Privacy Policy
Last updated 3rd June 2025

We understand the trust you place in our service to add smart, dynamic and interesting content to your Calendar, and we take this responsibility very seriously.

When subscribing to the ECAL service, which is entirely FREE to use, you can be confident that we will only ever access your Calendar to deliver event information that you have requested from our publishers.

We will never read, change, update, remove or store your personal Calendar events. We take extra steps of security to make sure that can’t and doesn’t happen.

Additionally, our publishers must also agree to our very own strict Calendar Contact Standards, to ensure the information they deliver to you is exactly what you want, and what you have provided consent to receive.

If at any stage you are unhappy with the service, or the content you’re seeing in your Calendar from publishers, please let us know!

Please remember at any time, if necessary, you have the power to easily unsubscribe and revoke ECAL’s access directly from your calendar, or from the Manage My ECAL portal.

The Manage My ECAL feature is available for all Google and Outlook.com users, and allows you to easily self-manage your ECAL calendar service, to add or remove publishers and edit the content you are receiving, all at a click of a button. You will see a link to Manage My ECAL in each of your calendar events.

For more information on how to manage your calendar, and for any other support related questions, please visit our Support Centre at support.ecal.com.

We hope you enjoy the ECAL calendar communications service, and we welcome any feedback or suggestions.

Very best,
The ECAL Team

OUR FULL PRIVACY STATEMENT

1. Your privacy matters

ECAL is a FREE service owned and operated worldwide by HyperKu Pte Ltd and it’s various operational entities ECAL Marketing Pty Ltd (Australia), ECAL Marketing LLC (US) and ECAL Marketing Ltd (UK) (HyperKu). We take a strong stance on user privacy and protection, and this helps to underpin how we develop our product, the service we offer, and how we gather and process your personal information.

2. Introduction

ECAL allows users to receive smart, dynamic communications and information (in the form of an Event or Schedule) directly into their personal digital calendar (Calendar) of choice.

Users will interact with ECAL’s ‘sync to calendar’ (or ‘add to calendar’ or similar) button Display via a third-party Publisher organisation website (or app, email, social media, display ad or other) to select their favourite Events and Schedules and connect their calendar (sometimes referred to as a ‘calendar subscription’).

Publishers may include any event-based organisation or group, such as a sports team, sports league, media or streaming organisation, ticketing provider, retailer, financial institution, education provider, conference, community group or other.

This Privacy Policy describes the information we collect in connection with the ECAL service and how we use and process it. By providing personal information to us or using the service, you agree to the terms of this Privacy Policy.

We may vary this Privacy Policy from time to time, the most recent version can always be accessed at www.ecal.com. Any changes will become effective when we post the revised Privacy Policy at www.ecal.com.

3. Data protection law

HyperKu complies with relevant data protection laws in which it operates and takes a best in class approach to user privacy, including the ‘EU General Data Protection Regulation’, ‘UK General Data Protection Regulation’ (GDPR), ‘California Consumer Privacy Act’ (CCPA) and Australia’s ‘The Privacy and Other Legislation Amendment Act 2024’ (Privacy Act Amendment Act).

We are committed to ensuring that we collect, use, disclose and store your information in accordance with GDPR, CCPA and any applicable data protection and privacy laws in which we operate, and we are committed to ensuring that our Publishers do the same.

4. Data storage and transfer

Personal data is stored securely in AWS (Amazon Web Services) servers, located in North Virginia, USA, and as such, your data may be stored outside your local border. In addition, our employees or contractors may need to access data stored from a non-EU country including UK, USA and Australia for technical and support-related reasons. In all cases where data is transferred outside of the EU, HyperKu commits to ensuring such transfers are compliant with applicable data transfer laws, including GDPR.

HyperKu’s legal basis for data transfer outside of the EU specifically is protected and secured by the EU-US Data Privacy Framework (DPF) for EU users, the US-UK Data Bridge under Article 45 of the UK GDPR for UK users, and under Standard Contractual Clauses (SCC’s) in the EU, UK and elsewhere.

Hyperku also has an action plan in place to deliver local user data hosting to best meet the current and anticipated rise in data sovereignty laws and frameworks, such as EU GDPR and SDAIA (Saudi Arabia).

5. Data Controller and Data Processor

In most cases, HyperKu’s contract with the Publisher will specify that the Publisher owns any user information collected via the ECAL service, and that the Publisher is provided with a copy of the user information.

With respect to managing your calendar subscription, and with respect to creating non-identifiable aggregate data, HyperKu is a Data Controller.

With respect to end-user data, and with respect to any personal data collected via the ECAL service, HyperKu is a Data Processor. In some cases, where HyperKu owns the user information, HyperKu is a Data Controller.

