This is a privacy notice of Eco Limited
(trading as E Co.) (the Business). The E Co. institute is a service of the
company E Co.
We respect your privacy and are determined to protect your personal data. The purpose of this privacy notice is to inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from). We’ll also tell you about your privacy rights and how data protection law protects you.
In this policy we explain:
- Who we are and important information
- The personal data we collect about you
- How we collect your personal data
- How we use your personal data
- With whom we share your personal data
- Data retention
- Your legal rights
- Changes to this notice and your duty to inform us of changes
- Queries, requests or concerns
What is the purpose of this privacy notice?
This privacy notice aims to give you information on how we collect and process your personal data through your use of this website, including any data you may provide through this website when you interact with it.
This website is not intended for children and we do not knowingly collect data relating to children.
You must read this privacy notice together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
Data controller
Eco Limited (E Co.) is the controller and responsible for your personal data (collectively referred to as "Business" , "we", "us" or "our" in this privacy notice).
Our contact details are:
E Co.
20 St Thomas St
London
SE1 9RS
United Kingdom
For all data matters contact our data protection officer Dr Grant Ballard-Tremeer on privacy@ecoltdgroup.com.
Third-party links outside of our control
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
When you leave our website, we encourage you to read the privacy notice of every website you visit.
Personal data, or personal information, means any information about an individual from which that person can be identified. You can find out more about personal data from the Information Commissioners Office.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
- Contact details: Full name, email address, phone number, postal address
- Business information: Job title, seniority level, organisation/employer
- Online tracking information: Computer identification numbers, location (country), Internet protocol address (‘IP Address’), browsing behaviour, cookies, pixels, device ID, websites visited, language used
- Account login information: Login ID, usage analytics, other information used to access and/or secure systems, applications and digital services including our website
- Health information: We do not routinely collect health information through our website, however, you may be invited to submit details of dietary requirements or restrictions, and accessibility requirements (including mobility, sight or hearing) where needed to facilitate your attendance at one of our events
- Other information: Feedback, opinions, interests, queries or any other information that you provide directly to us through our website (for example, you may indicate that you are interested in receiving digital communications from us relating to events)
We also collect, use and share Aggregated Data such as statistical or demographic data. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
We use different methods to collect data
from and about you including through:
- Website activities: We collect your personal
information when you visit our website, register for our online newsletters and
insights or send us your enquiries. This includes any information that you
provide to us by email or within the forms that you submit or the forms that
you use to register for our events.
- Careers website activities including our online
recruitment portal: We collect personal information when you visit our careers
website and access our careers portal, and when you register your interest in
joining our business. This includes any information that you provide to us by
email or within the forms (applications) that you submit. We and other services
providers (on our behalf) may collect information about your activities when
you visit our careers website and careers portal using online tracking technologies.
- Digital marketing communications: Any digital
communications which you have signed up for include some tracking technologies
to help us understand how you interact with those communications (for example,
which content you click through to read more detail).
- Social media: We have added social media services to
our website to enable you to share our content with your colleagues, business
contacts, family and friends. If you use any social media and social business
tools on our websites any personal information you provide will be subject to
those social media sites, which may have their own cookies and privacy notices.
You should carefully review those notices to ensure you’re happy with how they
process your personal information.
- Third parties: Third parties collect your personal
information (on our behalf) when you visit our website (for example, Google
Analytics, through the use of online tracking technologies). This is to help us
understand more about your interests and experience when visiting our website
(for example, where visitors come from, and the most popular pages visited). We
will always confirm with you first, that you have agreed to the collection and
use of this personal information.
We will only use your personal data when the
law allows us to. Most commonly, we will use your personal data in the
following circumstances:
To facilitate the use of our website
●
Evaluate improvements and other modifications to the
functionality of our website, services and products
●
Ensure the security and integrity of our website,
applications and digital services
●
Detect and prevent criminal activity, including fraud
For marketing and business development
●
Ensure the content from our website is presented in the
most engaging manner for you and for your device
●
To provide you with information regarding our services,
products, and events
●
To understand and assess your interests in order to
improve our website, services and products
●
To improve the content on our website and digital
marketing communications
To manage our relationship with you
●
To understand your interests in order to improve your
experience when visiting or accessing our website, services and products
●
To respond to your enquiries
●
To improve the quality of our responses and our
interactions with you
●
To provide you with the services and products for which
you access or subscribe to
Complying with legal obligations
●
Disclosing personal information to government agencies,
regulatory authorities or law enforcement (this includes complying with
subpoenas and court orders)
●
Record keeping and reporting obligations
●
Pursuing our legal rights and remedies
●
Establishing, exercising or defending E Co’s legal
position
●
Managing complaints and legal claims
When using your personal information for the
purposes above, we will generally rely on your express or implied consent as
our legal justification.
In certain jurisdictions, such as the UK and
EU, we may also process this information based on our legitimate interests. If
this is the case, then we will balance your rights and freedoms against our own
interests, or those of any third parties, to ensure that your rights are not
infringed.
Opting out
You can ask us to stop sending
you marketing messages at any time contacting us or by following the opt-out
links on any marketing message sent to you.
Where you opt out of receiving these
marketing messages, this will not apply to personal data provided to us as a
result of a product/service purchase, warranty registration, product or service
experience or other transactions.
