Privacy Policy

Here is every place we collect something, and what happens to it.

We never see your full card number. Payments are made with Stripe, not on our site.

When you use a form on our contact page, we get what you type and use it only to reply and to do the work you ask for. There are four forms:

• Project enquiry: first and last name, company, email address, phone number (optional), budget, service, how you found us, platform and timeline (optional), and your project notes.
• Partnership enquiry: name, company, email address, website (optional), the kind of partnership and your message.
• Existing client support: your Client ID, name, email address, topic, urgency and message. We check the Client ID against the list of clients we have given one to.
• Callback request: your name, phone number, preferred time and time zone, and an optional email address and note.

Files

You can attach files to the project enquiry and client support forms. They go to private storage, never to a public page. Each file is scanned for malware, and our team can only open it once the scan comes back clean. The link we use to open it expires within a minute.

Each form is sent by email to our support team, from an address on our mail subdomain, mail.ecompanda.co.

When you load a page, your browser tells our host a few things about the visit. We keep this as log data:

• Your IP address
• Your browser and its version
• The pages you visit
• The date and time
• How long you stay on each page

We also use your IP address, briefly, to limit how often a form can be sent and to stop repeated wrong guesses at a Client ID. Our forms sit behind a web firewall (AWS WAF) that blocks abusive traffic. A form that looks like it was filled in by a bot may be quietly discarded.

A cookie is a small file a website stores in your browser. We set one of our own, called ec_consent. It remembers your cookie choice, so we do not ask you again on every visit. We ask again after 6 months.

Everything else is optional and off until you agree: analytics (Google Analytics and PostHog), session recordings and heatmaps (Microsoft Clarity), and video playback measurement (Mux). Each has its own switch in Cookie settings, and “Reject all” is as easy as “Accept all”. You can change your mind at any time from Cookie settings in the footer. If you turn something off, we stop it and delete the cookies we can reach.

We do not use Google’s advertising features, advertising cookies or Google signals. Google, Microsoft and PostHog are separate companies and may process this data outside your country.

Your light or dark theme choice is saved in your browser’s local storage. It never leaves your device.

You can also set your browser to refuse cookies. The site still works. You lose the memory of your choice, so we will ask again.

Some links on this site are affiliate links. If you buy something through one, we may earn a commission, and it costs you nothing extra. The company we link to may set its own cookies when you arrive, and its own policy covers that. Our Disclosures page explains how we choose what to recommend. Questions are welcome at support@ecompanda.co.

We use outside companies to run the site and our services. These are the ones in use today:

• Amazon Web Services: hosts the website, sends the email from our forms, and stores and scans uploaded files.
• Google Workspace: receives our support mailbox, support@ecompanda.co.
• Stripe: card payments and invoices.
• Mux: video delivery and, only if you agree, video playback analytics.
• Google (Google Analytics): website analytics, only if you agree.
• Microsoft (Clarity): session recordings and heatmaps, only if you agree.
• PostHog: website analytics, only if you agree.
• Sanity: the content and images for our articles.
• TidyCal: call booking, when you choose to book one.
• beehiiv: our newsletter, if you subscribe.
• WhatsApp (Meta): if you choose to message us there.
• Cloudflare (Turnstile): a security check on our contact forms that tells people from bots. It runs when you send a form and is not used for advertising.

They get what they need to do that job and may use it only for that job. We do not sell your information to anyone.

We are based in the United States and our hosting is here too. If you visit from the United Kingdom or the European Union, your information is sent to and stored in the United States. We work with brands in the UK and EU, and you are welcome to ask us how we handle that.

If UK or EU law applies to you, we need a legal reason to use your information. Ours are:

• You asked us to. We use what you put in a form to reply and, if you hire us, to do the work.
• It is part of running our business. We have a legitimate interest in keeping the site working and secure and in handling enquiries.
• You said yes. Optional video measurement and the newsletter rest on your consent, and you can withdraw it whenever you like.
• The law requires it. We keep payment and tax records because we have to.

Files you attach to a form are deleted automatically 30 days after you upload them.

We keep enquiries, and the emails that follow, for as long as we need them to reply to you, do the work and keep proper business records. Then we delete them. If you become a client, we keep records of the work and the payments for as long as tax and accounting rules require.

You can ask us to:

• tell you what personal information we hold about you, and give you a copy
• correct anything that is wrong
• delete it
• stop using it in a particular way, or limit how we use it

Depending on where you live, the law may give you more rights, such as in the United Kingdom, the European Union or California. Email support@ecompanda.co. We may ask you to confirm who you are first, and we reply within one month.

You can unsubscribe from the newsletter from any email we send, change your cookie choice from Cookie settings in the footer, and refuse cookies in your browser. We do not sell your personal information, and we do not share it for advertising.

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. You can also complain to your regulator. In the UK that is the Information Commissioner’s Office (ico.org.uk). In the EU, it is your national data protection authority.

The site and your uploads travel over encrypted connections (HTTPS). Uploaded files are scanned for malware before anyone can open them, and only our support team can read form submissions.

No way of sending or storing data is perfectly safe, so we cannot promise that nothing will ever go wrong. If something does happen to your information, we will tell you and the regulator where the law says we must.

Some pages link to sites we do not run. Once you click, that site’s own policy applies, and we are not responsible for what it does. It is worth reading before you hand over anything.

This site is not for anyone under 18, and we do not knowingly collect information from children. If you are a parent or guardian and think your child has sent us something, tell us and we will delete it once we have checked.

We will share personal information if the law requires it or a public authority makes a valid request, such as a subpoena.

We will post any new version here and change the date at the top. Changes apply from the moment they are posted, so it is worth a look now and then.

Questions about this policy, or a request about your information, can go to: