Your cart is empty
You may check out all the available products and buy some in the shop
Return to shopPrivacy Policy
Last updated: 07/09/2026
This policy explains how EcoEls collects, uses and protects personal information when you visit our website, buy our products, contact our team or make a wholesale enquiry.
1. Who we are
EcoEls is a trading name of [Legal company name], a company registered in England and Wales.
| Registered office | Unit 0045, Access Self Storage, 20 Bugsby’s Way, Charlton, London SE7 7SJ |
| Website | www.ecoels.co.uk |
| info@ecoels.co.uk | |
| Telephone | 020 3807 3305 |
We are the “data controller” for the personal information described in this policy. That means we decide how and why it is used.
[Confirm whether registration with the Information Commissioner’s Office is required. Most UK businesses processing personal data electronically must register and pay the data protection fee. If registered, add the registration number here.]
2. What this policy covers
This policy covers personal information we handle through:
- our website, including forms, newsletter sign-ups and any online checkout
- customer service and product feedback
- wholesale and business enquiries
- marketing communications you have asked to receive
It does not cover the way other companies handle your information. If you buy an EcoEls product through Amazon, eBay or another marketplace, or through a retailer, that company is responsible for its own privacy practices. Please see section 10.
3. The information we collect
Information you give us
| What | When |
|---|---|
| Name, email address, telephone number | Contact form, wholesale form, newsletter, orders |
| Delivery and billing address | Placing an order |
| Order number and purchase channel | Customer service enquiries |
| Product, packaging or batch details, and any photographs you attach | Quality or fault reports |
| Company name, website, business type, sales channels, territory, estimated order volume | Wholesale enquiries |
| The content of your message or review | Any correspondence with us |
Please do not send payment card numbers, passwords or other sensitive details through our contact forms. We do not need them and will never ask for them by email.
Information collected automatically
When you use our website we may collect device and usage information such as IP address, browser type, device type, pages viewed, referring pages and approximate location derived from IP address. Most of this is collected through cookies and similar technologies, and non-essential cookies are only used where you have given consent. See section 6.
Information from other sources
- Payment providers confirm to us that a payment succeeded or failed. We receive limited card details such as the last four digits and card type. We do not receive or store your full card number.
- Delivery providers give us tracking and delivery status information.
- Marketplaces may provide the order and delivery details needed to fulfil or support an order.
- Review platforms may provide the content of reviews you choose to publish.
[Confirm the exact providers in use before publishing, and name them in section 7.]
4. How we use your information, and our lawful bases
Under UK data protection law we must have a lawful basis for using personal information. Ours are set out below.
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, and providing order updates | Performance of a contract with you |
| Handling returns, refunds and replacements | Performance of a contract, and compliance with a legal obligation |
| Answering enquiries, feedback and complaints | Legitimate interests — responding to people who contact us |
| Investigating product quality or safety concerns | Legitimate interests, and compliance with a legal obligation |
| Responding to and managing wholesale enquiries | Legitimate interests — developing our business relationships |
| Sending marketing emails you have signed up for | Consent |
| Sending marketing about similar products to existing customers | Legitimate interests, subject to the “soft opt-in” rules and an unsubscribe link in every message |
| Understanding how the website is used and improving it | Consent, through analytics cookies |
| Keeping accounting and tax records | Compliance with a legal obligation |
| Preventing fraud and protecting our website | Legitimate interests — keeping our business and customers safe |
| Establishing, exercising or defending legal claims | Legitimate interests, and compliance with a legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights. You can object to this processing at any time — see section 11.
5. Marketing and your choices
If you subscribe to the EcoEls newsletter, we will send product news, practical sustainability information and occasional offers. If you have bought from us, we may send information about similar products.
You can opt out at any time by using the unsubscribe link in any marketing email, or by emailing info@ecoels.co.uk. Opting out of marketing does not stop service messages about an order you have placed.
We do not sell your personal information, and we do not share it with third parties for their own marketing.
6. Cookies and similar technologies
Our website uses cookies and similar technologies. Essential cookies are needed for the site to work — for example, remembering the contents of a basket. Analytics, advertising and social media cookies are only set where you have given consent through our cookie banner.
You can change or withdraw your cookie choices at any time through [cookie settings link], and you can block or delete cookies in your browser settings, though some parts of the site may then not work properly.
Full details of the cookies we use, who sets them and how long they last are in our Cookie Policy.
[The cookie policy must list the actual cookies in use. Run a cookie scan on the finished site before publishing, and make sure no non-essential cookies fire before consent is given.]
