Privacy Policy

This Privacy Policy explains how EC Solution handles personal data collected through our website at ecsolution.co.uk and through our client engagement process. It describes what we collect, why we collect it, how long we keep it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

EC Solutions Global Limited is a company registered in England and Wales, trading as EC Solution. We provide fractional CFO services to UK small and medium-sized businesses.

For the purposes of UK data protection law, EC Solutions Global Limited is the data controller for personal data we collect directly. If you have any questions about this policy or how we handle your data, please contact us at hello@ecsolution.co.uk.

2. The data we collect

We collect personal data in the following situations:

Enquiries and contact form

When you submit a contact form or email us directly, we collect the information you provide, which typically includes your name, email address, business name, role, and any details you share in the message.

Free tools and assessments

When you use our free tools (the Day Rate Calculator, the Financial Leak Calculator, or the Scale-up & Exit Readiness Assessment) and choose to receive a report, we collect the name, email address, company name, and any business details you enter. Calculations performed in the tools are also stored alongside your submission so we can produce the personalised report.

Client engagements

When you engage us for fractional CFO services, we necessarily process a wider range of personal and business data required to deliver those services. That processing is governed by our engagement letter and any accompanying data processing agreement, rather than by this website privacy policy.

Website analytics

We use Google Analytics (GA4) to understand how visitors use our website in aggregate. Which pages they visit, how they arrived, roughly where they are in the world, and which devices they use. Where consent is required, this is set through the cookie consent options explained in our Cookie Policy.

3. Why we use your data

We only process your personal data for specific, legitimate purposes:

• To respond to your enquiry and communicate with you about our services
• To deliver the personalised report or result you requested from one of our free tools
• To send occasional relevant insights and updates, where you have agreed to receive them
• To provide and manage our fractional CFO services where you become a client
• To comply with our legal, regulatory, and accounting obligations
• To improve our website, our tools, and the quality of our service

4. Legal basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:

• Consent. When you opt in to receive marketing communications or to have us send you the report from one of our tools. You can withdraw consent at any time.
• Legitimate interests. When we reply to a direct enquiry, when we deliver a requested service, and when we use analytics to understand and improve how our site performs.
• Contract. When processing is necessary to deliver services you have engaged us for.
• Legal obligation. When we need to keep records to comply with tax, accounting, anti-money-laundering, or other legal duties.

5. Who we share your data with

We share personal data only with carefully selected providers who help us run our business. These currently include:

• Netlify. Our website and form hosting provider.
• Google. For website analytics (Google Analytics 4) and business email (Google Workspace).
• Our accountants, auditors, and professional advisors. Where necessary and under professional confidentiality obligations.
• HMRC and other regulators. Where legally required.

Each of these providers is bound by contractual obligations that require them to handle your data securely and only for the purposes we specify. Some of them may process data outside the UK; where that happens, we rely on appropriate safeguards such as UK adequacy decisions or Standard Contractual Clauses.

6. How long we keep your data

We keep personal data for no longer than we need it. In practice:

• Enquiry and tool submission data. Up to 24 months from your last interaction, unless you become a client
• Marketing communication records. Until you unsubscribe, after which we retain a minimal suppression record so we do not contact you again
• Client engagement records. For at least 7 years after the end of the engagement, to meet our accounting and professional obligations
• Website analytics. Retained in line with Google Analytics default settings

7. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access. To ask for a copy of the personal data we hold about you
• Right to rectification. To ask us to correct inaccurate or incomplete data
• Right to erasure. To ask us to delete your data, where we are not required to keep it
• Right to restrict processing. To ask us to pause processing in certain circumstances
• Right to object. Including objecting to direct marketing at any time
• Right to data portability. To receive your data in a structured, commonly used format
• Right to withdraw consent. At any time where consent is our legal basis

To exercise any of these rights, email hello@ecsolution.co.uk. We will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.

8. Security

We take reasonable technical and organisational measures to protect personal data against loss, unauthorised access, and accidental disclosure. These measures include encrypted connections (HTTPS) for data transmitted to our website, access controls on the systems that hold client data, and the use of reputable providers with strong security postures. No system is perfectly secure, and we cannot guarantee absolute security; but we take the protection of your data seriously.

9. Cookies

Our website uses a small number of cookies and similar technologies, primarily for analytics. Full details are set out in our Cookie Policy.

10. Children

Our services are directed at business decision-makers. We do not knowingly collect personal data from anyone under the age of 18.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be communicated by an appropriate notice on the website.

12. Contact

Questions about this policy or about how we handle your data can be sent to hello@ecsolution.co.uk.