Echobeat Privacy Policy
Last Updated: May 12, 2025
Introduction
Echobeat Ltd ("Echobeat", "we", or "us") is a UK-based company providing a booking management platform for music artists, booking agents, and promoters. We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), as well as other applicable data protection laws. This Privacy Policy explains what personal data we collect, how we use and safeguard it. It applies when you use our platform, website, or any related services.
What Data We Collect
We collect personal data about our users (including artists, agents, promoters, and others who use our platform). This information falls into two categories:
Data You Provide Directly
You may give us information about yourself when you create an account, fill out forms, or otherwise interact with Echobeat. This personal data includes:
- Contact Details: Your name, email address, phone number, postal address, and login credentials.
- Profile Information: Details you choose to add to your profile, such as your artist or agency name, biography, genre, social media links, photos, and other relevant background information. Promoters might also provide organization or event details.
- Booking Data: Information related to bookings and events managed through our platform (e.g., event dates, contracts, fees, payment details, and itinerary details).
- Payment Information: Echobeat uses accredited third-party payment processors for transactions, so we typically do not store your full credit card numbers.
Data Collected Automatically
When you use Echobeat’s website, platform, or mobile app, we automatically collect certain data about your device and usage through cookies and similar technologies. This data includes:
- Usage Data: Details of how and when you use our platform, including pages visited, features used, and conversion events (e.g., account registration, booking inquiries).
- Device and Technical Information: Information about the devices and software you use to access Echobeat, including your IP address, device type, operating system, and browser.
- Cookies and Advertising Identifiers: Echobeat uses cookies to enhance your experience, gather analytics, and measure advertising campaign performance. Our advertising partners (Meta and TikTok) may also set cookies in your browser (e.g., Meta’s _fbp cookie, TikTok’s ttclid) to help attribute conversions to our ads. On mobile, we may use device advertising identifiers (IDFA on iOS, Android Advertising ID) subject to your device-level permissions.
- Analytics Data (Google Analytics 4): We use Google Analytics 4 to collect aggregated data about site traffic and user behavior. GA4 data is collected both via browser cookies and via the Google Measurement Protocol (a server-side method that does not rely on cookies). We use this data solely for product analytics and service improvement.
- Advertising Conversion Data (Meta and TikTok): We use Meta Pixel, Meta Conversions API, TikTok Pixel, and TikTok Events API to measure how users interact with our ads. The browser-based pixels set cookies; the Conversions API and Events API send conversion events from our servers directly to Meta and TikTok. In both cases, only hashed (one-way encrypted) personal data such as email addresses may be shared with these platforms for event matching — they cannot reverse these hashes to identify you.
- Mobile Analytics (Firebase): Our mobile app uses Firebase Analytics (Google LLC) to collect anonymised usage data and crash reports to improve app stability and user experience.
How We Use Your Data
Echobeat uses the collected personal data for the following purposes, all in compliance with applicable law:
- Providing Our Services: Processing bookings, managing accounts, and delivering the services you request.
- Service Communications & Customer Support: Sending you important notices and responding to your inquiries.
- Improving Our Platform: Analyzing usage data to enhance functionality and user experience.
- Marketing and Newsletters: Sending updates about features, industry news, or promotions (with an option to opt out).
- Advertising Measurement: Measuring the effectiveness of our advertising campaigns on platforms such as Meta (Facebook/Instagram) and TikTok, using hashed data and conversion APIs. This processing is based on your consent, which you can withdraw at any time via our cookie settings.
- Security and Fraud Prevention: Detecting and preventing unauthorized access or fraudulent activities.
- Legal Compliance: Responding to lawful requests from law enforcement or courts.
Data Sharing & Third-Party Services
We treat your personal data with care and do not sell it. However, we may share data with trusted parties, including:
- Google LLC — for website and app analytics (Google Analytics 4, Firebase Analytics) and cloud infrastructure (Google Cloud Platform).
- Meta Platforms, Inc. — for advertising conversion measurement via Meta Pixel and Meta Conversions API. Hashed personal data (e.g., email address) may be shared solely for event matching. Subject to your consent.
- TikTok Inc. — for advertising conversion measurement via TikTok Pixel and TikTok Events API, in the same manner as Meta above. Subject to your consent.
- Stripe, Inc. — for payment processing. Echobeat does not store full card numbers; payment data is handled directly by Stripe under their own privacy terms.
- Usercentrics A/S (Cookiebot) — for cookie consent management. Consent records are stored by Cookiebot to document your choices.
- Within the Echobeat Platform: Data sharing occurs naturally when connecting artists, agents, and promoters (e.g., artist profiles, booking requests, and in-app messages).
- Legal Requirements: Disclosure of personal data may be necessary to comply with legal obligations after proper verification.
International Data Transfers
Some of our third-party service providers (including Google LLC, Meta Platforms, Inc., TikTok Inc., and Stripe, Inc.) are based in the United States or other countries outside the UK and EEA. When we transfer personal data to these providers, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms recognised under UK law, to ensure your data receives an adequate level of protection.
Data Storage & Security
We store your personal data on secure servers located in the United Kingdom or the European Economic Area (EEA), in compliance with applicable data protection laws. We implement technical and organizational measures—such as encryption, access controls, and regular security audits—to protect your data. Data is retained only for as long as necessary to fulfill the purposes outlined in this policy.
Cookie Policy
Echobeat uses cookies and related technologies (including server-side conversion APIs) to provide essential functionality, improve user experience, collect analytics data, and measure advertising performance. For a full list of cookies and detailed information about each third-party technology we use, please refer to our Cookie Policy. You can update your consent preferences at any time via the cookie settings link in the site footer.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. When we make updates, we will revise the "Last Updated" date at the top of this policy.
Contact Information for Privacy Concerns
If you have any questions regarding this Privacy Policy, please contact us at support@echobeat.co .