This Privacy Policy describes how Ecodrain ("we," "us," or "our") collects, uses, stores, shares, and protects personal information when you visit our website at ecodrain.world, use our services, or interact with us in any manner. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) where applicable, and other relevant international data protection laws.
1. Data Controller Information
The data controller responsible for your personal information is:
- Company Name: Ecodrain
- Address: 1439 Haight St, San Francisco, CA 94117, United States
- Phone: +1 415-932-6185
- Email: hello@ecodrain.world
- Website: https://ecodrain.world
For any questions regarding this Privacy Policy or the exercise of your data protection rights, please contact us using the information provided above.
2. Scope of This Policy
This Privacy Policy applies to all personal data collected through our website, contact forms, consulting services, educational programs, email communications, telephone interactions, and any other channels through which you interact with Ecodrain. It does not apply to third-party websites or services that may be linked from our site. We encourage you to review the privacy policies of any external sites you visit.
3. Categories of Personal Data We Collect
3.1 Information You Provide Directly
When you contact us, book a consultation, enroll in a program, or otherwise interact with our services, we may collect the following categories of personal data:
- Identity data: full name, title
- Contact data: email address, telephone number, mailing address
- Communication data: messages, inquiries, feedback, and correspondence content
- Service preference data: consultation format preferences, program interests, scheduling preferences
- Consent records: records of consents you have given, including GDPR consent for data processing
3.2 Information Collected Automatically
When you visit our website, certain technical information may be collected automatically through cookies, log files, and similar technologies, including:
- Device and browser information: IP address, browser type and version, operating system, device type
- Usage data: pages visited, time spent on pages, click patterns, referring URLs, date and time of access
- Cookie data: information stored through cookies and similar tracking technologies as described in our Cookie Policy
3.3 Information We Do Not Collect
We do not intentionally collect sensitive personal data such as medical records, health diagnoses, genetic information, biometric data, or financial account numbers through our general website contact form. Our nutrition consulting services are educational and non-medical. If medical information is discussed during a consulting session, it is treated with heightened confidentiality and processed only as necessary to provide our educational services.
4. Purposes of Data Processing
We process your personal data for the following specific purposes:
- Service delivery: To respond to your inquiries, schedule and conduct consulting sessions, deliver educational programs, and provide customer support
- Communication: To send confirmations, session reminders, educational materials, and responses to your questions
- Website operation: To maintain, secure, and improve our website functionality and user experience
- Analytics: To understand how visitors use our website, identify trends, and improve our content and services, where you have consented to analytics cookies
- Legal compliance: To comply with applicable laws, regulations, legal processes, and governmental requests
- Legitimate interests: To protect our rights, prevent fraud, ensure network security, and enforce our Terms of Use
- Marketing: To send promotional communications about our services where you have provided explicit consent
5. Legal Bases for Processing (GDPR)
Under the GDPR, we rely on the following legal bases for processing your personal data:
- Consent (Article 6(1)(a)): For analytics cookies, marketing communications, and any processing where we have obtained your explicit consent
- Contract performance (Article 6(1)(b)): For processing necessary to fulfill our consulting services or respond to pre-contractual inquiries
- Legal obligation (Article 6(1)(c)): For processing required to comply with applicable laws and regulations
- Legitimate interests (Article 6(1)(f)): For website security, fraud prevention, and improving our services, where these interests are not overridden by your rights
6. Data Sharing and Third Parties
We do not sell your personal data to third parties. We may share your information with the following categories of recipients under strict data protection agreements:
- Service providers: Hosting providers, email delivery services, analytics platforms (only when consented), and payment processors for program fees
- Professional advisors: Lawyers, accountants, and auditors where necessary for legal or business purposes
- Legal authorities: Government bodies or law enforcement when required by law or to protect our legal rights
All third-party service providers are contractually obligated to process your data only for specified purposes, maintain appropriate security measures, and comply with applicable data protection laws.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or rely on other lawful transfer mechanisms to ensure your data receives an adequate level of protection.
8. Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods include:
- Contact form inquiries: Retained for 24 months from the date of submission, unless an ongoing consulting relationship exists
- Consulting client records: Retained for 5 years after the last session to support follow-up services and comply with professional record-keeping standards
- Program enrollment data: Retained for 3 years after program completion
- Cookie consent records: Retained for 12 months from the date of consent
- Website analytics data: Retained for 26 months where analytics cookies are consented to
- Financial transaction records: Retained for 7 years as required by applicable tax and accounting regulations
When personal data is no longer needed, it is securely deleted or anonymized so it can no longer be associated with you.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted through our website
- Secure server infrastructure with regular security updates and monitoring
- Access controls limiting personal data access to authorized personnel only
- Employee training on data protection and confidentiality obligations
- Regular review and updating of security practices and incident response procedures
- Secure backup systems and disaster recovery protocols
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to maintain robust protections.
10. Your Rights Under GDPR and Applicable Laws
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: Request confirmation of whether we process your data and obtain a copy of your personal data
- Right to rectification: Request correction of inaccurate or incomplete personal data
- Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing
- Right to restriction: Request limitation of processing in certain circumstances
- Right to data portability: Receive your data in a structured, commonly used, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing
- Right to lodge a complaint: File a complaint with a supervisory authority in your jurisdiction
To exercise any of these rights, contact us at hello@ecodrain.world. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing your request.
11. California Consumer Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal data), and the right to non-discrimination for exercising CCPA rights. To submit a CCPA request, contact us using the information in Section 1.
12. Children's Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided us with personal data should contact us immediately.
13. Cookies and Tracking Technologies
Our website uses cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences through our cookie consent banner or browser settings.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy regularly. Continued use of our website after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Ecodrain
- 1439 Haight St, San Francisco, CA 94117, United States
- Phone: +1 415-932-6185
- Email: hello@ecodrain.world