6. ECAL ‘Contact Standards’

ADDITIONALLY, WE FOLLOW OUR OWN ECAL CONTACT AND COMMUNICATIONS POLICY (“CONTACT STANDARDS”) AND ASK OUR PUBLISHERS TO ALSO FOLLOW OUR CONTACT STANDARDS AND THIS PRIVACY POLICY. THE ECAL CONTACT STANDARDS ENDEAVOUR TO ENSURE THAT COMMUNICATIONS AND INFORMATION SENT TO YOUR CALENDAR (WHETHER BY THE PUBLISHER OR HYPERKU) MEETS OUR STRICT TEST, IN THAT IT IS DEEMED ‘SPECIFIC’, ‘RELEVANT’ AND / OR OF ‘REASONABLE VALUE’ TO YOU (BASED ON YOUR KNOWN PROFILE) OR BASED ON ONE OF YOUR CHOSEN SCHEDULES OR EVENTS.

FURTHER, HYPERKU WILL NOT ACCESS ANY OTHER INFORMATION IN YOUR PERSONAL CALENDAR, INCLUDING YOUR PRIVATE EVENTS, MEETINGS, APPOINTMENTS, ETC., OTHER THAN EVENTS AND SCHEDULES THAT YOU HAVE SUBSCRIBED TO USING THE ECAL SERVICE.

7. Information gathering

In keeping with GDPR, we advise Publishers to only request information that is considered essential to the service. We may collect the following types of information:

• Information you provide us – Personal information that you provide to us during registration, and that we require to deliver the service, including but not limited to: email address, mobile number, content preferences (so we know what content to sync to you), location at the point of registration via IP only incl. country, state, city or post / zip code (so we can sync localised content such as broadcast details or ticketing to you), and language preferences via your browser (so we can provide a translated service to you).
• Usage information – We may receive and store certain types of information relating to your usage of the ECAL service. For example, we may collect data relating to you subscribing to a Schedule, the Calendar program you are using, click-through data (eg: clicks on our links in the calendar), the Calendar and browser’s communication with our servers. We do not use cookies in the ECAL service. View our Cookie Policy.

We aim to continually improve the service we offer, and the information we collect allows us to tailor our service to best suit you.

8. Consent

• In accordance with GDPR, CCPA and other best in class privacy law, your consent to use the service must be a) freely given, b) specific, c) informed, and d) an unambiguous indication by way of a clear affirmative action. We provide you with this level of consent via the ECAL sync process.

9. Breach notification

• In accordance with GDPR, CCPA and other best in class privacy law, if we become aware of a data breach that is likely to result in a risk for the rights and freedoms of individuals, we will notify the Publisher client within 24 hours, and with their approval we will endeavour to contact you by email within 72 hours of first becoming aware of the breach.

10. Right to access

• In accordance with GDPR, CCPA and other best in class privacy law, you may request a copy of your personal data from us, free of charge in an electronic format.
• Please visit the ECAL Support Centre for details on how to best provide this request.

11. Right to be forgotten

• In accordance with GDPR, CCPA and other best in class privacy law, you may withdraw your consent to the service at any time.
• To withdraw consent and cease using the service, you must disable the calendar connection from your computer or device.
• In any case, HyperKu automatically removes your personal record from the database if your calendar connection has been ‘inactive’ for 3 years.

12. Data minimization

• In accordance with GDPR, CCPA and other best in class privacy law, HyperKu will only hold and process data that is essential to provide the service. This includes timestamp, email, calendar type, content preferences (so we know what content to sync to you), location at the point of registration only via IP incl. country, state, city or post / zip code (so we can sync localised content such as broadcast details or ticketing to you), language preferences via browser (so we can provide a translated service to you), Terms of Use consent, marketing opt-in consent, and age consent.

13. Age consent

• The ECAL service is not directed to children under 13, and we do not knowingly collect personal information online from such children.
• In the EU and UK, in accordance with GDPR, if you are under the age of 16 years (or under 13 years in the UK), you may be required to provide your date of birth to verify you are of minimum legal age to use the service. If you do not meet the minimum age required by the Publisher, you may not use the service.

14. How we may use the information collected

The information we collect may be used to:

• Contact you in relation to your ECAL service, a particular Schedule or a particular Event;
• Ensure that ECAL content is presented in the most effective and secure manner for you and for your device and settings;
• Send you promotional information or offers on behalf of Publishers, in accordance with ECAL Contact Standards;
• Customise the content you see in the calendar (eg: localised TV broadcast details or ticketing information);
• Provide technical support;
• Provide security support or important notice;
• Contact you in relation to your registration and/or account status;
• Confirm or fulfil a request you have made and provide you with a related customer service;
• Facilitate social sharing functionality;
• Monitor or improve the use of the ECAL service, our website or our other products and services or develop new products;
• Monitor compliance with ECAL Terms of Use and prevent fraud;
• Make content or service recommendations;
• Share anonymous de-identified aggregate information (not personally identifiable information), such as demographics and service usage statistics, with Publishers, advertisers, sponsors or other organisations including media and data agencies. When this type of information is shared, the receiving parties do not have access to your personally identifiable information; and
• Generally maintain and develop our relationship with you.

We may not be able to do these things without your personal information, which would limit the ability for us to provide the ECAL service to you.

With regard to information that does NOT personally identify you, we may use or disclose such information for any purpose.

15. With whom we share your information

At times, we may share your personal information with others for various purposes.

