Your privacy is important to EchoVision. This privacy notice explains what personal information EchoVision collects, how we use it, and the rights you have over that information.

Last updated: 14 September 2026

1. About us

This website (echo-vision.net) is owned and operated by Echo Seismic Ltd, incorporated in Alberta, Canada (corporate access no. 2019890330), with its registered office at 4500 8A Street NE, Calgary, AB, Canada T2E 4J7.

EchoVision is committed to protecting your privacy and the security of any personal information we collect. We comply with Canadian federal and provincial privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

We serve clients internationally. Where we process the personal information of visitors in the United Kingdom or the European Economic Area, we also comply with the UK General Data Protection Regulation and the EU General Data Protection Regulation, and with the Privacy and Electronic Communications Regulations 2003 (PECR) for electronic marketing to those visitors.

Echo Seismic Ltd is the organisation accountable for your personal information, and is the data controller for the purposes of UK and EU GDPR.

2. Definitions

In this notice:

• Affiliate means organisations we partner or work with.
• Personal information means any information that identifies you or could be used to identify you.
• Processing means any operation we perform on your personal information, including collecting, storing, using, sharing, or deleting it.

3. Privacy contact

Our Privacy Officer handles all privacy queries and requests.

• Email: kendallr@echo-group.net
• Telephone: +1 403 200-8181
• Post: Privacy Officer, Echo Seismic Ltd, 4500 8A Street NE, Calgary, AB, Canada T2E 4J7

4. Information we collect

You may be asked to provide personal information to access certain content or services. We may collect:

• Name
• Email address
• Company name
• Telephone number
• Job title and industry details
• Stated interests and business needs
• Information you include in enquiries or submissions

We do not knowingly collect sensitive personal information such as health, ethnicity, religious beliefs, or biometric data.

We also collect technical information automatically through cookies and similar technologies, including IP address, device identifiers, browser type, pages viewed, referral source, and approximate location. This is described in section 11 and in our cookie policy.

5. How we use your information

We use your personal information to:

• Provide our services and respond to your queries
• Send service-related communications, for example maintenance notifications
• Personalise the content and communications you receive
• Send marketing where you have consented, or where we are otherwise permitted to (see section 7)
• Analyse how the website is used so we can improve it
• Meet our legal and regulatory obligations

We may use anonymised, aggregated information for analysis and strategic purposes. Anonymised data is not personal information and is not subject to this notice.

6. Our basis for processing

Under Canadian privacy law we rely principally on your consent, which may be express or implied depending on the sensitivity of the information and the purpose. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. We also rely on the limited exceptions PIPEDA provides, for example where collection is clearly in your interests and consent cannot be obtained in a timely way, or where the law requires us to disclose information.

Where UK or EU GDPR applies to your information, we rely on one of the following lawful bases:

• Contract: where processing is necessary to provide a service you have requested or to take steps before entering a contract.
• Legal obligation: where we must process your information to comply with the law.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as managing client relationships, securing our website, improving our services, and direct marketing to existing clients. We balance these interests against your rights.
• Consent: where you have given clear, specific consent, for example to receive marketing emails or to set non-essential cookies. You can withdraw consent at any time.

7. Marketing

We may contact you about our products and services by email, post, or phone where we are permitted to do so. For commercial electronic messages to recipients in Canada we rely on your express or implied consent under Canada's Anti-Spam Legislation (CASL). For recipients in the UK and EEA we rely on your consent or, for existing customers, the soft opt-in under PECR.

We may use information we hold about you to show you relevant advertising on third-party platforms. This can include showing advertisements to people who have previously visited echo-vision.net.

You can opt out of marketing at any time by:

• Clicking the unsubscribe link in any marketing email
• Emailing kendallr@echo-group.net
• Writing to us at the postal address in section 3

Opting out of marketing will not affect service communications about products or services you have requested.

8. If you do not provide the information requested

If you withhold information we ask for, we may not be able to:

• Respond fully to your queries
• Provide the service or content you have requested
• Personalise your experience
• Send you relevant marketing

You are free to withhold marketing consent at any time. Doing so will not affect any other service we provide.

9. Sharing your information

We may share your personal information with:

• Service providers acting on our behalf, including hosting providers, IT and security suppliers, email and marketing platforms, form and CRM providers, and analytics providers. These suppliers process your information only on our written instructions.
• Professional advisers such as accountants, auditors, and lawyers where necessary.
• Regulators and law enforcement where we are legally required to share information.
• A buyer or successor in the event of a sale, merger, or restructure of our business.

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes without your consent.

