Privacy Policy

Echo Water Privacy Policy

Last Updated: Tuesday March 3, 2026
Effective Date:Tuesday March 3, 2026

Echo Technologies LLC, doing business as Echo Water (“Echo Water,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit echowater.com, use the Echo App, interact with our SMS or email communications, or otherwise engage with our products and services (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our Services. We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on our Site with an updated “Last Updated” date and, where required by law, by providing additional notice (such as email notification).

This Privacy Policy applies to all users worldwide. Additional rights and disclosures that apply to residents of specific jurisdictions—including the European Economic Area, United Kingdom, California, Canada, and others—are described in the Jurisdiction-Specific Disclosures section below.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with our Services, including:

  • Account & Contact Information: Name, email address, phone number, mailing/shipping address, and company affiliation.
  • Payment Information: Credit/debit card details, billing address, and other financial information necessary to process transactions. Payment processing is handled by third-party processors (e.g., Shopify Payments, Synchrony); we do not store full credit card numbers on our servers.
  • Communications: Information you provide when you contact our customer support team, submit inquiries, leave product reviews, or communicate with us via email, phone, live chat, or social media.
  • SMS Opt-In Data: Your mobile phone number and consent records when you opt in to receive text messages from us.
  • Health & Wellness Data: If you use the Echo App and choose to enable health integrations, we may collect hydration data, wellness metrics, and other health-related information you provide directly or through connected third-party health applications (e.g., Apple Health, Google Fit).
  • Survey & Form Responses: Information you submit through our water quality surveys, lead generation forms, or similar tools on our Sites (including mywaterscan.com).
  • Wholesale & Business Accounts: Business name, tax identification, resale certificates, and other information required to establish and maintain wholesale accounts via business.echowater.com.

1.2 Information Collected Automatically

When you access our Site, App, or interact with our emails and advertisements, we and our service providers automatically collect certain information, including:

  • Device & Browser Information: Hardware model, operating system, browser type and version, unique device identifiers, mobile network information, and screen resolution.
  • Log & Usage Data: IP address, access times, pages viewed, clickstream data, referring/exit URLs, and actions taken on our Site.
  • Cookies & Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to recognize you, remember your preferences, understand how you use our Services, and improve your experience. For details about Shopify-specific cookies, see Shopify’s Cookie Policy.
  • Shopping Activity & Cart Data: Echo Water’s website uses cookies and similar tracking technologies to keep track of items you place in your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via email or SMS.
  • Location Information: We may derive your approximate geographic location from your IP address for purposes such as localizing content, estimating shipping costs, and complying with applicable laws. We do not collect precise geolocation data from your mobile device unless you explicitly grant permission through your device settings, and we do not use precise geolocation data for SMS marketing purposes.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Our e-commerce platform provider (Shopify) and payment processors.
  • Marketing and advertising partners (e.g., Meta/Facebook, Google, affiliate networks).
  • Public databases, social media platforms, and data enrichment providers.
  • Health and wellness applications you have connected to the Echo App, with your consent.

We treat all information received from third parties in accordance with this Privacy Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Fulfill Orders & Provide Services: Process transactions, ship products, manage subscriptions, provide customer support, and administer your account.
  • Communicate With You: Send transactional messages (order confirmations, shipping updates, warranty information), respond to inquiries, and provide customer service.
  • Marketing & Promotions: With your consent where required, send promotional emails, SMS text messages, and other marketing communications about our products, services, and special offers. This includes abandoned cart reminders via email and SMS.
  • Personalization: Tailor content, product recommendations, and your overall experience based on your preferences, purchase history, and usage patterns.
  • Health & Wellness Insights: If you opt in, analyze hydration and health data through the Echo App to provide personalized wellness recommendations and insights.
  • Improve Our Services: Conduct analytics, research, and testing to understand how our Services are used and to develop new products, features, and content.
  • Security & Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
  • Legal Compliance: Comply with applicable laws, regulations, legal processes, and governmental requests.
  • Enforce Agreements: Enforce our Terms and Conditions, this Privacy Policy, and other agreements.

3. SMS & Text Messaging Program

When you opt in to receive SMS or MMS text messages from Echo Water (e.g., by subscribing via our website, texting a keyword, or checking a consent box at checkout), the following terms apply:

  • Types of Messages: You may receive promotional messages, cart abandonment reminders, order and shipping updates, product announcements, and other marketing or transactional messages.
  • Message Frequency: Message frequency varies. You may receive up to 10 marketing messages per month, plus transactional messages as needed.
  • Costs: We do not charge for text messages; however, message and data rates may apply depending on your mobile carrier and plan.
  • Opt-Out: You may opt out of receiving SMS messages at any time by replying STOP to any message. After opting out, you will receive a single confirmation message. You will no longer receive SMS marketing messages from us unless you re-subscribe.
  • Help: For assistance, reply HELP to any message or contact us at support@echowater.com or call +1 (855) 737-1114.
  • Consent Not Required for Purchase: Your consent to receive text messages is not a condition of any purchase.
  • Cart Abandonment Tracking: Echo Water’s website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS.

