Privacy Policy

Last updated: 19 April 2026

Echo Soft Skills Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our website at echosoftskills.com (the "Site"), and when you interact with us via the Site.

We are a company registered in England and Wales (Company No. 17078603). For data protection purposes, we are the data controller.

This policy covers our marketing website only. The Echo product — the voice AI rehearsal platform used under a separate commercial agreement by our customers — is governed by a separate data processing agreement with the commissioning organisation.

1. What data we collect

Information you provide directly

When you submit our contact form, we collect:

• Your first and last name
• Your work email address
• Your company name
• Any message you choose to include

Information collected automatically

When you visit our Site, we may collect certain information automatically through cookies and similar technologies, depending on your consent preferences. This may include device and browser information, pages visited, click behaviour, and IP address. See Section 3 (Cookies) for details.

2. How we use your data

We use the data we collect for the following purposes:

• To respond to your enquiry — when you submit the contact form, your details are sent to our customer relationship management platform so we can respond to you. The legal basis is your consent (you actively submit the form) and our legitimate interest in responding to business enquiries.
• To understand how our Site is used — we use analytics tools to understand visitor behaviour, improve our Site, and measure performance. The legal basis is your consent, obtained via our cookie banner.

We will not add you to marketing lists or send you unsolicited emails as a result of submitting the contact form. We will only use your email address to respond to the specific enquiry you raised, unless you have separately opted in to marketing communications.

3. Cookies and tracking technologies

We use different categories of cookies and tracking technologies on our Site. Non-essential cookies are only activated after you give your consent.

Essential (always active)

Our Site is hosted on Vercel (Vercel Inc., US) and we use their cookieless, privacy-friendly analytics to measure page performance and count page views. These do not set cookies and do not require consent.

Analytics and contact form (requires consent)

Contact form

Our contact form is processed by Formspree (Formspree, Inc., US) acting as a data processor on our behalf. Formspree receives the fields you submit (name, company, email, message), forwards them to us by email, and does not set tracking cookies or store data beyond delivery. See Formspree's own privacy policy.

International transfer: Formspree is US-based. The transfer of your personal data from the UK/EU to the US is made under the UK International Data Transfer Addendum and Standard Contractual Clauses (SCCs), providing adequate safeguards for your rights.

We do not currently use analytics cookies on our Site.

4. Contact form

When you submit the contact form on our Site, your data is forwarded to us as an email by Formspree (Formspree, Inc., US), which acts as our data processor for that purpose only.

We use this platform to:

• Receive and manage enquiries submitted through the contact form
• Respond to your enquiry by email
• Keep a record of our correspondence for business purposes

5. Your rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your personal data
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a structured, commonly used, machine-readable format
• Right to object — you can object to our processing of your data
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time by contacting us
• Right to complain — you have the right to raise a complaint directly with us, or with the Information Commissioner's Office

To exercise any of these rights, please contact us at hello@echosoftskills.com. We will respond within one month of receiving your request, as required by law.

6. Data sharing and international transfers

We do not sell your personal data. We share data only with third-party service providers who act as data processors on our behalf:

• Vercel Inc. (US) — website hosting and essential analytics
• HubSpot Inc. (US) — contact form processing, CRM, and analytics

Some of these providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including reliance on standard contractual clauses or adequacy decisions.

The Echo product itself uses UK/EU data residency for all customer content and session data. That infrastructure is separate from this marketing site and is governed by our customer data processing agreements.

7. Data retention

We retain your data only for as long as necessary for the purposes described in this policy:

• Contact form submissions — retained for as long as necessary to manage the business relationship, and deleted upon request
• Analytics data — retained according to standard provider retention periods (typically up to 13 months for aggregated analytics)

8. Security

We take reasonable technical and organisational measures to protect your personal data. Our Site is served over HTTPS, and all third-party services we use maintain their own security certifications and practices. The Echo product platform is subject to annual independent penetration testing and is on the certification roadmap for SOC 2 Type II and ISO 27001.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling in connection with the marketing Site.

10. Children's data

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

12. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us at:

Echo Soft Skills Ltd
Email: hello@echosoftskills.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: ico.org.uk.