7. Who we share your information with
We share personal information only where necessary, with:
- Website and e-commerce platform providers who host the site and process orders — [name provider, e.g. WordPress hosting, WooCommerce/Shopify]
- Payment providers who process payments securely — [name providers, e.g. Stripe, PayPal, Apple Pay, Google Pay]
- Delivery and fulfilment partners who dispatch and deliver orders — [name providers]
- Email and marketing platforms used to send newsletters and service emails — [name provider]
- Analytics providers who help us understand website use — [name provider, e.g. Google Analytics]
- Review platforms where reviews are collected or displayed — [name provider]
- Marketplaces, where an order was placed through them
- Professional advisers such as accountants and lawyers, where needed
- Regulators, authorities or law enforcement, where we are legally required to do so
If our business is sold or reorganised, personal information may transfer to the new owner, who must continue to protect it in line with this policy.
Everyone who processes personal information on our behalf is required to keep it secure and use it only for the purposes we specify.
8. International transfers
Some of our providers may process personal information outside the UK. Where that happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for details of the safeguards used by contacting info@ecoels.co.uk.
9. How long we keep information
| Information | Retention period |
|---|---|
| Order and transaction records | 6 years after the end of the relevant tax year, to meet HMRC requirements |
| Customer service correspondence | [2–3 years] after the enquiry is closed |
| Quality and safety investigation records | [Period] — confirm with your product compliance adviser |
| Wholesale enquiry records | [2 years] from the last contact, unless a trading relationship begins |
| Marketing subscriber records | Until you unsubscribe, plus a suppression record so we do not contact you again |
| Website analytics data | [Period set in your analytics tool] |
When information is no longer needed, we delete it or anonymise it so it can no longer identify you.
10. Orders placed through marketplaces and retailers
If you bought an EcoEls product through Amazon, eBay, another marketplace or a retail store, that company collects and controls your personal information under its own privacy policy. We only receive what is needed to fulfil or support the order.
For delivery changes, returns or refunds on a marketplace order, please contact that marketplace directly. We will help with product information wherever we can.
11. Your rights
Under UK data protection law you have the right to:
- be informed about how your information is used — this policy
- access a copy of the personal information we hold about you
- have inaccurate information corrected
- have information erased, in certain circumstances
- restrict how we use your information, in certain circumstances
- data portability — receive certain information in a machine-readable format
- object to processing based on legitimate interests, and to direct marketing at any time
- withdraw consent at any time, where we rely on consent
To exercise any of these rights, email info@ecoels.co.uk or write to us at the address in section 1. We will respond within one month. We may ask you to confirm your identity first. Exercising these rights is free of charge in almost all cases.
12. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so we can try to put it right.
You also have the right to complain to the UK regulator:
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Helpline: 0303 123 1113 ico.org.uk
13. Children
Our website and products are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
14. Security
We use appropriate technical and organisational measures to protect personal information, including secure hosting, encrypted connections (HTTPS), restricted access to systems, and providers who meet recognised security standards. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
15. Links to other websites
Our website and journal articles may link to other websites. We are not responsible for their content or their privacy practices. Please read their privacy policies before providing any personal information.
16. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Where changes are significant, we will bring them to your attention through the website or by email.
17. How to contact us
| info@ecoels.co.uk | |
| Telephone | 020 3807 3305 |
| Post | [Legal company name], Unit 0045, Access Self Storage, 20 Bugsby’s Way, Charlton, London SE7 7SJ |
Before you publish — checklist
This draft is written to the structure UK data protection law expects, but it is not legal advice. A policy that does not match what the website actually does is worse than no policy at all, because it becomes a written record of a promise you are not keeping. Please confirm the following before this goes live:
- Company details. Confirm the legal entity name and whether EcoEls trades as a limited company or a sole trader — this changes the wording in section 1 and what the website footer must show.
- ICO registration. Check whether registration and the annual data protection fee apply.
- Every provider named. Replace each
[name provider]with the actual services in use — hosting, e-commerce platform, payment, delivery, email marketing, analytics, reviews. Remove any category you do not use. - Cookie scan. Run a scan on the finished site and build the cookie policy from the real result. Confirm no analytics or advertising cookies fire before consent, and that rejecting is as easy as accepting.
- Retention periods. Fill in the bracketed periods and make sure they match what you actually do.
- International transfers. Confirm which providers process data outside the UK and what safeguards are in place.
- Marketing. Confirm the newsletter uses a genuine opt-in, that the consent line appears at the point of sign-up, and that every marketing email carries an unsubscribe link.
- Email addresses. Set up and monitor whichever addresses you publish.
- Legal review. Have a UK solicitor or data protection adviser review the final version alongside your Terms and Conditions, especially if you sell into the EU as well as the UK.