yours, in providing the translation you asked for.
To keep accounting and tax records. Legal basis: legal obligation.
To limit how often the order form can be sent from one connection, so it cannot be flooded. Legal basis: our legitimate interest in protecting our service and our customers.
To keep a record of what you asked for and agreed, including your request for us to start straight away, in case of a dispute. Legal basis: our legitimate interest in being able to establish or defend legal claims.

You do not have to give us your data, but we need your name, email address and documents to provide the service, and your postal address if you want delivery by post. Without them we cannot take your order.

We do not make decisions about you by automated means, and we do not create profiles.

6. Who we share your data with

We only share your data with the service providers we need to run the business:

Hostinger (Hostinger International Ltd) hosts our website, the order form and your uploaded documents. The server is in Mumbai, India, and pages are delivered through Hostinger’s content delivery network.
Stripe (Stripe Payments Europe, Limited and Stripe, Inc. in the United States) processes card payments. Stripe also uses payment data to prevent fraud, as explained in Stripe’s privacy policy.
Hostinger also provides our email (contact@eatranslations.co.uk). Emails you send us, and the translations we send you (to check and final), pass through and are stored in this mailbox.
WhatsApp (Meta), only if you choose to contact us or send documents that way. Messages are end-to-end encrypted, but WhatsApp’s own terms and privacy policy apply.
A website technician who maintains the website on our instructions and is bound by confidentiality may have technical access to the server.

We may also share data with HMRC or other authorities, or with professional advisers, when the law requires it or to establish or defend a legal claim. We never sell your data.

7. Transfers outside the UK

Some of our providers store or access data outside the UK: the website server is in India, and Stripe and Meta may process data in the United States. When this happens, we rely on safeguards the law recognises, such as the UK International Data Transfer Agreement or Addendum in our providers’ data processing terms, or, for US companies certified under it, the UK Extension to the EU-US Data Privacy Framework. You can ask us for more information about these safeguards.

8. How long we keep your data

Uploaded documents: deleted automatically 30 days after your order is completed. If your order is refunded, the same applies. Elad may delete them from the server sooner, once he has downloaded them for your translation.
Quote requests: if no quote is sent within 14 days of your request, or a quote is not paid within 7 days of being sent, the request is cancelled and the documents are deleted automatically. Documents of other cancelled or failed orders are deleted automatically after 6 hours.
Open orders: if an order is still open after 90 days, we review it. Unless you tell us you still want to go ahead, we cancel it and its documents are deleted 6 hours later.
Requests and orders that were never paid: the record (your name, contact details and what you asked for) is deleted 30 days after the request or order is cancelled.
Order and payment records (name, contact details, what you ordered, price, payment, and when you gave each consent): 6 years, because HMRC requires us to keep business records.
Emails and WhatsApp messages: we delete attachments (your documents and the translations, to check and final) within 30 days after your order is completed. We keep the messages themselves, which show what you asked for and confirmed, for up to 6 years, together with the order record.

9. How we protect your data

The website uses an encrypted connection. Only Elad, and the website technician when technically necessary, can access your documents. Payments are handled entirely by Stripe. We keep the data we hold to what we need, and delete it on the schedule above.

10. Your rights

You have the right to:

ask for a copy of your personal data
ask us to correct data that is wrong or incomplete
ask us to delete your data
ask us to limit how we use your data
object to our use of your data where we rely on legitimate interests
ask for the data you gave us in a format you can take elsewhere
withdraw your consent at any time, where we rely on it

Some rights have limits. For example, we must keep payment records for 6 years even if you ask us to delete them. To use any of these rights, contact us. We will reply within one month. You do not have to pay.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first. We will acknowledge your complaint within 30 days, and we aim to do it within 5 working days. We will then look into it and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.

12. Cookies

We do not use cookies on our public pages. Our Cookie Policy lists the few cookies and browser storage items the site uses and why.

13. Changes to this policy

We will update this policy when how we use your data changes. The date at the top shows when it was last updated. If a change affects an order in progress, we will tell you.