How we handle personal data

1. Who we are

EcoChain Insights Ltd is the data controller for personal data processed through this website.

• Address: 85 Great Portland Street, London, W1W 7LT, United Kingdom
• Email: [email protected]
• Phone: +44 20 3807 3214

2. Personal data we collect

We only collect data that is necessary to operate the website, respond to enquiries, and deliver requested resources.

• Contact details you provide: name, email address, phone number, organisation (optional), and message content.
• Preference data: cookie choice (accept/reject) stored in your browser via local storage.
• Basic technical data: standard web logs (for example, IP address and user agent) that may be processed by our hosting provider for security and service delivery.

3. How we use your data

We use personal data for the following purposes:

• To respond to enquiries and communicate about requested services.
• To deliver requested resources (for example, a checklist pack).
• To maintain website functionality and protect against abuse (security and fraud prevention).

4. Legal bases for processing

Under UK GDPR, we rely on the following legal bases:

• Consent for optional cookies and for contacting you based on your form submission consent tick.
• Contract steps when you request a proposal or information prior to entering an agreement.
• Legitimate interests to maintain site security and prevent misuse, balanced against your rights.

5. Cookies and local storage

Our cookie banner records whether you accept or reject optional cookies. The choice is stored in your browser using local storage under a simple preference key. We do not use this preference to track you across other websites.

If you clear your browser storage, you may see the banner again and can set your preference anew.

6. Sharing and international transfers

We do not sell personal data. We may share data with service providers that help us run the website and respond to requests (for example, hosting or email services). Where a provider processes data outside the UK, we use appropriate safeguards such as contractual protections consistent with UK GDPR requirements.

7. Data retention

We retain personal data only as long as needed for the purpose it was collected for:

• Enquiry messages: typically up to 12 months after the last contact, unless a longer retention period is required for contractual or legal reasons.
• Resource requests: typically up to 12 months to handle delivery and follow-up questions.
• Cookie preference: stored until you delete it in your browser.

8. Your rights

You may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability where applicable. You can also withdraw consent where we rely on consent.

To exercise your rights, contact [email protected]. We may need to verify your identity before fulfilling a request.

9. Complaints

If you have concerns, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

10. Children

Our services and website are intended for a general audience but are not designed for children. If you believe a child has provided personal data, please contact us and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will revise the effective date at the top of the page when we publish changes.