
Privacy Policy
Last updated: 18/07/2025
1. Who We Are
Ecovance Ltd, registered in the UK, operating www.ecovance.co.uk (“Ecovance”, “we”, “us”). We provide eco‑friendly consultancy and services. Our data protection lead can be contacted via hello@ecovance.co.uk or our registered office address.
2. Personal Data We Collect
-
Identity and contact data: name, email, postal address, phone number.
-
Transaction data: service details, payment details (processed by secure third-party processors).
-
Communication data: messages you send us via contact forms and responses.
-
Usage data: IP address, browser, device, pages visited, session duration—collected through cookies/analytics.
3. Legal Basis for Processing
We process personal data on the following grounds:
-
Performance of a contract (e.g. preparing proposals, delivering services).
-
Legitimate interests, such as improving our services or maintaining client communications—always balanced against your rights.
-
Consent, e.g. when subscribing to newsletters, receiving marketing.
4. How We Use Your Information
We use personal data to:
-
Provide, manage, and record services.
-
Process payments and send invoices.
-
Communicate with you (excluding unsolicited direct marketing unless you opt‑in).
-
Improve and optimise our website and business operations.
5. Cookies & Tracking Technologies
We may use cookies, web beacons, analytics tools (like Google Analytics or similar) to monitor site use. You can manage or refuse certain cookies as explained in our Cookie Notice.
6. Marketing and Email Communications
We will only send direct marketing emails if you have opted in. Under PECR, we may send promotional communications to existing clients under the soft opt-in rule, only if contact details were collected during a sale and if we offer an opportunity to opt-out.
7. Data Sharing & Third Parties
We may share data with:
-
Service providers, like payment processors, IT/hosting, analytics or client management tools — only to the extent needed, under data-protection agreements.
-
Regulators or authorities, where required by law or court orders.
-
Potential purchasers or during business restructuring, where required by law or business necessity.
We do not sell or rent your personal data.
8. International Transfers
We do not transfer your personal data outside of the UK or EEA, except where required by trusted subprocessors subject to appropriate safeguards in line with UK GDPR.
9. Data Retention
Personal data is retained only as long as necessary:
-
For the life of our client relationship, plus any legal (e.g. tax) obligations
-
For some data, up to six years (e.g. financial records)
When no longer needed, data is either securely deleted or anonymised.
10. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption, access controls, breach procedures, and staff training.
11. Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data or receive a copy
-
Rectify inaccurate or incomplete data
-
Request erasure (“right to be forgotten”)
-
Restrict or object to processing (especially if based on legitimate interest)
-
Withdraw consent at any time
-
Request data portability
-
Lodge a complaint with the UK Information Commissioner’s Office (ICO) if you're dissatisfied.
12. Automated Decisions & Profiling
We do not carry out automated decision-making or profiling based on personal data.
13. Updates to This Policy
We may update this policy periodically. Whenever material changes occur, we’ll publish the updated version online with the "Last updated" date. Please revisit occasionally.
14. Contact Us
For privacy concerns, data requests, or complaints, email: hello@ecovance.co.uk or write to our data protection lead at our registered business address.