EKKO Ltd ("EKKO", "we", "us") is the data controller for personal information collected through ekkoltd.co.uk and any direct enquiries you send us. We are a UK company (registered office: 124 City Road, London, EC1V 2NX) and support clients in the United Kingdom, Australia, New Zealand and Singapore. We handle your data lawfully, fairly and transparently in line with the UK GDPR and Data Protection Act 2018, and we take reasonable steps to align with equivalent protections in the other jurisdictions we serve.

Information we collect

Contact details you provide (name, email, phone) when you enquire
Conversation content from email, WhatsApp or the website AI assistant
Basic technical data (IP, browser, pages viewed) for site analytics and security

How we use it

To respond to your enquiry and deliver any agreed work
To send service updates and project communications
To improve our website, products and customer experience

Lawful basis

We rely on legitimate interests (responding to enquiries, running our business) and, where relevant, contract performance or your consent.

Sharing

We never sell your data. We use trusted processors (hosting, email, AI infrastructure) bound by appropriate agreements. We may disclose data where legally required.

International data transfers

Because our team and infrastructure are based in the UK, personal data collected from clients in Australia, New Zealand or Singapore may be transferred to and stored in the United Kingdom or the European Economic Area. Where required, we rely on the UK's International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or equivalent safeguards. By engaging us or submitting an enquiry, you consent to this transfer.

Regional notices

United Kingdom / EEA: Rights and complaints under UK GDPR are handled by the ICO (ico.org.uk).
Australia: We handle personal information consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Complaints can be raised with the OAIC (oaic.gov.au).
New Zealand: We handle personal information consistent with the Information Privacy Principles under the Privacy Act 2020. Complaints can be raised with the Office of the Privacy Commissioner (privacy.org.nz).
Singapore: We handle personal data consistent with the Personal Data Protection Act 2012 (PDPA). Complaints can be raised with the PDPC (pdpc.gov.sg).

Retention

We hold enquiry data for up to 24 months, and client records for the duration of the engagement plus statutory periods.

Your rights

You may request access, correction, deletion, restriction or portability of your data, or object to processing. Contact info@ekkoltd.co.uk.

Privacy Policy