Privacy Policy

Last updated: [insert date]

1. Introduction Echo Valley Entertainment ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our entertainment services, websites, applications, and any related services (collectively, the "Services").

We act as a data controller for the purposes of applicable data protection laws in England, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect We may collect and process the following categories of personal data:

2.1 Data you provide directly

• Contact details (e.g. name, email address, telephone number, postal address)
• Account details (e.g. username, password, security credentials)
• Payment and billing information (e.g. partial card details, billing address, transaction details – processed via secure third-party payment providers)
• Communication content (e.g. messages you send to us, support requests, feedback, survey responses)
• Preferences (e.g. language, marketing preferences, content interests)

2.2 Data collected automatically When you access or use our Services, we may automatically collect:

• Device information (e.g. device type, operating system, browser type, unique device identifiers)
• Usage data (e.g. pages viewed, features used, time and date of visits, time spent on pages, clicks, interactions)
• Log information (e.g. IP address, access times, error logs, diagnostic data)
• Approximate location data derived from your IP address (country or city level only, unless you explicitly provide more precise data)

2.3 Data from third parties We may receive personal data about you from:

• Social media or single sign-on providers when you choose to register or log in via those services
• Payment processors and fraud prevention partners
• Advertising, analytics, and business partners who help us understand usage patterns and improve our Services

3. Legal Bases for Processing We process your personal data only where we have a lawful basis under the UK GDPR, including:

   • Performance of a contract: to provide and manage the Services you request
   • Legitimate interests: to operate, improve, and secure our Services, and to conduct reasonable marketing and analytics, where your rights do not override these interests
   • Consent: for certain marketing activities, use of non-essential cookies, or where required by law
   • Legal obligation: to comply with applicable laws, regulations, and lawful requests from authorities

4. How We Use Your Data We use personal data for the following purposes:

   • To provide, operate, and maintain our entertainment Services
   • To create and manage your account and user profile
   • To process transactions and send related information (such as purchase confirmations, invoices, and subscription details)
   • To personalise content, recommendations, and user experience
   • To communicate with you, including responding to your enquiries and providing customer support
   • To send you service-related notices (e.g. changes to terms, service updates, security alerts)
   • To send you marketing communications about our Services, events, offers, and promotions (where permitted by law and your preferences)
   • To analyse usage patterns, measure performance, and improve our Services, features, and content
   • To detect, prevent, and investigate fraud, abuse, security incidents, and other harmful activities
   • To comply with legal obligations and to establish, exercise, or defend legal claims

5. Cookies and Similar Technologies We use cookies and similar technologies (such as pixels and local storage) to:

   • Enable essential functionality of the Services
   • Remember your preferences and settings
   • Analyse usage and performance
   • Support marketing and advertising efforts

Where required by law, we will request your consent before placing non-essential cookies on your device. You can manage your cookie preferences through your browser settings and, where available, through our cookie banner or preference centre. Disabling certain cookies may affect the functionality of the Services.

6. How We Share Your Data We do not sell your personal data. We may share your data with:

6.1 Service providers and partners Trusted third parties who perform services on our behalf, such as:

• Hosting and cloud service providers
• Payment processors and financial institutions
• Analytics and performance monitoring providers
• Customer support and communication tools
• Marketing and advertising partners (where permitted by law and your preferences)

These parties are only permitted to process your data in accordance with our instructions and for the purposes described in this Privacy Policy.

6.2 Group companies If Echo Valley Entertainment is part of a group of companies, we may share data within the group for internal administrative purposes, to provide the Services, and to improve operations, subject to appropriate safeguards.

6.3 Legal and regulatory requirements We may disclose personal data if required to do so by law or where we reasonably believe that such action is necessary to:

• Comply with a legal obligation, regulation, or lawful request
• Protect and defend our rights, property, or safety, or those of our users or others
• Detect, prevent, or address fraud, security, or technical issues

6.4 Business transfers If we are involved in a merger, acquisition, reorganisation, sale of assets, or similar business transaction, your personal data may be transferred as part of that transaction, subject to continued protection consistent with this Privacy Policy.

7. International Data Transfers We are based in England, but some of our service providers or partners may be located outside the UK or the European Economic Area (EEA). Where your personal data is transferred internationally, we will ensure an adequate level of protection by:
   • Transferring to countries that have been deemed to provide an adequate level of protection by the UK government; or
   • Using appropriate safeguards, such as standard contractual clauses approved by the UK authorities; or
   • Relying on other lawful transfer mechanisms as permitted under applicable law.

You may contact us for more information about the safeguards we use for international data transfers.

8. Data Retention We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to:
   • Provide and maintain the Services
   • Comply with legal, accounting, or reporting obligations
   • Resolve disputes and enforce our agreements

When personal data is no longer required, we will delete or anonymise it, or, where this is not possible, securely store it and restrict access.

9. Your Rights Under the UK GDPR and applicable data protection laws, you have the following rights (subject to certain limitations):
   • Right of access: to obtain confirmation whether we process your data and to request a copy of your personal data
   • Right to rectification: to have inaccurate or incomplete personal data corrected
   • Right to erasure: to request deletion of your personal data in certain circumstances
   • Right to restriction: to request restriction of processing in certain circumstances
   • Right to data portability: to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where applicable
   • Right to object: to object to processing based on our legitimate interests or for direct marketing
   • Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us using the details in section 12. We may need to verify your identity before responding to your request. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or another competent supervisory authority.

10. Children’s Privacy Our Services are not knowingly directed at children under the age required by applicable law (typically 13 or 16, depending on jurisdiction). We do not knowingly collect personal data from children below the relevant age without appropriate parental consent.

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us so that we can delete such data where required.

11. Security We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or destruction. These measures include, where appropriate, encryption, access controls, and regular security reviews.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Contact Us If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, you may contact us at:

Echo Valley Entertainment [Insert postal address] [Insert email address] [Insert telephone number]

13. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will take appropriate steps to inform you, such as by posting a prominent notice on our website or contacting you directly where required by law.

Please review this Privacy Policy periodically to stay informed about how we handle your personal data.