EKKO is a global digital agency specialising in websites, CRM systems and AI automation. Operated by EKKO Ltd (Company No. 16982307), registered in England & Wales, and EKKO Labuan Ltd (Company No. LL22426), registered in Labuan, Malaysia. weareekko.io

EKKO Ltd ("EKKO", "we", "us") is the data controller for personal information collected through weareekko.io, ekkoltd.co.uk and ekkoreview.com, and any direct enquiries you send us. We support clients in the United Kingdom, the United States, Hong Kong, Singapore, Australia and New Zealand, and we handle your data lawfully, fairly and transparently in line with the UK GDPR and Data Protection Act 2018, taking reasonable steps to align with equivalent protections in the other jurisdictions we serve.

Information we collect

Contact details you provide (name, email, phone) when you enquire
Conversation content from email, WhatsApp or the website AI assistant
Basic technical data (IP, browser, pages viewed) for site analytics and security

How we use it

To respond to your enquiry and deliver any agreed work
To send service updates and project communications
To improve our website, products and customer experience

Lawful basis

We rely on legitimate interests (responding to enquiries, running our business) and, where relevant, contract performance or your consent.

Sharing

We never sell your data. We use trusted processors (hosting, email, AI infrastructure) bound by appropriate agreements. We may disclose data where legally required.

International data transfers

Because our team and infrastructure are based in the UK, personal data collected from clients in the United States, Hong Kong, Singapore, Australia or New Zealand may be transferred to and stored in the United Kingdom or the European Economic Area. Where required, we rely on the UK's International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or equivalent safeguards. By engaging us or submitting an enquiry, you consent to this transfer.

Regional notices

United Kingdom / EEA: Rights and complaints under UK GDPR are handled by the ICO (ico.org.uk).
Australia: We handle personal information consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Complaints can be raised with the OAIC (oaic.gov.au).
United States: We handle personal information of US clients to UK GDPR standards, and where applicable state privacy laws (such as the CCPA/CPRA in California) give you rights to know, delete, correct and opt out of the sale or sharing of personal information, we honour those requests. We do not sell personal information.
New Zealand: We handle personal information consistent with the Information Privacy Principles under the Privacy Act 2020. Complaints can be raised with the Office of the Privacy Commissioner (privacy.org.nz).
Hong Kong: We handle personal data consistent with the Personal Data (Privacy) Ordinance (Cap. 486). Complaints can be raised with the PCPD (pcpd.org.hk).
Singapore: We handle personal data consistent with the Personal Data Protection Act 2012 (PDPA). Complaints can be raised with the PDPC (pdpc.gov.sg).

Retention

We hold enquiry data for up to 24 months, and client records for the duration of the engagement plus statutory periods.

Your rights

You may request access, correction, deletion, restriction or portability of your data, or object to processing. Contact contact@weareekko.io or info@ekkoltd.co.uk.

Privacy Policy