Privacy Policy

1. Who we are

The data controller is eCoraDLT Limited, trading as eCora, a company registered in England & Wales (company number 13062404), with its registered office at LCB Depot, Rutland Street, Leicester LE1 1RE.

If you have any questions about how we handle your personal data, contact us at info@ecora.tech.

2. What personal data we collect

We collect only what is necessary to operate our website and respond to enquiries:

Contact data — name and email address when you submit a contact or get-started form.
Usage data — pages visited, time on site, referring URL, browser type, and approximate location (city level), collected via analytics tools.
Communications — the content of emails or messages you send us.

We do not collect sensitive personal data (as defined in Article 9 UK GDPR) and we do not knowingly collect data from anyone under 16 years of age.

3. How and why we use your data

We process your personal data for the following purposes and rely on the following lawful bases under UK GDPR:

Responding to enquiries — to reply to messages you send us. Lawful basis: legitimate interests (Article 6(1)(f)).
Improving our website — to understand how visitors use our site and fix issues. Lawful basis: legitimate interests (Article 6(1)(f)).
Marketing communications — to send you information about our products and services where you have opted in. Lawful basis: consent (Article 6(1)(a)). You may withdraw consent at any time.
Legal obligations — to comply with applicable law. Lawful basis: legal obligation (Article 6(1)(c)).

4. Cookies

We use cookies and similar technologies to operate our site and gather analytics. Cookies used include:

Strictly necessary cookies — essential for the site to function. No consent required.
Analytics cookies — used to measure site traffic and behaviour. Placed only with your consent via our cookie banner.

You can control cookies through your browser settings at any time. Withdrawing consent to analytics cookies will not affect site functionality.

5. Who we share your data with

We do not sell your personal data. We share data only with:

Hosting and infrastructure providers — who store and serve our website on our behalf, under data processing agreements.
Analytics providers — who process usage data in accordance with our instructions.
Professional advisers — lawyers, accountants, and insurers, where necessary and under duties of confidentiality.
Law enforcement or regulators — where we are legally required to do so.

6. International transfers

Some of our service providers are located outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement (IDTA) or transfers to countries with an adequacy decision from the UK Secretary of State — to protect your data to an equivalent standard.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes described above:

Enquiry and contact data — up to 3 years from last contact, unless an ongoing relationship requires longer retention.
Analytics data — aggregated or anonymised after 26 months.
Legal and financial records — as required by applicable law, typically 6 years.

8. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data where there is no compelling reason for us to keep it.
Restriction — ask us to restrict processing of your data in certain circumstances.
Portability — receive your data in a structured, machine-readable format where processing is based on consent or contract.
Objection — object to processing based on legitimate interests, including direct marketing.
Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at info@ecora.tech. We will respond within one month. We may need to verify your identity before fulfilling a request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated effective date. For significant changes, we will notify you by email where we hold your contact details.