SMS Opt-In Data Protection: We will not share, sell, rent, or otherwise disclose your text messaging originator opt-in data or consent to any third parties, except as required to deliver the messaging service (e.g., to our SMS platform provider for message delivery only). This applies to all SMS and MMS opt-in information, including your phone number and consent records. This restriction is absolute and is not subject to the other data-sharing provisions described elsewhere in this Privacy Policy.

Mobile Information Sharing: Information collected in connection with our text messaging program will not be shared with third parties or affiliates for their own marketing or promotional purposes. All categories of data sharing described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. How We Share Your Information

We do not sell your personal information for monetary consideration. We may share your information in the following circumstances:

  • Service Providers: We share information with vendors, consultants, and service providers who perform services on our behalf, including e-commerce platform hosting (Shopify), payment processing, shipping and fulfillment, email marketing, SMS messaging (Klaviyo), customer support, data analytics, cloud storage, and IT services. These providers are contractually obligated to use your information only as necessary to perform services for us and in accordance with this Privacy Policy.
  • Marketing & Advertising Partners: We may share certain information (such as hashed email addresses, cookie data, and browsing activity) with advertising partners (e.g., Meta/Facebook, Google) for targeted advertising and campaign measurement. This sharing may constitute a “sale” or “sharing” of personal information under certain state privacy laws. See the California section below for your opt-out rights.
  • Affiliate & Referral Networks: If you arrive at our Site via an affiliate or referral link, we may share limited transaction data with the referring partner for commission tracking purposes.
  • Health App Integrations: If you opt in to connect the Echo App with third-party health applications, your hydration and health data may be shared with those applications in accordance with their respective privacy policies. We will not share health data without your explicit consent.
  • Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.
  • Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, enforce our agreements, or ensure the safety of our users or others.
  • With Your Consent: We may share your information for other purposes with your explicit consent.

Important: The above data-sharing provisions exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for several purposes:

  • Essential Cookies: Required for the Site to function (e.g., shopping cart, authentication, security).
  • Analytics Cookies: Help us understand how visitors use our Site so we can improve performance and content.
  • Marketing/Advertising Cookies: Used by us and our advertising partners to deliver relevant ads, measure campaign effectiveness, and build audience profiles.
  • Functional Cookies: Remember your preferences, language, and region settings.
  • Cart Tracking Cookies: Track items in your shopping cart, detect abandoned carts, and enable cart reminder communications via email and SMS.

Managing Cookies: Most browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our Site. You may also manage advertising preferences through the Network Advertising Initiative or Digital Advertising Alliance opt-out pages.

For specific details about cookies used by our e-commerce platform, see Shopify’s Cookie Policy.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Account Information: Retained for the duration of your account and for a reasonable period afterward to comply with legal obligations and resolve disputes.
  • Transaction Records: Retained for a minimum of seven (7) years to comply with tax, accounting, and financial reporting requirements.
  • Marketing Preferences: Retained until you withdraw consent. Opt-out records are maintained indefinitely to honor your preferences.
  • SMS Consent Records: Retained for a minimum of five (5) years from the date of consent, or longer if required by applicable law or regulation.
  • Health Data: Retained only while you actively use Echo App health integrations, and deleted within 90 days of your disconnecting the integration or deleting your account, unless a longer retention period is required by law.

7. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure data storage, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If you become aware of any unauthorized access to your account or data, please contact us immediately at support@echowater.com.

8. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@echowater.com, and we will take steps to delete such information promptly.

9. Third-Party Links & Services

Our Site and Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party service you access through our Site. We are not responsible for the content, privacy practices, or security of any third-party sites or services.

10. International Data Transfers

Echo Water is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms. By using our Services, you consent to the transfer of your information as described in this Privacy Policy.

11. Jurisdiction-Specific Disclosures

11.1 European Economic Area & United Kingdom (GDPR / UK GDPR)

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), the following provisions apply in addition to the rest of this Privacy Policy:

Data Controller: Echo Technologies LLC, 1600 N Freedom Blvd, Pleasant Grove, UT 84062, USA, is the data controller responsible for your personal data.

