This policy covers eclactra.com and nothing else. It explains what we collect when you read the site, send us a message, subscribe to the newsletter, or book a session through the scheduler - and what we do with it afterwards.
Work carried out under a signed engagement is governed by that agreement and any data processing terms attached to it. Where those terms cover the same data, they take precedence over this page.
Who we are
ECLACTRA™ - Eclectic Actions Trajectory ("ECLACTRA™", "we", "us") operates https://eclactra.com and is the controller of the personal information described here. For anything in this policy - a question, a correction, or a request about your data - write to hello@eclactra.com and it reaches a person, not a queue.
What we collect
Information you give us
All of it is optional, and all of it is something you typed on purpose. Depending on which form you use, that means:
- Contact form: your name, work email, and message. Organization, phone number and country, the areas of interest you tick, and your timeline are optional fields you can leave blank.
- Newsletter: your email address, and nothing else.
- Scheduler: whatever the booking dialog asks for when you book a strategy session. That embed is operated by our scheduling provider and the details you enter go to them under their own privacy policy - see Third parties we use, below.
- Direct email: whatever you choose to put in it, including anything attached.
Information collected automatically
Our hosting infrastructure keeps standard server logs - IP address, browser user agent, the URL requested, and a timestamp. They exist so we can keep the site up and investigate abuse. We do not use them to build a profile of you or to identify individual readers.
We also measure how the site is used, in two layers:
- Cloudflare Web Analytics, for every visitor. It sets no cookies and stores nothing on your device. It counts page views, referring sites, broad location, device type and page speed, and reports them to us only as totals - it does not track you across sites or build a profile of you.
- Google Analytics, only if you allow it in the consent banner. It sets cookies to recognise a returning browser and records which pages you visit and what you do on them - for example which sections you open, whether you send the contact form, or whether you book a session. It never receives what you type into a form: not your name, email, phone number or message. We have switched off its advertising features and Google signals, so this data is not linked to Google advertising profiles.
What we do not collect
- No advertising or cross-site tracking cookies. Analytics cookies are set only if you allow them - see Cookies, below.
- No advertising, heatmap, session-replay, or fingerprinting scripts.
- No payment or card details - this site takes no payments.
- No special-category data (health, biometrics, political or religious views, and so on). Please do not send it through the contact form.
How we use it
- To read and reply to your enquiry, and to work out whether what you need is something we can actually do.
- To send the newsletter, but only if you asked for it.
- To keep a record of our business correspondence with you.
- To keep the site available, secure, and free of abuse.
- To understand, in aggregate, which pages and services people find useful, so we can improve the site.
- To meet legal, tax, and accounting obligations.
We do not sell or rent personal information, we do not share it with advertisers or data brokers, and we do not use what you send us to train machine-learning models.
Legal bases for processing
If you are in the UK or the European Economic Area, we rely on the following bases under the UK GDPR and GDPR:
- Legitimate interests - replying to an enquiry you sent us, keeping records of it, protecting the site from abuse, and cookieless, aggregate measurement of how the site is used.
- Steps prior to a contract - scoping and quoting work you have asked us about.
- Consent - the newsletter, and Google Analytics. You can withdraw either at any time: every newsletter email carries an unsubscribe link, and the Cookie settings link at the foot of every page switches Google Analytics off.
- Legal obligation - where we are required to keep or disclose records.
Third parties we use
We keep this list short on purpose, and each provider only ever sees what it needs to do its job:
- Hosting and infrastructure - serves the site and holds the server logs described above.
- Cloudflare - cookieless, aggregate web analytics for every visitor.
- Google - Google Analytics, only for visitors who allow it.
- Form and email delivery - receives contact form submissions and puts them in our inbox.
- Newsletter platform - stores your email address if, and only if, you subscribe.
- Scheduling provider - operates the embedded booking dialog and the calendar behind it.
These providers process data on our instructions under their own terms. We do not authorise any of them to use your information for their own marketing. We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.
International transfers
We and our providers may process data in countries other than the one you live in. Where personal information moves out of the UK or EEA, we rely on an appropriate transfer mechanism, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.
How long we keep it
- Enquiries and correspondence - for as long as the conversation is live, and up to 24 months after it ends so we have the context if you come back.
- Newsletter subscription - until you unsubscribe.
- Server logs - a short rolling window held by our host, measured in weeks rather than years.
- Google Analytics data - 14 months, after which Google deletes it.
- Cloudflare Web Analytics - aggregate totals only, which identify no one.
- Engagement and billing records - as long as tax and contract law requires us to keep them.
When a retention period ends, the data is deleted or anonymised.
How we protect it
The site is served over TLS, form submissions are validated on the server and never written to any public store, and access to our inbox and records is limited to the people who need it.
No system is perfectly secure, and a web form is not a secure channel. Please do not send confidential documents, credentials, or sensitive personal data through it - tell us it exists and we will set up somewhere appropriate to receive it.
Your rights
Depending on where you live, you may have some or all of the following rights over the information we hold about you:
- Access - ask for a copy of it.
- Correction - have anything inaccurate fixed.
- Deletion - ask us to erase it, where no legal obligation requires us to keep it.
- Restriction and objection - ask us to pause or stop a particular use, including any based on legitimate interests.
- Portability - receive it in a machine-readable format.
- Withdraw consent - unsubscribe from the newsletter, or switch Google Analytics off from the Cookie settings link at the foot of every page, at any time, without affecting anything done before you did.
If you are in California: we do not sell or share personal information as the CCPA and CPRA define those terms, and we have not done so in the preceding twelve months. You may request to know, delete, or correct what we hold, and we will never treat you differently for asking.
To exercise any of this, email hello@eclactra.com and say what you want. We respond within 30 days, and we may ask a question or two first to confirm the request came from you. If you are in the UK or EEA and are unhappy with our answer, you can complain to your supervisory authority - the ICO in the UK - though we would rather you told us first so we can fix it.
Children
This is a business-to-business site and it is not directed at children under 16. We do not knowingly collect their information. If you believe a child has sent us something, email hello@eclactra.com and we will delete it.
Links to other sites
Our Insights articles and case studies sometimes link out. Once you follow a link you are on someone else's site, under their privacy policy, and this one no longer applies.
Changes to this policy
We update this page when what we do changes. The date at the top always reflects the current version, and if a change materially affects how we handle your information, we will say so clearly here rather than quietly editing a line.
Contact us
Questions about this policy, or a request about your information: hello@eclactra.com.