Privacy Policy

1. Data Controller

Echo Collective LLC, operating as Better Societies, is the data controller for personal data collected through this website and our services. Our registered address is in New York, USA. Contact us at info@bettersocieties.world.

2. Data We Collect

We collect the following categories of personal data:

Contact information: name, email address, company name, country.
Usage data: pages visited, time on site, referral source (via analytics).
Communication data: messages sent through our qualification form or email.
Payment data: billing details processed by Stripe (we never store card numbers).
Scheduling data: name, email, and calendar availability for booked calls.

3. Legal Basis for Processing

Processing Activity	Legal Basis
Responding to qualification form submissions	Legitimate interests (pre-contractual)
Sending newsletters you subscribed to	Consent
Processing payments for services	Contract performance
Analytics to improve the website	Legitimate interests
Legal compliance	Legal obligation

4. How We Use Your Data

We use your personal data to respond to enquiries, deliver our compliance services, send newsletters you have opted into, improve our website, and meet legal obligations. We do not sell your data to third parties. We do not use your data for automated decision-making.

5. Data Retention

We retain contact and communication data for up to 3 years from last contact, unless you request deletion earlier. Payment records are retained for 7 years to meet accounting and tax obligations. Analytics data is retained for 24 months. You may request deletion of your personal data at any time.

6. Sub-processors

We share personal data with the following sub-processors to deliver our services. Each is bound by a data processing agreement and appropriate transfer mechanisms.

Sub-processor	Purpose	Safeguards
Stripe, Inc.	Payment processing	SCCs Module Two
Google LLC	Analytics, email (Workspace)	SCCs Module Two
n8n GmbH (Germany)	Workflow automation	Intra-EEA, GDPR Art 28
Cal.com, Inc.	Scheduling	SCCs Module Two
Supabase, Inc.	Database hosting	SCCs Module Two
Vercel, Inc.	Web hosting	SCCs Module Two
Sanity AS (Norway)	Content management	EEA, no SCCs
Beehiiv, Inc.	Newsletter distribution	SCCs Module Two

7. Your Rights (GDPR)

If you are in the European Economic Area or UK, you have the following rights:

Access: request a copy of data we hold about you.
Rectification: ask us to correct inaccurate data.
Erasure: request deletion of your personal data.
Restriction: ask us to limit how we process your data.
Portability: receive your data in a machine-readable format.
Objection: object to processing based on legitimate interests.
Withdraw consent: unsubscribe from newsletters at any time.

To exercise any right, contact us at info@bettersocieties.world. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use cookies for analytics and to remember your preferences. For full details, see our Cookie Policy.

9. Updates to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by email where we hold your contact details.