Privacy Policy

Introduction

This privacy policy explains how echo-tower collects, uses, stores, and protects personal information you provide when using our website or engaging our services. We take your privacy seriously and are committed to protecting your personal data in accordance with UK data protection legislation.

Information We Collect

We collect and process several types of information depending on how you interact with us:

Information You Provide Directly

When you contact us about our services, we collect the information you choose to share, which typically includes your name, email address, postal address, and details about your project requirements. If you arrange a site visit, we'll record your property address and any relevant site details you provide.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information including your IP address, browser type, operating system, pages visited, and time spent on the site. This information helps us understand how people use our website and identify technical issues.

Cookies

Our website uses cookies to improve functionality and analyse site usage. You can find detailed information about our cookie practices in our separate Cookies Policy.

How We Use Your Information

We use the personal information we collect for specific purposes related to providing our services and running our business:

Service Delivery

We use your contact details and project information to respond to enquiries, arrange site visits, prepare proposals, deliver services you've commissioned, and communicate about ongoing projects. This is essential to fulfilling our contractual obligations to you.

Business Operations

Your information helps us maintain accurate records of client projects, manage scheduling and resource allocation, process payments, and handle any warranty or maintenance matters that arise.

Website Improvement

We analyse website usage data to understand which content is most useful, identify technical problems, and improve site navigation and functionality. This analysis uses aggregated data that doesn't identify individuals.

Legal Compliance

We retain certain information to comply with legal obligations around business records, tax documentation, and professional liability requirements.

Legal Basis for Processing

Under UK data protection law, we must have a valid legal basis for processing your personal data. We rely on several grounds depending on the situation:

Most of our data processing is necessary for the performance of a contract with you. When you engage our services, we need to process your information to deliver what you've commissioned.

Some processing is necessary for our legitimate business interests, such as maintaining project records, managing our schedule, and improving our services. We balance these interests against your privacy rights and only process data where the benefits aren't overridden by potential impacts on you.

Where we're required to retain information by law, such as financial records for tax purposes, compliance with legal obligations is our basis for processing.

In some cases, we may ask for your explicit consent to process information, particularly for marketing communications. You can withdraw this consent at any time.

How We Share Your Information

We don't sell or rent personal information to third parties. We only share your data in specific circumstances necessary for our business operations:

Service Providers

We work with trusted suppliers who help us run our business, such as accounting software providers, email hosting services, and website hosting companies. These providers process data on our behalf under strict contractual terms that protect your information.

Specialist Contractors

For certain projects, we may engage specialist contractors such as arborists or ecologists. Where necessary, we share relevant project information with these professionals, but only what's needed for them to complete their work.

Legal Requirements

We may disclose information if required by law, court order, or regulatory authority, or if necessary to protect our legal rights or the safety of others.

Data Security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.

Our security measures include encrypted data transmission, secure password-protected systems, restricted access to personal data on a need-to-know basis, and regular security assessments of our systems and procedures.

While we take reasonable steps to protect your information, no internet transmission is completely secure. We cannot guarantee absolute security but we're committed to maintaining robust protections.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

For active clients, we keep contact and project information for the duration of our working relationship and for a reasonable period afterwards to handle any queries or warranty matters.

For enquiries that don't result in commissioned work, we typically delete information after two years unless you've asked us to keep you informed about our services.

Financial records are retained for at least six years in accordance with UK tax regulations.

When we no longer need information, we securely delete or anonymise it so it can't be linked back to you.

Your Rights

Under UK data protection legislation, you have several rights regarding your personal information:

You can request access to the personal data we hold about you and receive a copy in a commonly used electronic format.

You can ask us to correct inaccurate or incomplete information we hold about you.

In certain circumstances, you can request deletion of your personal data, though this may not be possible if we have legal obligations to retain it.

You can object to processing based on legitimate interests and request that we restrict processing in specific situations.

Where we've asked for your consent to process data, you can withdraw that consent at any time.

To exercise any of these rights, contact us using the details in the Contact Us section below. We'll respond within one month of receiving your request.

Third-Party Websites

Our website may contain links to third-party websites for reference or information purposes. This privacy policy applies only to our website. When you follow links to other sites, you should review their privacy policies as we're not responsible for their data practices.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we'll update the date at the top of this page. For substantial changes affecting how we use your data, we'll notify you directly if we have your contact details.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Children's Privacy

Our services are not directed at children under sixteen, and we don't knowingly collect personal information from children. If we become aware that we've inadvertently collected data from a child, we'll delete it promptly.

International Data Transfers

We primarily operate within the UK and store data on servers located in the UK or European Economic Area. If we need to transfer data outside these regions, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection standards.

Contact Us

If you have questions about this privacy policy or how we handle your personal information, please contact us:

Email: [email protected]

Address: Meadow House, High Street, Chipping Norton, Oxfordshire, OX7 5AD

You also have the right to lodge a complaint with the Information Commissioner's Office if you're concerned about how we process your data. Visit echo-tower.com for more information.