Information We Collect
At EchoHarborStudio, we collect information that helps us provide better flower care education and career development services. We're transparent about what we gather and why we need it.
Personal Information You Provide
- Name, email address, and phone number when you contact us or enroll in programs
- Educational background and career interests during program applications
- Payment information when you purchase courses or materials (processed securely by third-party providers)
- Communication preferences and feedback you share with us
- Resume and portfolio information for career development services
We also automatically collect certain technical information when you visit our website, including your IP address, browser type, device information, and pages you visit. This helps us understand how people use our site and improve the experience.
| Data Type | Purpose | Legal Basis (India) |
|---|---|---|
| Contact Information | Program enrollment and communication | Consent & Contract Performance |
| Educational Data | Course customization and progress tracking | Legitimate Interest |
| Technical Data | Website optimization and security | Legitimate Interest |
How We Use Your Information
Your information helps us deliver quality education and support your career development journey. We don't sell your personal data to third parties, and we only use it for legitimate educational and business purposes.
- Providing flower care education programs and career development services you've requested
- Communicating about course updates, schedules, and important program information
- Processing payments and managing your account securely
- Improving our educational content based on feedback and learning outcomes
- Sending relevant information about new programs or resources (only with your consent)
- Complying with legal obligations and protecting our legitimate business interests
Marketing Communications
We'll only send you marketing emails if you've specifically opted in. You can unsubscribe at any time using the link in our emails or by contacting us directly. We respect your preferences and won't overwhelm your inbox.
Information Sharing and Disclosure
We're careful about who we share your information with. Generally, we keep your data within our organization, but there are specific situations where sharing is necessary or beneficial for your educational experience.
Service Providers: We work with trusted third parties who help us deliver our services. This includes payment processors, email service providers, and educational platform providers. These partners are contractually obligated to protect your data and only use it for specified purposes.
Business Partnerships: Occasionally, we may share anonymized data with educational partners or industry contacts to help develop better programs. Individual identifying information is never shared without your explicit consent.
Legal Requirements: We may disclose your information if required by Indian law, court order, or to protect our rights and the safety of our students and staff.
What We Never Do
- Sell your personal information to marketers or data brokers
- Share your data with competitors or unrelated businesses
- Use your information for purposes you haven't agreed to
Data Security and Protection
We take data security seriously because your trust matters to us. Our security measures are designed to protect against unauthorized access, alteration, disclosure, or destruction of your personal information.
We use industry-standard encryption for data transmission and storage. Our systems are regularly updated and monitored for security vulnerabilities. Access to your personal data is restricted to authorized personnel who need it to perform their duties.
However, no internet transmission is 100% secure. While we strive to protect your data, we can't guarantee absolute security. We encourage you to use strong passwords and keep your login credentials private.
Security Measures We Implement
- SSL encryption for all data transmission
- Regular security audits and vulnerability assessments
- Restricted access controls and user authentication
- Secure backup systems with encryption
- Staff training on data protection best practices
Your Rights and Choices
Under Indian data protection laws and our commitment to transparency, you have several rights regarding your personal information. We want you to feel in control of your data.
Access: You can request a copy of the personal information we hold about you. We'll provide this within 30 days of your request.
Correction: If any of your information is inaccurate or outdated, you can ask us to correct it. We'll update our records promptly.
Deletion: You can request deletion of your personal data, subject to certain legal and contractual obligations. For example, we may need to retain some information for tax or regulatory purposes.
Portability: For data you've provided directly to us, you can request it in a commonly used, machine-readable format.
How to Exercise Your Rights
To exercise any of these rights, simply email us at [email protected] with your request. Please include enough information to help us locate your account and verify your identity. We typically respond within 15 business days.
Cookies and Tracking Technologies
We use cookies and similar technologies to improve your browsing experience and understand how you interact with our website. Most of these are essential for the site to function properly.
Essential Cookies: These are necessary for our website to work correctly. They enable basic functions like page navigation and access to secure areas.
Analytics Cookies: We use these to understand how visitors interact with our website. This helps us improve our content and user experience. The data is aggregated and anonymous.
Functional Cookies: These remember your preferences and choices to provide a more personalized experience on return visits.
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect website functionality and your user experience.
Data Retention Periods
We don't keep your personal information longer than necessary. Our retention periods depend on the type of information and why we collected it.
Active Students: We retain your educational records and progress data throughout your enrollment and for two years afterward to provide transcripts and support services.
Marketing Contacts: If you've opted in to receive marketing communications, we'll keep your contact information until you unsubscribe or ask us to delete it.
Inquiries and Support: We typically keep correspondence for three years to help resolve any follow-up questions or issues.
Financial Records: Payment and billing information is retained according to Indian tax and accounting requirements, typically seven years.
International Data Transfers
EchoHarborStudio primarily operates within India, and most of your data is stored on servers located within the country. However, some of our service providers may have servers in other countries.
When we do transfer data internationally, we ensure appropriate safeguards are in place. This includes using service providers that comply with international data protection standards and implementing contractual protections.
We're committed to ensuring your data receives adequate protection regardless of where it's processed, in accordance with Indian privacy laws and international best practices.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify you via email or through a prominent notice on our website.
We encourage you to review this policy periodically to stay informed about how we're protecting your information. The "Last Updated" date at the top of this policy indicates when the most recent changes were made.
Your continued use of our services after any changes indicates your acceptance of the updated policy. If you disagree with any changes, please contact us to discuss your options.