Privacy Policy
Ekumen, Inc. · Last updated: 06/24/2026
This Privacy Policy explains how Ekumen, Inc. and its affiliated entities collect, use, store, and protect your personal data when you interact with our website or any of our other data collection channels listed below. Please read it carefully before submitting any information.
The latest version of this privacy policy is publicly available at www.ekumenlabs.com/privacy
1. Who we are
Ekumen, Inc. is a software development company incorporated in Delaware, United States (8 The Green, Suite D, Dover, Delaware 19901). We operate globally under the Ekumen brand.
For the purposes of this Privacy Policy, Ekumen, Inc. acts as the data controller responsible for the personal data collected through this website and the channels described in Section 2. Your data is processed in accordance with an internal data sharing agreement between Ekumen, Inc. and its affiliated entities, under which Ekumen, Inc. is the primary point of contact for any privacy-related requests.
Your personal data is stored on servers located in the European Union, ensuring it benefits from the protections afforded by the General Data Protection Regulation (GDPR).
2. What data we collect and where
We collect personal data through the following channels. In all cases, we only collect data you actively and voluntarily provide to us.
2.1 Website contact form
Through the contact form on our website (ekumenlabs.com), we collect: first name and last name, work email address, region / country, and your message.
2.2 LinkedIn Lead Gen Forms
When we run campaigns on LinkedIn that include a native lead generation form, LinkedIn collects your data directly on their platform and shares it with us. The data collected may include: first name and last name, work email address, job title, and company name, depending on the fields configured for each campaign.
By submitting a LinkedIn Lead Gen Form, you agree both to LinkedIn's own Privacy Policy and to this Privacy Policy in respect of how we process your data once received.
2.3 Google Ads landing pages
Some of our Google Ads campaigns may direct users to dedicated landing pages that include a contact or download form. In all cases, the data collected is the same as described in section 2.1: first name and last name, work email address, region / country, and your message.
2.4 Webinar and event registration forms
When we host webinars or virtual events, we collect registration data including: first name and last name, work email address, company name, and job title.
We do not collect sensitive personal data — such as health, financial, racial, or political information — through any of these channels.
3. Why we collect your data and the legal basis
We process your data for the following purposes, each with its own legal basis under GDPR Article 6.
Responding to your enquiry
Legal basis: Legitimate interest (Art. 6.1.f) — we have a legitimate interest in responding to messages and registrations you voluntarily submit. This is the core purpose of all collection channels.
Sending newsletters and marketing communications
Legal basis: Consent (Art. 6.1.a) — only when you explicitly tick the newsletter checkbox on the relevant form. You can withdraw this consent at any time via the unsubscribe link in any email or by contacting us directly.
Commercial outreach by our sales team
Legal basis: Consent (Art. 6.1.a) — only when you explicitly tick the sales contact checkbox on the relevant form. You can withdraw this consent at any time by contacting us at the address in Section 9.
Consent for newsletters and consent for sales contact are collected via separate, independent checkboxes. Neither is pre-ticked. You may accept one, both, or neither.
4. How we store your data
Your personal data is stored on servers located in the European Union. We use self-hosted infrastructure, which means our storage provider does not have access to your personal data — they supply the infrastructure, but the data remains under our exclusive control.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.
5. International data transfers
Your data is stored in the European Union. As a global company, authorised personnel across our international operations may access your data solely for the purposes described in Section 3.
Any transfer of personal data outside the European Union is governed by appropriate safeguards in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46.2(c), ensuring your data receives an equivalent level of protection regardless of where it is accessed.
No personal data is sold or shared with third parties for their own commercial purposes.
6. How long we keep your data
We retain your personal data for a maximum of 2 years from the date of your last interaction with us — for example, your form submission, last email exchange, or last newsletter engagement. After this period, your data is deleted or anonymised.
Consent records (newsletter and cookie consent) are retained for 1 year after consent is withdrawn, solely to maintain an audit trail as required by GDPR.
7. Cookies
Our website uses cookies — small text files stored in your browser. Some are strictly necessary for the site to work; others require your explicit consent and are only activated after you make a choice in our cookie consent banner.
How we obtain consent
When you first visit our website, a cookie banner appears before any non-essential cookies are loaded. You can accept all, reject all, or customize your preferences by category. Your choice is saved for up to 12 months and can be updated at any time via the cookie settings link in the footer.
Cookies we use
| Tool | Category | Purpose | Duration |
|---|---|---|---|
| Cookie consent tool | Essential | Saves your cookie preferences so we don't ask again on every visit | Up to 12 months |
| Google Analytics 4 (GA4) | Analytics | Measures traffic, page visits, and form conversion events | Up to 2 years |
| LinkedIn Insight Tag | Advertising | Tracks visits from LinkedIn posts and ads. Allows us to measure campaign performance. | Up to 90 days |
| Google Ads Tag | Advertising | Will be activated when Google Ads campaigns launch. Attributes form submissions to specific ads. | Up to 90 days |
Analytics and advertising cookies are only loaded after you accept them. If you decline, those tools remain inactive during your visit. For more information: Google Privacy Policy · LinkedIn Privacy Policy
8. Your rights
Depending on your location, you have the following rights in relation to your personal data. You can exercise any of these by contacting us at the address in Section 9.
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — ask us to delete your data, unless we have a legal obligation to retain it.
- Right to restriction — ask us to pause processing your data in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — withdraw consent for newsletters, sales contact, or non-essential cookies at any time, without affecting prior processing.
- Right to lodge a complaint — you have the right to lodge a complaint with your local data protection authority. EU residents may contact their national supervisory authority; a full list is available at edpb.europa.eu.
We will respond to all rights requests within 30 days. For complex requests, we may extend this by a further 60 days and will notify you accordingly.
9. How to contact us
To exercise your rights, ask a question, or report a concern regarding this Privacy Policy, please contact us at:
- Ekumen, Inc. — 8 The Green, Suite D, Dover, Delaware 19901, United States
- Email: contact@ekumenlabs.com
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the date at the top of this page. We encourage you to review this page periodically.
At Ekumen, privacy is not a legal checkbox — it is part of how we build trust with the people and organisations we work with. We collect only the data we need, we store it securely in the European Union, and we never sell it or share it with third parties for their own purposes.
If you have any questions about this policy, want to understand how your data is being used, or simply want it deleted — we are here. Reach us at contact@ekumenlabs.com. We will get back to you within 30 days.
Thank you for trusting us with your information.
This policy complies with the GDPR (EU) 2016/679 and applicable data protection
laws in the jurisdictions where we operate.