This policy covers eclactra.com and nothing else. It explains what we collect when you read the site, send us a message, subscribe to the newsletter, or book a session through the scheduler - and what we do with it afterwards.
Work carried out under a signed engagement is governed by that agreement and any data processing terms attached to it. Where those terms cover the same data, they take precedence over this page.
Who we are
ECLACTRA™ - Eclectic Actions Trajectory ("ECLACTRA™", "we", "us") operates https://eclactra.com and is the controller of the personal information described here. For anything in this policy - a question, a correction, or a request about your data - write to hello@eclactra.com and it reaches a person, not a queue.
What we collect
Information you give us
All of it is optional, and all of it is something you typed on purpose. Depending on which form you use, that means:
- Contact form: your name, work email, and message. Organization, phone number and country, the areas of interest you tick, and your timeline are optional fields you can leave blank.
- Newsletter: your email address, and nothing else.
- Scheduler: whatever the booking dialog asks for when you book a strategy session. That embed is operated by our scheduling provider and the details you enter go to them under their own privacy policy - see Third parties we use, below.
- Direct email: whatever you choose to put in it, including anything attached.
Information collected automatically
Our hosting infrastructure keeps standard server logs - IP address, browser user agent, the URL requested, and a timestamp. They exist so we can keep the site up and investigate abuse. We do not use them to build a profile of you or to identify individual readers.
What we do not collect
- No cookies set by this site, first-party or otherwise.
- No analytics, advertising, heatmap, session-replay, or fingerprinting scripts.
- No payment or card details - this site takes no payments.
- No special-category data (health, biometrics, political or religious views, and so on). Please do not send it through the contact form.
How we use it
- To read and reply to your enquiry, and to work out whether what you need is something we can actually do.
- To send the newsletter, but only if you asked for it.
- To keep a record of our business correspondence with you.
- To keep the site available, secure, and free of abuse.
- To meet legal, tax, and accounting obligations.
We do not sell or rent personal information, we do not share it with advertisers or data brokers, and we do not use what you send us to train machine-learning models.
Legal bases for processing
If you are in the UK or the European Economic Area, we rely on the following bases under the UK GDPR and GDPR:
- Legitimate interests - replying to an enquiry you sent us, keeping records of it, and protecting the site from abuse.
- Steps prior to a contract - scoping and quoting work you have asked us about.
- Consent - the newsletter. You can withdraw it at any time, and every send carries an unsubscribe link.
- Legal obligation - where we are required to keep or disclose records.
Third parties we use
We keep this list short on purpose, and each provider only ever sees what it needs to do its job:
- Hosting and infrastructure - serves the site and holds the server logs described above.
- Form and email delivery - receives contact form submissions and puts them in our inbox.
- Newsletter platform - stores your email address if, and only if, you subscribe.
- Scheduling provider - operates the embedded booking dialog and the calendar behind it.
These providers process data on our instructions under their own terms. We do not authorise any of them to use your information for their own marketing. We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.
International transfers
We are based in the United States and our providers may process data there or in other countries. Where personal information moves out of the UK or EEA, we rely on an appropriate transfer mechanism, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.
How long we keep it
- Enquiries and correspondence - for as long as the conversation is live, and up to 24 months after it ends so we have the context if you come back.
- Newsletter subscription - until you unsubscribe.
- Server logs - a short rolling window held by our host, measured in weeks rather than years.
- Engagement and billing records - as long as tax and contract law requires us to keep them.
When a retention period ends, the data is deleted or anonymised.
How we protect it
The site is served over TLS, form submissions are validated on the server and never written to any public store, and access to our inbox and records is limited to the people who need it.
No system is perfectly secure, and a web form is not a secure channel. Please do not send confidential documents, credentials, or sensitive personal data through it - tell us it exists and we will set up somewhere appropriate to receive it.
Your rights
Depending on where you live, you may have some or all of the following rights over the information we hold about you:
- Access - ask for a copy of it.
- Correction - have anything inaccurate fixed.
- Deletion - ask us to erase it, where no legal obligation requires us to keep it.
- Restriction and objection - ask us to pause or stop a particular use, including any based on legitimate interests.
- Portability - receive it in a machine-readable format.
- Withdraw consent - unsubscribe from the newsletter at any time, without affecting anything done before you did.
If you are in California: we do not sell or share personal information as the CCPA and CPRA define those terms, and we have not done so in the preceding twelve months. You may request to know, delete, or correct what we hold, and we will never treat you differently for asking.
To exercise any of this, email hello@eclactra.com and say what you want. We respond within 30 days, and we may ask a question or two first to confirm the request came from you. If you are in the UK or EEA and are unhappy with our answer, you can complain to your supervisory authority - the ICO in the UK - though we would rather you told us first so we can fix it.
Children
This is a business-to-business site and it is not directed at children under 16. We do not knowingly collect their information. If you believe a child has sent us something, email hello@eclactra.com and we will delete it.
Links to other sites
Our Insights articles and case studies sometimes link out. Once you follow a link you are on someone else's site, under their privacy policy, and this one no longer applies.
Changes to this policy
We update this page when what we do changes. The date at the top always reflects the current version, and if a change materially affects how we handle your information, we will say so clearly here rather than quietly editing a line.
Contact us
Questions about this policy, or a request about your information: hello@eclactra.com.