Privacy Policy

Who we are

ECLA (“we”, “us”, “our”) operates the website at ecla.uk. For the purposes of UK GDPR, ECLA is the data controller for personal data collected through this site.

What data we collect and why

Newsletter subscriptions

If you subscribe to our newsletter, we collect your email address. We use this solely to send you the newsletter you requested. Legal basis: consent. You can unsubscribe at any time using the link in any email we send, or by emailing privacy@ecla.uk.

Email delivery is handled by Resend (resend.com). Your email address is shared with Resend as a data processor for this purpose only.

Analytics

We use PostHog (posthog.com) to understand how visitors use the site — which tools are used, how long pages are viewed, and where visitors come from. PostHog does not receive your name or email address. Analytics data is anonymised where possible. Legal basis: legitimate interests (improving the service). You can opt out by enabling “Do Not Track” in your browser or by using a content blocker.

Tool query logs

When you use a tool, we log the tool name, a timestamp, and anonymised query metadata (no personal identifiers) in our database. This is used for abuse prevention and service improvement. Logs are retained for 30 days. Legal basis: legitimate interests.

Carbon footprint shares

If you share your carbon footprint result, the share data (your estimated CO₂e figure and top recommendations) is stored against a random token. This data contains no personal identifiers. Share tokens expire after 90 days.

Cookies

We use a single analytics cookie set by PostHog to distinguish unique visitors. We do not use advertising cookies or sell data to third parties.

Data retention

Newsletter email addresses: retained until you unsubscribe
PostHog analytics: 90 days
Tool query logs: 30 days
Carbon share data: 90 days

Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you
Rectify inaccurate data
Erasure (“right to be forgotten”)
Data portability
Object to processing based on legitimate interests
Withdraw consent at any time (for newsletter subscriptions)

To exercise any of these rights, email privacy@ecla.uk. We will respond within 30 days.

Third-party links and affiliate links

ECLA links to third-party retailers. Some of these are affiliate links — see our Partnerships page for details. Third-party sites have their own privacy policies; we are not responsible for their practices.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision.

Contact

Privacy enquiries: privacy@ecla.uk

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.