Cookies
You can set your browser to
refuse all or some browser cookies, or to alert you when websites set or access
cookies. If you disable or refuse cookies, please note that some parts of this
website may become inaccessible or not function properly. For more information
about the cookies we use, please see our Cookie Policy.
Change of purpose
We will only use your personal
data for the purposes for which we collected it, unless we reasonably consider
that we need to use it for another reason and that reason is compatible with
the original purpose. If you wish to get an explanation as to how the
processing for the new purpose is compatible with the original purpose, please
contact our data protection officer (contact details given above).
If we need to use your personal
data for an unrelated purpose, we will notify you and we will explain the legal
basis which allows us to do so.
Please note that we may process
your personal data without your knowledge or consent, in compliance with the
above rules, where this is required or permitted by law.
We may have to share your personal data with
the parties set out below for the purposes set out in paragraph 4 above.
Personal information processed during our
business activities may be shared, used, handled and otherwise made available
to E Co. entities, service providers, and third parties when it is necessary
and proportionate to do so. We may share, provide access to and transfer your
personal information:
- Within E Co. as appropriate to provide our services and
to effectively maintain our business.
- Our third-party services providers who help us
communicate with you and deliver our programmes, products, information and
services, support our website and help us to understand how you interact and
engage with our websites. These include, Hubspot (Customer Relationship Management
platform), Google Workspace (communication delivery), Typeform (digital survey platform),
Learnworlds (Learning Management System platform), and Team Tailor (digital
recruitment platform).
- Regulatory authorities or law enforcement agencies if
we need to comply with their request for information, such as where an
investigation is being carried out.
When we need to share your personal
information with these third parties, we use a combination of contractual,
physical and technical measures to keep it secure. To protect personal
information that is transferred internationally, we ensure that appropriate
safeguards are in place and that your privacy and data protection rights are
protected. Those safeguards normally include data encryption, role-based access
permissions, and legal agreements that facilitate the lawful cross-border
transfer of personal information.
Please note that we will never sell your
personal information to a third party for any purpose.
International
transfers
Many of our external third
parties are based outside the UK so their processing of your personal data will
involve a transfer of data outside the UK.
Whenever we transfer your
personal data out of the UK, we ensure a similar degree of protection is
afforded to it by implementing safeguards.
Data security
We have put in place appropriate
security measures to prevent your personal data from being accidentally lost,
used or accessed in an unauthorised way, altered or disclosed. In addition, we
limit access to your personal data to those employees, agents, contractors and
other third parties who have a business need to know. They will only process
your personal data on our instructions and they are subject to a duty of
confidentiality.
We have put in place procedures
to deal with any suspected personal data breach and will notify you and any
applicable regulator of a breach where we are legally required to do so.
We will only retain your personal data for
as long as necessary to fulfil the purposes we collected it for, including for
the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate
retention period for personal data, we consider the amount, nature, and
sensitivity of the personal data, the potential risk of harm from unauthorised
use or disclosure of your personal data, the purposes for which we process your
personal data and whether we can achieve those purposes through other means,
and the applicable legal requirements.
In some circumstances you can ask
us to delete your data: see Your legal rights below for further information.
Unless subject to an exemption under the
data protection laws, you have the following rights with respect to your
personal data:
- The right to request a copy of the personal data which
we hold about you;
- The right to request that we correct any personal data
if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where
it is no longer a valid reason to retain such data;
- The right to withdraw your consent to the processing at
any time, where consent was the lawful basis for processing your data;
- The right to request that we provide you with your
personal data and where possible, to transmit that data directly to another
data controller, (known as the right to data portability), where applicable i.e.
where our processing is based on consent or is necessary for the performance of
our contract with you or where we process your data by automated means);
- The right, where there is a dispute in relation to the
accuracy or processing of your personal data, to request a restriction is
placed on further processing;
- The right to object to our processing of personal data,
where applicable i.e. where processing is based on our legitimate interests (or
in performance of a task in the public interest/exercise of official
authority); direct marketing or processing for the purposes of
scientific/historical research and statistics).
If you wish to exercise any of
the rights set out above, please contact our data protection officer (contact
details above).
No fee required - with some exceptions
You will not have to pay a fee to
access your personal data (or to exercise any of the other rights). However, we
may charge a reasonable admin fee if your request is clearly unfounded,
repetitive or excessive. Alternatively, we may refuse to comply with your
request in these circumstances.
What we may need from you
We may need to request specific
information from you to help us confirm your identity and ensure your right to
access your personal data (or to exercise any of your other rights). This is a
security measure to ensure that personal data is not disclosed to any person
who has no right to receive it. We may also contact you to ask you for further
information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all
legitimate requests within one month. Occasionally it may take us longer than a
month if your request is particularly complex or you have made several
requests. In this case, we will notify you and keep you updated.
This privacy notice was issued in January
2025 and may need to be updated because of changes to our systems and processes
or the law, so we recommend that you review this notice periodically. When we
update this privacy notice we will update the 'changes to this privacy notice'
section.
Please keep us informed if your personal
data changes during your relationship with us. It is important that the
personal data we hold about you is accurate and current.
To exercise all relevant rights, queries or
complaints in relation to this policy or any other data protection matter
between you and us, please in the first instance contact our data protection
officer as outlined at the top of this document.
If this does not resolve your
complaint to your satisfaction, you have the right to lodge a complaint with
the Information Commissioners Office on 03031231113 or via their website
at https://ico.org.uk/make-a-complaint/
