01Who we are
Atom & Echo is a personal branding and B2B outbound agency based in Bengaluru (Bangalore), Karnataka, India, working with clients internationally. In this policy, “we”, “us” and “our” refer to Atom & Echo. For privacy questions, requests or grievances, contact Sudeesh D S at sudeesh@atomnecho.com.
This policy covers our website, enquiries and business relationships. When we process information only on a client’s instructions, the client’s privacy notice and our agreed data-processing terms also apply.
02Information we handle
Depending on your relationship with us, information may include:
- Your name, work email, phone number, role, company and professional profile links.
- Enquiries, proposals, correspondence, billing details and payment records. Please do not email card details or account passwords.
- Client interviews, drafts, photographs, brand materials, approved posts and campaign performance information.
- Professional prospect information, such as business contact details, employer, role, public professional information, campaign replies and opt-out preferences.
- Technical information received by hosting providers when a page loads, such as IP address, browser details, requested pages and security logs.
Information may come directly from you, an authorised colleague, a client, professional public sources or a business-data provider used for an agreed campaign. Public availability does not remove privacy or marketing obligations. We do not require sensitive personal information to answer an enquiry; please avoid including it unnecessarily.
03This website, cookies and the calculator
The current website has no account registration, online checkout or enquiry database. Calculator selections are processed in your browser. Clicking a call-booking button, including “Discuss this plan”, takes you to Calendly to choose a time. Calculator selections are not automatically sent with the booking link. Calendly processes the details you enter, such as your name, email and booking responses, under its Privacy Notice. We receive the information needed to manage your appointment. Calendly is linked rather than embedded and is not loaded by this site until you follow the link. Direct email links open your email application; your email provider handles messages under its own terms.
Our website code does not currently set analytics or advertising cookies, install marketing pixels, or save calculator choices in browser storage. Hosting infrastructure may process technical information to deliver and secure the site. The stylesheet loads Google Fonts, so your browser contacts Google to request font files; see Google’s Privacy Policy.
If we introduce optional analytics, advertising technologies or new collection features, we will update this notice and obtain consent where required before activating them. Browser controls can limit cookies, but may affect third-party services.
04Why we use information
We use relevant information to answer enquiries, prepare proposals, deliver and review agreed services, manage approvals, maintain business records, collect payments, protect accounts, resolve disputes and meet legal obligations. Campaign data is used for the client and purpose for which it was collected or supplied, including maintaining do-not-contact records.
Where a law requires a legal basis, we identify the basis appropriate to the activity: consent when required; steps requested before entering a contract or performing it; legal obligations; and, where permitted, legitimate interests in business communication, administration and security after considering the impact on individuals. A client contract alone is not a legal basis for processing every prospect’s information.
We do not treat a website visit as consent to marketing. You can withdraw consent or object to direct marketing by emailing us or using an available opt-out. We do not use this website to make automated decisions with legal or similarly significant effects.
05Client campaigns and outreach
Our role depends on who decides the purpose and means of processing. We handle our own enquiries and business administration as the responsible organisation. For work directed by a client, we may act as a processor or service provider under written instructions. Independent decisions about prospect sourcing or reuse require a separate assessment of our responsibilities.
Before a campaign, the parties must agree the audience, source of data, permitted uses, required notices, marketing permissions and opt-out handling. Buying a list does not establish permission to contact everyone on it. We require campaign instructions that respect applicable local law and platform rules.
If we contact you for a client, the communication should identify that business. You may contact the sender or us to object or ask about your information. We will handle the request within our role or pass it to the responsible client. Suppression records may be retained to prevent further unwanted contact.
06Sharing and service providers
Information may be shared with authorised team members and contractors, and providers needed for hosting, email, project management, content production, prospect research, outreach, payment processing and professional advice. Access must be limited to the work involved, with appropriate confidentiality and data-handling terms.
Client-approved content is shared with the intended publishing platform and audience. Prospect data may be delivered to the client commissioning the relevant campaign; this is part of the service and is subject to applicable law and the agreed purpose. We do not use this website to sell visitor information for third-party advertising.
We may disclose information when legally required, to protect rights and security, or in a business reorganisation subject to appropriate safeguards. Ask us for information about the providers relevant to your engagement. External websites and platforms have their own privacy practices.
07International processing
Our team is based in India, and clients and service providers may be in other countries. Information may therefore be processed outside your country. Applicable protections and government-access rules can differ.
Where cross-border safeguards are required, the relevant transfer must use an available lawful mechanism, such as an adequacy decision or appropriate contractual safeguards, together with any required assessment and supplementary measures. These mechanisms must be agreed before a restricted transfer; this policy itself is not a transfer agreement. Contact us for details relevant to your data or engagement.
08Retention and security
We keep information for the purpose for which it is needed, taking account of the engagement, unresolved enquiries, accounting obligations, disputes and applicable limitation periods. Enquiry records are reviewed when the discussion ends; campaign working files are reviewed at completion; billing records follow applicable statutory requirements. Client-directed data is returned or deleted as set out in the engagement or data-processing agreement, subject to legal retention requirements.
Opt-out records may remain necessary after other campaign information is deleted. Backups may retain copies until their normal replacement cycle; retained copies must not be restored to routine use without a valid reason.
Our handling standards require access limited to authorised people, appropriate account protections and confidentiality commitments. No system is completely secure. If a personal-data breach occurs, we will assess it and make notifications required by applicable law and our client agreements.
09Your choices, rights and complaints
You can contact us to request access, correction or deletion, withdraw consent, or object to marketing. Depending on the law that applies, additional rights may include restriction, portability, information about sharing, nomination or appeal. Rights can have exceptions, including where records must be retained by law. We may request proportionate identity verification and will explain any lawful limitation.
Send requests to sudeesh@atomnecho.com with “Privacy request” in the subject. We aim to acknowledge requests within seven business days and respond within the applicable legal deadline. Withdrawing consent does not invalidate earlier lawful processing.
For India, applicable rights and obligations include those under the Digital Personal Data Protection Act and rules as their relevant provisions come into force. Where EU or UK data-protection law applies, you may also complain to the competent supervisory authority. Other local rights apply where legally available. You do not give up any statutory complaint route by contacting us.
10Children and policy updates
Our services are intended for adults acting in a professional capacity, not children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
We may update this policy when our services, providers or legal requirements change. The date at the top identifies the current version. We will give additional notice or seek consent where required for material changes.