10. International transfers

We operate internationally and some of our service providers are based outside Canada, including in the United States and the European Union. Our website uses third-party services that receive your IP address when a page loads, including Adobe Fonts, Google Fonts, HubSpot for forms, and Google Analytics.

Under Canadian law we remain accountable for personal information transferred to a third party for processing, and we use contractual and other means to provide a comparable level of protection while it is being processed on our behalf. Personal information held or processed outside Canada may be accessible to the courts, law enforcement, and national security authorities of that country.

Where we transfer the personal information of UK or EEA visitors outside those regions, we rely on one of the following safeguards:

• An adequacy decision covering the receiving country. Canada holds a partial adequacy decision from the European Commission, and UK adequacy regulations, covering organisations subject to PIPEDA.
• The UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses.
• The EU-US Data Privacy Framework and its UK Extension, for certified recipients in the United States.

A copy of the safeguard used is available on request to kendallr@echo-group.net.

11. Cookies and similar technologies

We use cookies and similar technologies to operate the website, analyse usage, and deliver marketing.

Cookies fall into the following categories:

• Strictly necessary: required for the site to function.
• Analytics and performance: help us understand how visitors use the site.
• Marketing and advertising: used to deliver relevant advertisements on third-party platforms.

You can manage your cookie preferences via our consent banner or in your browser settings. Blocking cookies may affect site functionality.

For full details, including the specific cookies we set and how long they last, see our Cookie Policy.

12. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Where we use automation for analytics, advertising, or content personalisation, you have the right to object (see section 16).

13. Visitors under 18

This website is not directed at children and we do not knowingly collect personal information from them. If you are under 18, please get a parent or guardian's permission before providing any personal information to EchoVision. If you believe a child has provided us with personal information, contact our Privacy Officer and we will delete it.

14. How we protect your information

We use appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, or alteration. These include access controls, encryption in transit, firewalls, anti-malware, secure backups, and supplier due diligence.

No transmission over the internet is fully secure. You are responsible for keeping any account passwords confidential. If you believe your account or information has been compromised, contact us immediately at kendallr@echo-group.net.

Where a breach of security safeguards creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, and keep a record of the breach as PIPEDA requires. Where UK or EU GDPR applies, we will notify the relevant supervisory authority within 72 hours where required, and notify affected individuals where the risk to their rights and freedoms is high.

15. How long we keep your information

We keep personal information only for as long as needed for the purpose we collected it, including legal, accounting, or reporting requirements:

• Client and account information: for the life of the relationship plus up to 24 months.
• Financial records: up to 6 years, to meet Canada Revenue Agency requirements.
• Marketing contacts: until you opt out, or after a defined period of inactivity.
• Website analytics: typically up to 26 months, often anonymised earlier.

After the retention period we either delete, anonymise, or securely archive the information.

16. Your rights

Under Canadian privacy law you have the right to:

• Access the personal information we hold about you, and be told how it has been used and to whom it has been disclosed.
• Correct information that is inaccurate or incomplete.
• Withdraw consent to our use of your information, subject to legal or contractual restrictions and reasonable notice.
• Challenge our compliance with this notice by contacting our Privacy Officer.

If UK or EU GDPR applies to your information, you also have the right to erasure, the right to restrict processing, the right to data portability, the right to object to processing based on legitimate interests and to direct marketing at any time, and rights related to automated decision-making.

To exercise any of these rights, contact us at kendallr@echo-group.net or by post at the address in section 3. We will respond within 30 days, or within one month where UK or EU GDPR applies. We may ask for proof of identity before fulfilling a request.

17. Right to complain

We would appreciate the chance to address your concerns directly before you approach a regulator. You can raise a complaint with our Privacy Officer using the details in section 3.

You can also complain to a supervisory authority at any time.

In Canada, the Office of the Privacy Commissioner of Canada:

• Website: priv.gc.ca
• Telephone: 1-800-282-1376
• Post: Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, QC, K1A 1H3

In the United Kingdom, the Information Commissioner's Office:

• Website: ico.org.uk/concerns
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

18. Links to third-party websites

Our website may contain links to third-party websites that are not covered by this notice. We are not responsible for the privacy practices or content of those websites. Please read their privacy notices before providing any personal information.

19. Changes to this notice

We may update this notice from time to time. We will post the updated version on this page and update the "Last updated" date at the top. For material changes we will give reasonable prominence, for example a banner on the website or a direct notification where appropriate.

20. Contact us

For any privacy queries or to exercise your rights, contact:

• Email: kendallr@echo-group.net
• Telephone: +1 403 200-8181
• Post: Privacy Officer, Echo Seismic Ltd, 4500 8A Street NE, Calgary, AB, Canada T2E 4J7