1. Who We Are
Ecohustler Ltd is the data controller responsible for your personal data.
- Company Name: Ecohustler Ltd
- Company Number: 11436058
- Registered Address: Studio One Makers Yard, 37 Lower Keyford, Frome, Somerset, BA11 4AR
- Data Protection Contact: privacy@ecohustler.com
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at the email address above.
2. Data We Collect
We collect different types of information depending on how you interact with us:
2.1 Information You Provide
- Account Information: Name, email address, password (encrypted), and profile details when you create an account
- Membership Data: Payment information, billing address, and subscription preferences
- Communications: Messages you send us, comments you post, and feedback you provide
- Newsletter Subscriptions: Email address and communication preferences
- Survey Responses: Information you provide when participating in surveys or research
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on site, click patterns, referring URLs
- Location Data: Approximate location based on IP address (country/region level)
- Cookie Data: Information collected through cookies and similar technologies (see Section 5)
2.3 Information from Third Parties
- Payment Processors: Transaction confirmation and billing details from payment providers
- Social Media: If you connect social accounts, we may receive profile information you've made public
- Analytics Partners: Aggregated and anonymised usage statistics
3. How We Use Your Data
We use your personal data for the following purposes:
3.1 Providing Our Services
- Creating and managing your account
- Processing membership subscriptions and payments
- Delivering content and member benefits
- Sending newsletters you've subscribed to
- Responding to your enquiries and support requests
3.2 Improving Our Services
- Analysing how our website and content are used
- Identifying technical issues and improving site performance
- Understanding reader preferences to create better content
- Conducting research and surveys (with your consent)
3.3 Marketing & Communications
- Sending promotional communications (with your consent)
- Personalising content recommendations
- Notifying you about changes to our services
3.4 Advertising
- Displaying relevant advertisements on our site
- Measuring advertising effectiveness
- Working with advertising partners (see Section 6)
3.5 Legal & Security
- Complying with legal obligations
- Protecting against fraud and abuse
- Enforcing our terms and conditions
4. Legal Basis for Processing
Under UK GDPR, we must have a valid legal basis to process your personal data. We rely on the following:
4.1 Contract
Processing necessary to fulfil our contract with you, including:
- Providing membership services you've purchased
- Managing your account
- Processing payments
4.2 Consent
Where you've given clear consent, including:
- Marketing emails and newsletters
- Non-essential cookies
- Participation in surveys
You can withdraw consent at any time by contacting us or using unsubscribe links.
4.3 Legitimate Interests
Processing necessary for our legitimate business interests, where these don't override your rights:
- Improving our website and services
- Understanding our audience
- Preventing fraud and ensuring security
- Administrative purposes
4.4 Legal Obligation
Processing necessary to comply with UK law, including:
- Tax and accounting requirements
- Responding to lawful requests from authorities
6. Data Sharing
We do not sell your personal data. We may share your data with:
6.1 Service Providers
Third parties who help us operate our business:
- Payment Processors: To process membership payments securely
- Email Service Providers: To send newsletters and communications
- Hosting Providers: To store and serve our website
- Analytics Services: To understand site usage
- Customer Support Tools: To help us respond to your enquiries
These providers only access data necessary for their services and are contractually bound to protect your information.
6.2 Advertising Partners
We work with advertising networks who may use cookies to serve relevant ads. These partners may collect:
- Device and browser information
- Browsing behaviour across sites
- Approximate location
You can opt out of personalised advertising through your cookie preferences or industry opt-out tools like Your Online Choices.
6.3 Legal Requirements
We may disclose data if required by law or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security threats
- Protect the safety of our users
6.4 Business Transfers
If Ecohustler is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any change in ownership or use of your data.
7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account Data: Retained while your account is active and for 2 years after closure
- Payment Records: Retained for 7 years for tax and legal compliance
- Newsletter Subscriptions: Retained until you unsubscribe
- Analytics Data: Aggregated data retained indefinitely; individual data retained for 26 months
- Support Communications: Retained for 3 years
- Cookie Data: Varies by cookie type; typically session to 2 years
When data is no longer needed, it is securely deleted or anonymised.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
8.1 Right of Access
You can request a copy of the personal data we hold about you. We will respond within one month.
8.2 Right to Rectification
You can request correction of inaccurate or incomplete data. You can also update most information through your account settings.
8.3 Right to Erasure
You can request deletion of your personal data in certain circumstances, such as:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
Note: We may need to retain some data for legal or legitimate business reasons.
8.4 Right to Restrict Processing
You can request that we limit how we use your data while we verify its accuracy or consider your objection.
8.5 Right to Data Portability
You can request your data in a structured, commonly used format to transfer to another service.
8.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes. For marketing, we will stop processing immediately.
8.7 Rights Related to Automated Decision-Making
We do not make decisions based solely on automated processing that significantly affect you. If this changes, you will have the right to human intervention.
8.8 Exercising Your Rights
To exercise any of these rights, contact us at privacy@ecohustler.com. We may need to verify your identity before processing your request. We will respond within one month (or longer for complex requests, with notice).
8.9 Right to Complain
If you're unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- Encryption: Data transmitted via HTTPS; sensitive data encrypted at rest
- Access Controls: Restricted access to personal data on a need-to-know basis
- Password Security: Passwords stored using industry-standard hashing
- Regular Audits: Security practices reviewed and updated regularly
- Incident Response: Procedures in place to detect, report, and respond to data breaches
While we take security seriously, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.
10. International Data Transfers
Some of our service providers are based outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Adequacy Decisions: Transfers to countries deemed adequate by UK authorities
- Standard Contractual Clauses: EU/UK-approved contracts with service providers
- Supplementary Measures: Additional technical and organisational safeguards where needed
You can request more information about these safeguards by contacting us.
11. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately and we will delete it.
If you are between 16 and 18, we recommend reviewing this policy with a parent or guardian.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes:
- We will update the "Last updated" date at the top of this page
- We will notify registered users via email for material changes
- We may display a notice on our website
We encourage you to review this policy periodically. Your continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights:
- Email: privacy@ecohustler.com
- General Enquiries: hello@ecohustler.com
Ecohustler Ltd
Data Protection Enquiries
Studio One Makers Yard
37 Lower Keyford
Frome, Somerset
BA11 4AR
We aim to respond to all enquiries within 5 business days and to data rights requests within one month.