Privacy Policy
Last updated: 15 July 2025
1. Who we are
EchoFlow Ltd(“EchoFlow”, “we”, “us”, “our”) operates the website at echoflow.ai and provides a speed-to-lead system for service businesses. We are committed to protecting your personal data and your rights under UK GDPR and the Data Protection Act 2018.
For questions about this policy, contact us at hello@getechoflow.co.uk.
2. Data we collect
When you use our demo or contact us, we may collect:
- Contact details — name, email address, and mobile number you provide when requesting a demonstration
- Business information — your business type and sector
- Usage data — pages visited, time spent, browser type, and device information collected via cookies
- Communications — any emails or messages you send us
We do not collect payment card data, government identification, or sensitive personal data.
3. How we use your data
We use your personal data to:
- Deliver the EchoFlow demonstration you requested
- Contact you about your enquiry via phone, email or message
- Improve our service and website
- Comply with our legal obligations
- Send you relevant information about EchoFlow, where you have consented
Our legal basis for processing is either your consent (for marketing communications) or our legitimate interest in providing and improving our service.
4. Third-party services
To deliver the demonstration experience, your data may be passed to:
- Telephony providers (Twilio, Retell AI) — to initiate the demonstration call to your number
- CRM systems — to record your enquiry for follow-up
- Calendar tools (Cal.com, Google Calendar) — if you book a follow-up call
- Automation platforms (n8n) — to orchestrate the above
All third-party processors are bound by data processing agreements and are not permitted to use your data for their own purposes.
5. Data retention
We retain your personal data for as long as necessary to provide our service and comply with our legal obligations. Typically:
- Demo submission data is retained for 12 months from the date of submission
- Customer records are retained for the duration of the relationship plus 7 years
- Website analytics data is retained for 26 months
You may request deletion of your data at any time (see Your Rights, below).
6. Cookies
We use the following cookies on echoflow.ai:
- Essential cookies — required for the site to function. These cannot be declined.
- Analytics cookies — help us understand how visitors use the site. Only set with your consent.
You can manage your cookie preferences at any time using the banner at the bottom of the page, or by clearing your browser cookies.
7. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure— request deletion of your data (“right to be forgotten”)
- Restriction — request we restrict processing of your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, contact us at hello@getechoflow.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All data is transmitted over encrypted connections (HTTPS). Access to personal data is restricted to authorised personnel only.
9. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the “last updated” date at the top of this page. We encourage you to review this policy periodically.
10. Contact
For any questions, complaints or data subject requests, contact EchoFlow Ltd at:
EchoFlow Ltd · Suite Ra01, 195-197 Wood Street, London, E17 3NU · Company no. 17286538