Your information.
Your choices.

Who is responsible

ERKO, LLC, a limited liability company registered in Delaware, United States, is responsible for the personal information described in this notice. Contact business@erkollc.com. Our registration and registered-agent details are in our company information.

This notice covers this website and communications about our services. A client engagement involving additional personal information will be addressed in the applicable service agreement and data-processing terms.

Information we handle

• Website visits: our hosting provider, Cloudflare, processes connection and request information, such as IP address, browser information, requested URL, access time and security events, to deliver and protect the website.
• Enquiries: if you submit our contact form or email us, we receive your email address, message and any information you choose to include, such as your name, company, website, service interests or budget.
• Contact form: submitting the form sends the information you enter to our website. Cloudflare validates the request, applies abuse limits and sends the enquiry to our Proton Mail inbox. Your email address is used as the reply address. Our pages do not save form fields in browser storage.

Providing an enquiry is voluntary; there is no statutory or contractual obligation to use this form. Name, email address, service selection and a message are required by the form so we can understand and respond to your request. Company, website and budget are optional. If you do not provide the required fields, the form cannot be submitted; you can instead email us directly. Please include only information relevant to your enquiry. Do not send payment-card details, government identifiers, medical information or passwords.

Why we use information

We use technical information to deliver the website, diagnose errors and prevent abuse. We use correspondence to answer questions, discuss work you request and manage related communications. We may also use relevant records to meet legal obligations or establish, exercise or defend legal claims.

Where the EU GDPR or UK GDPR applies, our lawful bases are our legitimate interests in operating a secure website and responding to business enquiries; steps you request before entering a contract, where applicable; and compliance with legal obligations. Our legitimate interests are maintaining a reliable website, preventing misuse and communicating about our services. We do not add enquirers to a marketing mailing list. We do not use enquiry information for solely automated decisions, including profiling, that produce legal or similarly significant effects. Automated validation and abuse limits help protect the form; they do not decide whether you qualify for our services.

Providers and disclosures

Cloudflare provides hosting, security and contact-form email delivery. Cloudflare Email Routing forwards messages sent to our business email address to a Proton Mail inbox, where correspondence is handled. Your own email provider processes any message or draft you create. Information may be disclosed to professional advisers or public authorities where necessary for a legal obligation or a legal claim. Providers receive information relevant to the services they perform.

We do not sell personal information or share it for cross-context behavioural advertising. We do not use information from this website to build advertising profiles or track you across other websites. These practices apply whether or not your browser sends a Global Privacy Control or Do Not Track signal.

International processing

Our service providers operate internationally. Technical information and correspondence may be processed outside your country, including in the United States, where data-protection rules may differ.

Cloudflare describes its processing and international-transfer arrangements in its Privacy Policy and Data Processing Addendum. For processing covered by that addendum, its restricted-transfer provisions include the EU Standard Contractual Clauses and the UK Addendum where applicable. Contact business@erkollc.com for information about safeguards relevant to your enquiry. Proton describes its email processing in its Proton Mail Privacy Policy and its business-processing terms in its Data Processing Agreement. Sending us an email is not a request to waive your privacy rights.

How long information is kept

Enquiry information is kept for as long as it is needed to respond and manage the relevant relationship. In deciding when to delete it, we consider whether a conversation or engagement remains active, recordkeeping requirements, outstanding disputes and applicable limitation periods. Information that is no longer needed is deleted or anonymised, subject to legal preservation requirements. You may ask us to delete enquiry information.

Form submissions are delivered as email; our website does not keep a separate enquiry database. Necessary abuse-prevention counters and hosting diagnostics are processed by Cloudflare. We do not intentionally log form contents. Your own email application controls copies of messages you send there. Hosting and security records follow the service provider’s applicable retention arrangements; we do not operate an additional visitor-analytics database.

Your privacy rights

Depending on applicable law, you may request access to or a copy of your personal information, correction, deletion, restriction of processing or a portable copy. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. These rights have legal conditions and exceptions.

Right to object: where we rely on legitimate interests, you may object to processing based on your particular situation. You may object to direct marketing at any time.

Send requests to business@erkollc.com. Tell us the right you wish to exercise and enough information to locate the relevant correspondence. We may need proportionate verification of your identity; please do not send identity documents unless requested through an agreed secure method. We respond within the time required by applicable law, generally one month for EU/UK GDPR requests, with any permitted extension explained to you. No fee normally applies. We do not discriminate against you for exercising privacy rights.

You can also complain to a competent data-protection authority without contacting us first. UK residents can contact the Information Commissioner’s Office. EEA residents can find their local authority in the European Data Protection Board directory. If a US privacy law provides an appeal right, email us to request review of a decision.

Cookies, security and children

Our pages do not use optional cookies, advertising pixels, local storage or visitor analytics. Hosting protections may use necessary security technologies when invoked. See our Cookie Disclosure for details and browser controls.

We use HTTPS and restrict access to non-public previews. No method of transmission or storage is completely secure. This website promotes business services and is not directed to children under 16. If you believe a child has supplied personal information, contact us so it can be addressed.

Changes and contact

We publish changes to this notice on this page and update its effective date. Material changes will be identified by a prominent notice on this page; where applicable law requires additional notice or a choice, we will provide it before the changed processing begins. Contact business@erkollc.com about this notice or your information.