Legal Bases for Processing: We process your personal data on the following legal bases:

  • Contractual Necessity: Processing necessary to fulfill our contract with you (e.g., order fulfillment, account management).
  • Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., marketing emails, SMS messaging, health data integrations). You may withdraw consent at any time.
  • Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, analytics, improving our Services), provided those interests are not overridden by your rights and freedoms.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations.

Your Rights: Under the GDPR and UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete personal data.
  • Erasure (“right to be forgotten”) — request deletion of your personal data.
  • Restrict Processing of your personal data in certain circumstances.
  • Data Portability — receive your personal data in a structured, commonly used, machine-readable format.
  • Object to processing based on legitimate interests, including direct marketing.
  • Withdraw Consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
  • Lodge a Complaint with your local supervisory authority (data protection authority).

To exercise these rights, contact us at privacy@echowater.com. We will respond within 30 days (or as otherwise required by law).

11.2 California Residents (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”):

Categories of Personal Information Collected: In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, phone, IP address); commercial information (purchase history, products viewed); internet or electronic network activity (browsing history, cookies, interactions with our Site); geolocation data (approximate, derived from IP address); audio/visual information (customer service call recordings, if applicable); and inferences drawn from the above.

Your California Rights:

  • Right to Know: Request disclosure of the personal information we have collected, used, disclosed, and sold about you.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising. We may share data with advertising partners (e.g., through cookies and pixels) in ways that constitute “sharing” under the CCPA. You can opt out by contacting us or using our cookie preference controls.
  • Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information to purposes necessary for providing the Services.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at privacy@echowater.com or call +1 (855) 737-1114. We will verify your identity before processing your request. You may also designate an authorized agent to submit requests on your behalf.

Financial Incentive Notice: We may offer promotions, discounts, or other incentives (such as loyalty programs or SMS-exclusive offers) that involve the collection of personal information. Participation is voluntary. You may opt out at any time. The value of the incentive is reasonably related to the value of the personal information collected.

11.3 Canada (PIPEDA & Provincial Laws)

If you are a Canadian resident, we comply with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial privacy legislation. You have the right to access, correct, and withdraw consent for the processing of your personal information. To make such requests, contact us at privacy@echowater.com. We will respond within 30 days. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

11.4 Brazil (LGPD)

If you are located in Brazil, the Lei Geral de Proteção de Dados (“LGPD”) provides you with rights similar to those described in the GDPR section above, including the right to access, correction, deletion, data portability, and information about sharing. To exercise these rights, contact us at privacy@echowater.com.

11.5 Australia (Privacy Act 1988)

If you are an Australian resident, we handle your personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988. You have the right to access your personal information, request correction, and make a complaint about our handling of your information. Contact us at privacy@echowater.com, or lodge a complaint with the Office of the Australian Information Commissioner.

11.6 Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy legislation have rights similar to those described in the California section above, including the right to access, delete, and correct personal information, and to opt out of targeted advertising and data sales. To exercise these rights, contact us at privacy@echowater.com or call +1 (855) 737-1114. If your request is denied, you have the right to appeal by contacting us at the same email address.

12. Your Choices & Controls

  • Email Marketing: You may unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link at the bottom of any marketing email. You will continue to receive transactional emails related to your orders and account.
  • SMS Marketing: Reply STOP to any text message to opt out. Reply HELP for assistance.
  • Cookies: Adjust your browser settings to block or delete cookies. Use our cookie preference controls where available.
  • Advertising: Opt out of interest-based advertising through the NAI or DAA opt-out tools, or through your device’s advertising settings.
  • Health Data: You may disconnect the Echo App from third-party health applications at any time through the App settings. Upon disconnection, we will cease collecting health data and delete previously collected health data within 90 days.
  • Account Deletion: You may request deletion of your account and associated personal information by contacting privacy@echowater.com.

13. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. There is currently no industry standard for how companies should respond to DNT signals. We do honor Global Privacy Control (“GPC”) signals where required by applicable law.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Echo Technologies LLC (d/b/a Echo Water)
Attn: Echo 
875 East 1950 North
Spanish Fork, UT 84660
Email: support@echowater.com
Phone: +1 (855) 737-1114

For data protection inquiries from the EEA or UK, you may also contact us at support@echowater.com with “GDPR Request” in the subject line.

Echo Water products are not intended to diagnose, treat, cure, or prevent any disease and have not been evaluated by the FDA. Content on this site is for informational purposes only and should not be considered medical advice. Use of this site constitutes acceptance of our Terms and Conditions and this Privacy Policy.