EchoGenic

Trust

Privacy Policy

A clear account of the information EchoGenic handles, why we use it, and the choices available to you.

Last updated July 25, 2026

1. Scope and our role

This Privacy Policy explains how EchoGenic handles personal information when you visit our website, create an account, use the platform, or contact us. EchoGenic is the controller of account, website, security, and commercial relationship data.

For data an organization submits and controls through its workspace, EchoGenic may act as a processor or service provider on that organization’s instructions. Contact that organization first if your request concerns data it controls.

2. Information we collect

  • Account and profile data, such as name, email, role, organization, credentials, and professional details.
  • Horse and operational records, including identity, ownership relationships, veterinary and reproduction records, documents, pedigree, genetic test information, and user-entered notes.
  • Usage, device, log, and security data, such as IP address, browser information, timestamps, session events, and audit activity.
  • Communications and support data, including contact form content and correspondence.
  • Commercial and transaction data if you purchase a paid plan; payment card details are handled by the payment provider rather than stored directly by EchoGenic.

3. How we use information

  • Provide, operate, maintain, and support the platform.
  • Authenticate users, enforce permissions, protect accounts, prevent fraud, and maintain audit trails.
  • Connect records, identify potential duplicates, calculate evidence and confidence indicators, and produce user-requested decision support.
  • Communicate about accounts, service notices, support requests, and product changes.
  • Comply with law, resolve disputes, enforce agreements, and protect users, animals, EchoGenic, and others.
  • Analyze and improve reliability and features using aggregated or de-identified information where practical.

4. Legal bases

Where laws such as the UK GDPR or EU GDPR apply, we process information as needed to perform our contract, pursue legitimate interests such as service security and improvement, comply with legal obligations, and, where required, based on consent. You may object to processing based on legitimate interests, subject to applicable exceptions.

5. How we share information

We share information only as needed to provide the service or for the purposes described here. Recipients may include users and professionals you authorize, your organization’s administrators, hosting and database providers, security and verification providers, email and support providers, payment providers, professional advisers, and authorities when legally required.

We may disclose information in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections. We do not sell personal information or share it for cross-context behavioral advertising.

6. International transfers

EchoGenic and its providers may process information in countries other than your own. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or standard contractual clauses.

7. Retention

We keep information for as long as needed to provide the service, maintain trusted record histories and audit trails, comply with legal and contractual obligations, resolve disputes, and protect the platform. Retention depends on the data type, account status, workspace instructions, and applicable law.

When information is no longer required, we delete or de-identify it. Backup copies may remain for a limited period before being overwritten.

8. Security

We use technical and organizational safeguards designed to protect information, including access controls, scoped sharing, authentication protections, audit records, and encrypted transport. No system is completely secure, so please use a strong password and report suspected compromise promptly.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, withdraw consent, and appeal or complain to a regulator. Some rights are subject to exceptions, including record integrity, legal obligations, and the rights of others.

Submit a request through our Contact page. We may need to verify your identity and authority before responding. Authorized agents may submit requests where permitted by law.

10. Cookies and verification

We use essential cookies and similar technologies to maintain sessions, protect accounts, and remember necessary settings. Cloudflare Turnstile processes device and interaction signals to distinguish legitimate users from abuse. See our Cookie Policy for more detail.

11. Children

EchoGenic is a professional and commercial service and is not directed to children under 16. We do not knowingly collect personal information from children through the service without appropriate authorization.

12. Updates and contact

We may update this policy as our service or legal obligations change. We will post the revised date and provide additional notice for material changes where appropriate.

For privacy questions or requests, use the Contact page and select “Privacy request,” or email [email protected].