top of page

Privacy Policy


EMBER & ECHO LTD
Company number: 17174179
Registered office: 2 Frederick Street, Kings Cross, London, United Kingdom, WC1X 0ND
Last updated: 17 August 2026
1. About this Privacy Policy
EMBER & ECHO LTD ("EMBER & ECHO", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you:

  • visit or use our website;

  • contact us;

  • purchase or enquire about our products or services;

  • communicate with us by email, telephone, social media or other channels;

  • enter into a business relationship with us; or

  • otherwise provide personal data to us.

This Privacy Policy is intended to explain your privacy rights and how applicable UK data protection law protects you.
For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, EMBER & ECHO LTD is generally the data controller for the personal data described in this Privacy Policy.
2. Who we are
EMBER & ECHO LTD is a company incorporated in England and Wales.
Company number: 17174179
Registered office: 2 Frederick Street, Kings Cross, London, United Kingdom, WC1X 0ND
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: [INSERT PRIVACY/CONTACT EMAIL ADDRESS]
Postal address:
EMBER & ECHO LTD
2 Frederick Street
Kings Cross
London
United Kingdom
WC1X 0ND
3. Personal data we may collect
The information we collect will depend on how you interact with us. It may include:
Information you provide directly
This may include:

  • your name;

  • email address;

  • postal or billing address;

  • telephone number;

  • company or organisation name;

  • information contained in enquiries or correspondence;

  • account or login information, where applicable;

  • purchase, order or transaction information;

  • payment and billing information;

  • preferences and communications preferences; and

  • any other information you choose to provide to us.

Information collected automatically
When you use our website or online services, we may collect certain technical information, such as:

  • IP address;

  • browser type and version;

  • device type;

  • operating system;

  • time zone and approximate location;

  • information about how you use and interact with our website;

  • referring website or source; and

  • information collected through cookies and similar technologies.

Information received from third parties
We may receive personal data about you from third parties where permitted by law. This may include:

  • payment providers;

  • delivery or fulfilment providers;

  • technology and platform providers;

  • analytics or advertising providers;

  • business partners;

  • publicly available sources; and

  • other organisations with which we work.

Where we obtain personal data from another source, we will provide the relevant privacy information required by applicable law.
4. How we use your personal data
We may use personal data for the following purposes:

  • providing, operating and improving our products and services;

  • responding to enquiries and requests;

  • managing our relationship with customers, clients, suppliers and business contacts;

  • processing orders, payments and transactions;

  • delivering products or services;

  • administering accounts where applicable;

  • communicating with you about our products, services or enquiries;

  • sending marketing communications where legally permitted;

  • maintaining and improving the security of our systems, website and services;

  • detecting, preventing and investigating fraud, misuse or other unlawful activity;

  • maintaining business and financial records;

  • complying with legal and regulatory obligations;

  • establishing, exercising or defending legal claims; and

  • protecting our rights, property, personnel and business.

We will only use your personal data for purposes that are compatible with the purposes for which it was collected, unless otherwise permitted or required by law.
5. Our lawful bases for processing
Data protection law requires us to have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract
We may process your personal data where this is necessary to enter into or perform a contract with you, such as providing a product or service you have requested.
Legal obligation
We may process your personal data where this is necessary for us to comply with a legal or regulatory obligation.
Legitimate interests
We may process personal data where this is necessary for our legitimate interests, or those of a third party, provided that those interests are not overridden by your rights and interests.
Our legitimate interests may include operating and developing our business, providing and improving our services, communicating with customers and business contacts, maintaining security, preventing fraud and managing our business operations.
Where we rely on legitimate interests, we consider whether the processing is necessary and whether our interests are appropriately balanced against your rights and freedoms.
Consent
In some circumstances, we may process your personal data based on your consent.
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew it.
6. Marketing communications
We may send you information about our products, services, news or offers where permitted by applicable law.
Where consent is required, we will ask for your consent before sending marketing communications.
You can unsubscribe from marketing communications at any time by:

  • using the unsubscribe link included in our marketing emails; or

  • contacting us using the details in this Privacy Policy.

Please note that even if you opt out of marketing communications, we may still send you service-related or administrative communications where necessary.
7. Cookies and similar technologies
Our website may use cookies and similar technologies.
Cookies are small text files placed on your device that can help a website function, remember preferences, understand how visitors use the website and, depending on the type of cookie, support marketing or advertising activities.
We may use:

  • Strictly necessary cookies required for the operation and security of our website;

  • Preference cookies that remember settings or choices;

  • Analytics cookies that help us understand how visitors use our website; and

  • Marketing cookies where applicable, which may be used to provide or measure relevant advertising.

