TLDR: echo3.co is a trading name of Merdeka Ltd (Company No. 07488028). I only collect minimal personal data when you explicitly send a contact message or submit an optional game score. Data is processed under UK GDPR, hosted securely on Netlify & Microsoft 365, and never sold to third parties.

1. Data Controller Information

The website echo3.co is owned and operated by Merdeka Ltd, a private limited company registered in England and Wales.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal information is:

2. Personal Data Collected

Merdeka Ltd collects and processes personal data strictly necessary to operate this website and deliver IT services:

  • Contact Inquiries: When you submit a contact form or email, we collect your name, email address, phone number (if provided), and message details.
  • Interactive Features & Leaderboards: Optional name or handle submitted to public high-score boards (e.g. Floppy Dash, Sun Metal Crown, or Tavern Dice).
  • Technical & Access Logs: Standard HTTP server logs gathered by our hosting infrastructure (Netlify), including IP addresses, browser user agents, referring URLs, and access timestamps.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases set out in Article 6 of the UK GDPR:

  • Contract Performance / Pre-contract Steps: Processing necessary to respond to client inquiries, provide service quotes, and perform retained IT support contracts.
  • Legitimate Interests: Processing required to maintain system security, filter spam via automated form protection, and monitor website health.
  • Consent: Processing based on your affirmative action when submitting optional leaderboard scores or agreeing to analytics cookies.

4. Third-Party Data Processors

Your personal data is hosted and processed securely using reputable cloud infrastructure providers operating under compliant Data Processing Agreements (DPAs):

  • Netlify, Inc.: Website hosting, global CDN, and serverless contact form submission handling.
  • Microsoft Ireland Operations Ltd / Microsoft 365: Business email communication and calendar booking services.

Merdeka Ltd does not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Cookies & Analytics

This website uses Google Analytics 4 (GA4) to measure traffic, page views, and user interaction patterns. GA4 places standard first-party analytics cookies (_ga, _ga_*) in your browser when consent is granted.

We implement Google Consent Mode v2, keeping analytics cookies disabled (analytics_storage: 'denied') until you explicitly click [ ACCEPT ] on our CRT consent banner. You may update your preference at any time. Local storage (localStorage) is also used for storing game high score states.

6. Data Retention

Contact inquiries and business communications are retained for as long as necessary to fulfill service inquiries, maintain active client accounts, or comply with statutory statutory accounting records (up to 6 years for UK tax compliance). Netlify server access logs are automatically rotated and purged in accordance with standard infrastructure retention policies.

7. Your Statutory Privacy Rights

Under UK GDPR, you hold the following rights regarding your personal information:

  • Right of Access: Request copies of personal data held by Merdeka Ltd.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
  • Right to Restrict or Object: Object to or restrict specific data processing activities.
  • Right to Data Portability: Request transfer of your data to another controller.

To exercise any of these statutory rights, please email jude@echo3.co.

8. Complaints

If you have concerns regarding how Merdeka Ltd processes your data, please contact Jude Sudbury directly first. You also have the legal right to lodge a complaint with the UK data protection supervisory authority:

  • Information Commissioner’s Office (ICO): ico.org.uk / Telephone: 0303 123 1113.

← back to home