Privacy Policy

Effective Date: April 1, 2026

eCora LLC ("Company," "we," "our," or "us") operates the website https://ecoradigital.com (the "Site") and provides digital marketing and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or engage with our services, including when acting as a vendor or partner (such as with Klaviyo).By using our Site or services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect information about you in a variety of ways, including:

Personal Data

Personally identifiable information, such as your name, email address, phone number, company name, and other information you voluntarily provide when you:

  • Fill out forms on our SiteContact us directly

  • Engage with our services

Client Data

As part of providing services, we may process data on behalf of our clients, including customer data managed through platforms such as Klaviyo. This data is processed strictly according to client instructions and applicable agreements.

Automatically Collected Information

We may automatically collect certain information when you visit our Site, including:

  • IP address

  • Browser type

  • Operating system

  • Access times

  • Pages viewed

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyze usage, and support marketing efforts.

2. How We Use Your Information

We may use the information we collect to:

  1. Provide, operate, and maintain our services

  2. Communicate with you

  3. Improve our website and services

  4. Comply with legal obligations

  5. Perform analytics and marketing activities

When acting as a service provider (e.g., for Klaviyo-related services), we process data only as instructed by our clients.

3. How We Share Your Information

We do not sell personal information. We may share your information with:

Service Providers: Third-party vendors who perform services on our behalf (including platforms like Klaviyo)

Legal Requirements: When required by law or to protect rights and safety

Business Transfers: In connection with mergers, sales, or asset transfers

4. Data Processing on Behalf of Clients

When eCora LLC processes personal data on behalf of clients (including via Klaviyo), we act as a data processor/service provider. In these cases:

  • The client is the data controller/business

  • We process data only per client instructions

  • We implement appropriate safeguards to protect data

5. Data Security

We use administrative, technical, and physical security measures to protect your information. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

7. Your Privacy Rights

Depending on your location, you may have rights including:

  • Access to your personal data

  • Correction of inaccurate data

  • Deletion of your data

  • Objection to or restriction of processing

To exercise your rights, contact us at the email below.

8. Third-Party Websites

Our Site may contain links to third-party websites. We are not responsible for their privacy practices.

9. Children's Privacy

Our services are not directed to individuals under 13, and we do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:eCora LLC
Email: hello@ecoradigital.com
Website: https://ecoradigital.com

12. Data Protection and Compliance Enhancements

To align with Klaviyo vendor requirements and standard data protection expectations, we provide the following additional disclosures:

Subprocessors

We may engage trusted third-party subprocessors to support service delivery (e.g., hosting, analytics, CRM, and email platforms such as Klaviyo). These providers are contractually obligated to safeguard personal data and process it only according to our instructions.

Data Processing Agreements (DPA)

We offer Data Processing Agreements to clients where required, outlining roles, responsibilities, and safeguards for processing personal data.

Lawful Basis for Processing (GDPR)

Where applicable, we process personal data under lawful bases such as:

  • Performance of a contract

  • Legitimate interests

  • Consent (where required)

  • Compliance with legal obligations

International Data Transfers

If data is transferred outside of the United States, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

Consumer Rights (CCPA/CPRA)

For California residents, we provide the following rights:

  • Right to know what personal data is collected and how it is used

  • Right to request deletion of personal data

  • Right to correct inaccurate data

  • Right to opt out of the sale or sharing of personal data (we do not sell personal data)

  • Right to non-discrimination for exercising privacy rights

Requests can be submitted via hello@ecoradigital.com.

Data Breach Notification

In the event of a data breach affecting personal data, we will notify affected clients and/or individuals as required by applicable law.

Security Practices

We implement reasonable industry-standard safeguards including:

  • Access controls and authentication

  • Data encryption where appropriate

  • Secure infrastructure and hosting practices

13. Additional Transparency Commitments

We are committed to:

  • Minimizing data collection to what is necessary

  • Processing data only for specified purposes

  • Maintaining confidentiality of client data

14. Contact for Privacy Matters

For privacy-specific inquiries, data requests, or compliance questions, contact:

Email: hello@ecoradigital.com

This Privacy Policy is designed to meet common vendor requirements and to support compliance with applicable data protection laws.