Where required by law, we will obtain your consent before placing non-essential cookies on your device.
You can manage your cookie preferences through our website's cookie controls and/or your browser settings.
[INSERT LINK TO COOKIE POLICY, IF YOU HAVE A SEPARATE COOKIE POLICY]
8. Who we share personal data with
We do not sell your personal data.
We may share personal data where necessary with trusted third parties, including:

  • payment processors and financial service providers;

  • website hosting and technology providers;

  • IT, software and cloud service providers;

  • email and communications providers;

  • analytics providers;

  • advertising and marketing providers, where applicable;

  • professional advisers such as lawyers, accountants and insurers;

  • delivery, logistics and fulfilment providers, where applicable;

  • customer service providers;

  • fraud prevention and security providers;

  • regulators, government bodies, law enforcement agencies or courts where required or permitted by law; and

  • prospective purchasers, investors or advisers in connection with a business transaction, merger, acquisition, restructuring or sale of assets.

Where third parties process personal data on our behalf, we will take appropriate steps to ensure that they process it in accordance with applicable data protection law and our instructions.
9. International transfers
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place as required by applicable data protection law.
Depending on the circumstances, these safeguards may include an applicable adequacy regulation or decision, approved contractual safeguards, or another lawful transfer mechanism.
Where required, further information about the safeguards applicable to a particular transfer can be requested by contacting us.
10. How long we keep your personal data
We will only retain personal data for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory or reporting requirements.
The appropriate retention period will depend on the type of information and the reason we hold it.
When determining how long to retain personal data, we may consider:

  • the nature and amount of personal data;

  • the purpose for which it was collected;

  • whether we have an ongoing relationship with you;

  • applicable legal and regulatory requirements;

  • limitation periods for potential legal claims; and

  • our legitimate business and operational requirements.

When personal data is no longer required, we will securely delete, destroy or anonymise it where appropriate.
11. Security of your personal data
We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, misuse, alteration or disclosure.
These measures may include access controls, authentication, encryption where appropriate, secure systems and processes, staff confidentiality obligations and appropriate security procedures.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will assess and respond to it in accordance with applicable data protection law.
12. Your data protection rights
Depending on the circumstances and subject to applicable legal conditions and exemptions, you may have the following rights:
Right of access
You may ask us for a copy of the personal data we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
In certain circumstances, you may ask us to delete your personal data.
Right to restrict processing
In certain circumstances, you may ask us to restrict how we use your personal data.
Right to data portability
In certain circumstances, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to ask us to transmit it to another organisation.
Right to object
You may have the right to object to certain processing of your personal data, including processing based on legitimate interests.
You have an absolute right to object to direct marketing.
Right to withdraw consent
Where we rely on your consent to process personal data, you can withdraw that consent at any time.
These rights are not absolute and certain legal conditions or exemptions may apply.
13. How to exercise your rights
To exercise any of your rights, please contact us using:
Email: [INSERT PRIVACY/CONTACT EMAIL ADDRESS]
Postal address:
EMBER & ECHO LTD
2 Frederick Street
Kings Cross
London
United Kingdom
WC1X 0ND
We may need to request additional information from you to verify your identity and protect personal data from unauthorised disclosure.
We will normally respond to a valid request within the timeframe required by applicable data protection law.
You will generally not have to pay a fee to exercise your data protection rights. However, applicable law allows us to charge a reasonable fee or refuse to act on a request in certain circumstances, such as where a request is manifestly unfounded or excessive.
14. Complaints
If you have concerns about how we have handled your personal data, we encourage you to contact us first so that we can try to resolve your concern.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Website: https://ico.org.uk/
Telephone: 0303 123 1113
15. Children's privacy
Our services are not intentionally directed at children unless expressly stated otherwise.
We do not knowingly collect personal data from children where doing so would be contrary to applicable law.
If you believe that a child has provided us with personal data in circumstances where this should not have occurred, please contact us.
16. Third-party websites and services
Our website or communications may contain links to websites, applications or services operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites or services.
We recommend that you read the privacy policy of any third-party website or service before providing personal data to it.
17. Automated decision-making and profiling
We do not currently intend to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on individuals.
If this changes, we will update this Privacy Policy and provide any information required by applicable data protection law.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, services, legal requirements or data processing practices.
When we make material changes, we will take reasonable steps to notify you where required.
The date at the top of this Privacy Policy indicates when it was most recently updated.
19. Contact us
If you have any questions about this Privacy Policy, our use of personal data, or your data protection rights, please contact:
EMBER & ECHO LTD
Company number: 17174179
2 Frederick Street
Kings Cross
London
United Kingdom
WC1X 0ND
Email: support@ember-echo.io
Privacy Policy version: 1.0
Last reviewed: 17 August 2026

bottom of page