Privacy Policy

Ecom Landers ("we", "us", "our") operates the site served at www.ecomlanders.co. We are the data controller for personal information collected through these pages. You can reach us at hello@ecomlanders.com.

We collect two kinds of data:

• Information you give us when you submit an enquiry or booking form: name, email address, phone number, brand website, and anything you tell us about your business.
• Information collected automatically when you visit a page: IP address, browser and device type, referring URL, UTM parameters, the pages and sections you interact with, scroll depth, clicks on CTAs, time on page, and, if you accept cookies, a recording of your visit (mouse movement, clicks, and form input, with passwords and sensitive fields automatically masked).

• To respond to your enquiry and route you to the right next step (booking a call or starting a WhatsApp conversation). Legal basis: performance of pre-contract steps you have requested.
• To run our service securely, including spam prevention and rate limiting. Legal basis: legitimate interest in keeping the service available and free from abuse.
• To measure and improve our pages using product analytics and advertising platforms. Legal basis: your consent, given via the cookie banner. You can withdraw consent at any time.

We use the following processors. Each processes data on our behalf under a data processing agreement.

• Supabase (EU region): hosts our database. Stores form submissions and event mirrors.
• PostHog (EU region): product analytics, including page views, click events, scroll depth, and (with consent) session replays.
• Meta (Facebook) Pixel and Conversions API: advertising attribution for our paid campaigns. Email and name are hashed before transmission. Only fires after consent.
• Google Analytics 4: traffic and conversion measurement. Only fires after consent.
• Stape: server-side container used to relay the Meta Conversions API requests. Only fires after consent.
• Vercel: hosting provider for the pages themselves. Receives access logs (IP, user agent, requested URL) as a normal part of serving the site.
• Calendly and WhatsApp (Meta): only when you choose to book a call or open a WhatsApp chat. These are operated by their own privacy policies; we pass your name and email to Calendly to prefill the booking form.
• Slack: our internal team is notified of new submissions via a Slack message containing your name, email, brand, and revenue band.

We do not sell your personal data to anyone.

Some of our processors (notably Meta, Google, and Slack) are based in the United States. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

• Qualifier form submissions: until you ask us to delete them, or 36 months after our last contact, whichever comes first.
• Analytics events (PostHog, GA4, Meta): retained per each provider's default retention (typically 14 months to 26 months).
• Session recordings: 30 days, then deleted automatically.
• Access logs: 30 days at our hosting provider.

If you are in the UK or EEA, you have the right to: access the personal data we hold about you, ask us to correct or delete it, restrict or object to processing, request portability, and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk).

To exercise any of these rights, email hello@ecomlanders.com. We respond within 30 days.

We use a small number of cookies and similar storage (localStorage). They fall into two groups:

• Essential: needed for the form to work and for us to remember your cookie choice. These run without consent.
• Analytics and advertising: PostHog session replay, Meta Pixel, Google Analytics 4. These only run after you accept via the cookie banner. You can change your choice at any time by clearing the cookie banner preference from your browser, which will prompt the banner to appear again.

Our service is aimed at business owners and operators. We do not knowingly collect personal data from anyone under 16.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be announced via a notice on this site or by email if we hold your address.