Last updated: November 2025
Echo Communication Ltd (“Echo”, “we”, “our”, or “us”) is committed to protecting your privacy.
We are registered in England & Wales (Company No. 16275498) and act as a data controller for personal data we collect directly.
When we process data on behalf of other organisations (such as NHS bodies or healthcare providers), we act as a data processor under their instruction.
1. Information We Collect
We may collect personal information when you:
- Use our website or platform
- Contact us by email, phone, or online form
- Subscribe to updates or services
- Provide data for partnership or service delivery
We also collect limited technical information (e.g. browser type & device details) and use cookies.
For details on this, please see our Cookie Policy.
2. How We Use Your Information
We use personal information to:
- Deliver and manage our services
- Respond to enquiries and support requests
- Improve system performance and user experience
- Comply with legal or regulatory requirements
If you have provided consent, we may send you updates or service-related communications.
You can withdraw consent at any time by contacting us.
For healthcare and NHS-related services:
We may process special category data (e.g. health-related information) strictly under the instruction of the data controller and in compliance with Article 9 of the UK GDPR.
3. Data Sharing
We do not sell your personal data.
We may securely share it with:
- Trusted service providers (e.g. hosting, email, analytics, security)
- Healthcare or partner organisations using our services
- Regulators or legal authorities where required by law
- Professional advisors (legal, financial, or compliance)
All third parties are bound by confidentiality and data protection agreements.
4. International Transfers
If any personal data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards such as Standard Contractual Clauses or rely on recognised adequacy decisions.
5. Data Retention
We retain personal data only as long as necessary to:
- Fulfil our contractual or legal obligations
- Meet operational requirements
- Comply with regulatory guidance
When data is no longer needed, it is securely deleted or anonymised.
6. Your Rights
Under UK data protection law, you have the right to:
- Access – Request a copy of the personal data we hold about you
- Rectification – Correct inaccurate or incomplete data
- Erasure – Request deletion of your data (in certain cases)
- Restriction – Limit processing of your data
- Data portability – Request transfer of your data to another provider
- Object – Object to certain processing activities
- Withdraw consent – Where processing is based on consent
- Complain – To the Information Commissioner’s Office (ICO)
To exercise any of these rights, please contact us using the details below.
7. Security
We use a range of measures to keep your data safe, including:
- Encryption in transit and at rest
- Access controls and authentication
- Secure storage and monitoring
- Regular audits and reviews
While we take all reasonable precautions, please note that no internet transmission is ever fully secure.
8. Changes to This Policy
We may update this policy from time to time.
Any changes will be posted on this page, and where appropriate, we will notify you directly.
9. Contact Us
If you have questions about this policy or wish to exercise your rights, please contact:
ECHO COMMUNICATION LTD
[email protected]
Data Protection Officer (DPO):
Jak Moore – [email protected]
You may also contact the Information Commissioner’s Office (ICO):
Wycliffe House
Water Lane, Wilmslow, Cheshire SK9 5AF
www.ico.org.uk