Privacy Policy

Data Collection and Processing

EcoMark ("we," "our," or "us") collects and processes personal information to provide sustainable living solutions and maintain our service quality. We collect information you provide directly, such as when you request product quotes, subscribe to our newsletter, or contact our customer service team.

The types of personal information we may collect include your name, email address, phone number, postal address, project specifications, property details, and communication preferences. We also collect technical information automatically, including IP addresses, browser types, device identifiers, and website usage patterns.

Lawful Basis for Processing

We process your personal information based on several lawful grounds under applicable privacy laws:

• Contractual necessity: To fulfill our obligations when providing quotes and services
• Legitimate interests: To improve our services, conduct business analytics, and ensure security
• Consent: For marketing communications and optional data processing activities
• Legal compliance: To meet regulatory requirements and legal obligations

Information Usage and Purpose

We use your personal information for the following purposes:

• Providing product recommendations and generating accurate quotes
• Processing orders and coordinating installation services
• Communicating about your projects and providing customer support
• Sending newsletters and promotional materials (with your consent)
• Conducting market research and improving our service offerings
• Ensuring website security and preventing fraudulent activities
• Complying with legal obligations and regulatory requirements

Third-Party Data Sharing

We may share your personal information with trusted third parties in the following circumstances:

• Service providers: Installation contractors, shipping companies, and payment processors
• Business partners: Manufacturers and suppliers for product fulfillment
• Professional advisors: Legal counsel, accountants, and business consultants
• Regulatory authorities: When required by law or to protect our legal rights

We require all third parties to maintain appropriate security measures and use your information only for specified purposes. We do not sell your personal information to third parties for their marketing purposes.

International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction. When we transfer your information internationally, we implement appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent protection levels
• Binding corporate rules for intra-group transfers
• Certification schemes and codes of conduct

Data Security Measures

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms for our systems
• Employee training on data protection and security best practices
• Incident response procedures for potential security breaches

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to enhance our protective measures.

Data Retention Policies

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Our retention periods vary based on the type of information and purpose:

• Customer records: 7 years after last interaction for tax and legal compliance
• Marketing data: Until you withdraw consent or 3 years of inactivity
• Website analytics: 26 months from collection date
• Support communications: 3 years for quality assurance purposes

When retention periods expire, we securely delete or anonymize your information unless longer retention is required by law.

Individual Rights and Controls

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request copies of your personal information we hold
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent for consent-based processing

To exercise these rights, contact us using the information provided below. We will respond to your request within the timeframes required by applicable law.

Cookie and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. Our cookie policy provides detailed information about the types of cookies we use and how to manage your preferences.

You can control cookie settings through your browser preferences or our cookie consent banner. Please note that disabling certain cookies may affect website functionality and your user experience.

Marketing Communications

With your consent, we may send you marketing communications about our products, services, and sustainability tips. You can opt out of marketing emails at any time by:

• Clicking the unsubscribe link in any marketing email
• Contacting us directly to update your preferences
• Managing your preferences through your account settings

Even if you opt out of marketing communications, we may still send you transactional messages related to your orders or account.

Children's Privacy Protection

Our services are not directed to children under 16 years of age, and we do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information promptly.

Parents or guardians who believe their child has provided personal information to us should contact us immediately so we can address the situation appropriately.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how it's used
• The right to delete personal information we have collected
• The right to opt out of the sale of personal information
• The right to non-discrimination for exercising privacy rights

We do not sell personal information as defined by the CCPA. California residents can exercise their rights by contacting us through the methods provided in this policy.

European Data Protection Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and similar laws. These include all rights mentioned in the Individual Rights section above.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information in accordance with applicable law.

Business Transfers and Changes

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information and provide you with choices regarding your information.

Any successor organization will be bound by the commitments made in this privacy policy unless you consent to changes.

Policy Updates and Notifications

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new effective date
• Sending email notifications to registered users
• Displaying prominent notices on our website

We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Our Data Protection Officer can be reached at dpo@ecoma-rk.com for matters specifically related to data protection compliance.