Privacy Policy
Last updated: 6 October 2026
Echo 7® is a trading name of Solvida Ltd, a company registered in England and Wales (company number 7232433), with its registered office at 124 City Road, London, EC1V 2NX, United Kingdom. Solvida Ltd is the data controller responsible for your personal data.
This policy explains what information we collect when you use this website or get in touch with us, the lawful basis on which we process it, how long we keep it, and the rights you have under UK data protection law.
Who we are and how to contact us
If you have any questions about this policy or about how we handle your personal data, you can contact us at hello@echo7.io or by writing to us at the registered address above.
What we collect
Information you give us. When you submit the contact form on this site, we collect the information you provide directly: your name, business email address, phone number (if given), company name, job title (if given), and the message you write to us.
Information collected automatically. We collect standard analytics data about how visitors use this site, such as pages viewed, approximate location, device and browser type, and how you arrived at the site. This is collected through Google Analytics and, if you accept analytics cookies, Microsoft Clarity, which also records how you move around and click on pages (see Cookies below).
How we use your information and our lawful basis
| Activity | Purpose | Lawful basis (UK GDPR) |
|---|---|---|
| Responding to contact form enquiries | To answer your enquiry and correspond with you | Legitimate interests (Article 6(1)(f)) — responding to a request you have made |
| Managing an ongoing client relationship | To deliver services, manage the engagement, and administer payments | Performance of a contract (Article 6(1)(b)) |
| Keeping financial and accounting records | To meet our legal obligations to HMRC and Companies House | Legal obligation (Article 6(1)(c)) |
| Analytics and session recordings using cookies | To understand how the site is used and to improve it | Consent (Article 6(1)(a)), given through our cookie banner |
| Basic visit measurement without cookies, when cookies are declined | To count visits and see overall site performance | Legitimate interests (Article 6(1)(f)), our interest in knowing how the site is used |
We do not sell, rent, or share your information with third parties for marketing purposes.
Cookies
This website uses cookies and similar technologies. Storage that keeps the site working and remembers your cookie choice is always on. Analytics cookies from Google Analytics and Microsoft Clarity are only set if you accept them in the cookie banner.
If you decline or ignore the banner, Google Analytics still receives limited signals from your visit, such as the page viewed, your approximate location (taken from your IP address) and your device and browser type. No cookie is set and you are not recognised across visits. Microsoft Clarity does not run at all unless you accept.
You can change your choice at any time using the "Cookie settings" link in the footer of this site, which reopens the cookie banner.
| Name | Provider | Purpose | Duration | When set |
|---|---|---|---|---|
| echo7-cookie-consent | Echo 7 (browser storage) | Remembers your cookie choice | Until you change it or clear your browser | Always |
| _ga | Google Analytics | Distinguishes visitors | 2 years | Only if accepted |
| _ga_(container ID) | Google Analytics | Keeps session state | 2 years | Only if accepted |
| _clck | Microsoft Clarity | Remembers a Clarity user ID and preferences | 1 year | Only if accepted |
| _clsk | Microsoft Clarity | Groups page views into one session | 1 day | Only if accepted |
| MUID, CLID, ANONCHK, MR | Microsoft | Identify the browser for Clarity and Microsoft analytics | 10 minutes to 1 year | Only if accepted, and not always set |
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to your data is limited to those employees, agents, and contractors who have a business need to know.
How long we keep your information
We do not keep personal data for longer than necessary. Our retention periods are:
- Enquiries that do not become client relationships: 12 months from the date of last contact, after which they are deleted.
- Client relationship records: for the duration of the engagement and for 6 years after it ends.
- Financial and accounting records: 6 years from the end of the financial year to which they relate, in line with HMRC requirements.
- Analytics data: retained by Google Analytics for 14 months, in line with our configured retention setting.
- Session recordings and heatmap data: held by Microsoft Clarity for up to 30 days from the time of recording.
Where it is stored and who processes it
Contact form submissions are sent to HubSpot, our customer relationship management (CRM) system, and to our email servers, where they are stored securely alongside client records. Analytics data is processed by Google Analytics and, if you accept analytics cookies, Microsoft Clarity. We also use third-party service providers to host our website and IT infrastructure. These providers act as our processors and process your data only on our documented instructions.
International transfers
Some of our processors, including Google Analytics, Microsoft Clarity and HubSpot, may transfer and store data outside the UK, including in the United States. Where this happens, we ensure an appropriate safeguard is in place — such as a UK adequacy regulation, the UK extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement (IDTA) / Standard Contractual Clauses — so that your data receives an equivalent level of protection.
Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you or that similarly significantly affects you. All decisions about your enquiry or engagement are made by a person.
Your rights
Under UK GDPR, you have the right to:
- ask what personal data we hold about you (access);
- request the correction of inaccurate data (rectification);
- request the deletion of your data (erasure);
- object to or restrict how we process your data;
- request the transfer of your data to you or another provider (portability);
- withdraw your consent at any time, where we rely on consent (this does not affect processing carried out before withdrawal).
To exercise any of these rights, contact us at hello@echo7.io. We will respond within one month.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
We would ask that you contact us first so we have the opportunity to put things right.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.