Data Processing & Retention Notice

Effective date: October 5, 2026

Echo Legacy Labs LLC ("Echo Legacy Labs," "we," "us," or "our") provides this Data Processing & Retention Notice to describe the information-processing and retention practices we have identified for our storefront, customer communications, and related operations.

This Notice is a customer-facing disclosure. It is not a data processing agreement and does not replace a written agreement where one is required.

Contact
Echo Legacy Labs LLC
3218 Radford Dr
Indianapolis, IN 46226
United States
Support: support@echolegacylabs.com
Privacy questions: privacy@echolegacylabs.com
Legal notices: legal@echolegacylabs.com

Information we process

The information we process depends on how you interact with us. It may include:

Order and customer information: information associated with a Shopify order or customer record, including information needed for storefront, checkout, payment, order administration, and applicable tax obligations.
Marketing and communication information: contact information and marketing-communication activity maintained in Klaviyo; email communications maintained by our email provider.
Analytics information: analytics information generated through Google Analytics if Echo Legacy Labs enables it.

We do not use customer inputs or outputs for model training or model improvement.

Why we process information

We process information to operate the storefront and checkout, process and administer orders, communicate with customers, provide requested support, manage marketing communications where applicable, meet tax-related recordkeeping obligations, and maintain or evaluate our online services.

Service providers and systems

We use the following categories of service providers and systems for the purposes described in this Notice:

Provider or system	Stated role
Shopify	Storefront, checkout, hosting, payments, and customer/order records
Klaviyo	Email and SMS marketing, including marketing logs
Google Analytics, if enabled	Website analytics
Microsoft Copilot, if used	Support or content assistance
Google Workspace or an equivalent email provider	Email communications
Shopify authentication	Authentication for the storefront where applicable

We use these providers to support our operations. Their processing of information is also governed by their applicable terms and privacy practices.

Retention

We retain the following records according to the stated practices below:

Information category or system	Retention practice
Shopify order and customer data	Retained by Shopify as required by applicable tax law.
Klaviyo marketing logs	Retained until deleted.
Email communications	Retained until manually deleted.
Google Analytics information, if enabled	Retained under Google Analytics defaults for 26 months unless changed.

We may keep information longer where necessary to comply with applicable law, respond to legal process, resolve disputes, enforce agreements, or protect the security and integrity of our services.

Cookies and analytics

Shopify uses cookies for cart, checkout, session, analytics, and personalization purposes. If Google Analytics or Meta Pixel is enabled, Echo Legacy Labs will disclose that use in its Cookie Policy and provide any required choices or notices. Please review our Cookie Policy for more information.

Marketing communications

Klaviyo is used for email and SMS marketing. You may opt out of marketing emails through the unsubscribe link provided in an email. SMS preferences may be managed using the instructions provided in the relevant message. Opting out of marketing communications does not necessarily prevent us from sending messages needed to administer an order, respond to a request, or provide a service you have purchased, where permitted by law.

Your privacy questions and requests

Depending on where you live, you may have rights to ask about, access, correct, delete, or limit certain uses of your personal information. To make a privacy request or ask a question about this Notice, contact privacy@echolegacylabs.com. We may need to verify your identity before responding to a request.

Governing law and dispute resolution

This Notice is governed by the laws of Indiana, except where applicable law requires otherwise. For disputes relating to this Notice, the parties will first attempt good-faith negotiation. If not resolved, disputes will be resolved by binding arbitration in Marion County, Indiana. To the extent permitted by law, disputes must be brought on an individual basis and not as a class action or jury trial.