• Publishers: We will usually provide your personal information to the Publisher(s) relating to the particular Schedule(s) that you have chosen to subscribe to via the ECAL service. Separately, during the sync process, Publishers may offer you an option to receive additional marketing and communications from them or their partners. This optional service is offered by the Publisher and is governed by their own privacy policy. Please contact the Publisher directly if you wish to remove your consent to their additional marketing and communications.
• Suppliers and agents: We may employ other businesses, certain services and individuals to perform functions on our behalf. Examples include system analysis, data analysis, marketing assistance, communications, customer service and support. They may have access to personally identifiable information needed to perform their functions. HyperKu ensures any such suppliers or agents are subject to strict confidentiality and security protocols to ensure the safety and security of your information.
• Advertising: You may see an advertising message on the ‘success’ screen of the ECAL widget following a successful sync to the service. This is an ad managed by the Publisher. We do not use third-party advertising agencies, nor do we deliver advertising to the ECAL widget, or your calendar, at any time.
• Sponsor / Marketing Messages (integrated): You may see an integrated sponsor or marketing message in an existing calendar event from a Publisher (such as a ticketing, merchandise or streaming offer). Such messaging may appear in an existing Publisher event, and must meet the ECAL Contact Standards. At no time does any sponsor or marketing third party have access to your information.
  Sponsor / Marketing Messages (new event): You may see a sponsor or marketing message as a new calendar event from a Publisher (such as a ticketing, merchandise or streaming offer). Such messaging may appear as a new Publisher event, and must meet the ECAL Contact Standards. At no time does any sponsor or marketing third party have access to your information.

The ECAL service enables you to share your information with your friends and contacts through your social media account, via the share function on the ‘success’ screen of the ECAL widget. Please keep in mind that any information you choose to share through these services will be governed by the relevant social media site’s own privacy policy and settings, and there is the potential for the information you share to become public.

The ECAL Publisher(s) to which you subscribe will have access to your personal information, and they may send Event-related information into your Calendar (subject to any choices they make available to you), suiting your known profile in the ECAL system, in accordance with our ECAL Contact Standards.

We may disclose your personal information to a third party in the event of any reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).

We may also use or disclose your personal information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

16. Links to other websites

When you use the ECAL service, there may be links in the Event entries delivered to your personal Calendar. These links when clicked may direct you to other websites and services beyond our control. For example, if you click on a ‘Tickets’ link, this may take you to the specific ticketing provider site for that Event. This might include links from aligned sponsors and marketing partners that may use the ECAL service as part of a co-branding arrangement with the Publisher or HyperKu. When you visit an external website via these links, these other websites are outside our control and may send their own cookies to you when you visit their website, independently collect data or solicit personal information and may or may not have their own published privacy policies. If you visit a website that is linked to our system or service, you should consult that website’s privacy policy before providing any personal information. This Privacy Policy does not address, and we are not responsible for, any such website’s or service’s information or other practices.

17. Access and updating

If you would like to request a copy of this privacy policy or your personal information or would like to change the personal information we hold about you, please email privacy@ecal.com.

18. Security & Storage

The transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our website or ECAL service; any transmission is at your own risk. Once we have received your information, we will take best practice steps to protect personal information we collect from you from misuse, loss or unauthorised access, modification or disclosure.

Your information is stored by AWS (Amazon Web Services) on high-security servers located in North Virginia, United States of America, and is protected in accordance with United States laws. We carefully select our data storage partners based primarily on their level of security, reliability and experience in the storage and treatment of data, including personal information.

We encrypt your data in storage and in transfer so as to further increase the security of your data.’

In addition, we take the following technical and organisational measures (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, and the risks for the rights and freedoms of users:

• AWS FTR (Foundational Technical Review) compliance
• AWS WAR (Well Architected Review) compliance
• Organisational security policies and practice incl.
  • MFA for all employees
  • Identity federation
  • Zero trust security
  • Activity logging and monitoring
• Operational security policies and practice incl.
  • Vulnerability management of code base
• Back-up and recovery protocols set in place to meet RPO of 24 hours
• System availability of 99.99% uptime
• Disaster Recovery Plan and Resiliency testing
• Penetration testing (at least every 12 months)
• Load testing (at 10,000 requests per second)
• Data encryption in transit and at rest
• PII and User identity securely stored and managed
• User events logging and monitoring
• Isolated environments for testing, staging and production
• Universal application design to meet GDPR principles and standards incl. clear purpose, minimum age consent, data minimisation and positive action consents
• End-user data erasure procedures and management

19. Notice for residents of California (USA)

Residents of California may contact HyperKu (support@ecal.com) once each year to receive the following information: (i) the categories of personal information disclosed to third parties for the third parties’ direct marketing purposes during the prior calendar year; and (b) the names and addresses of all such third parties.

20. Service Termination

Participation and use of the ECAL service is voluntary. If you no longer wish to receive Event-related information, you can delete your Publisher subscription anytime from within the settings in your personal Calendar, or by revoking access, and cancel the ECAL service. You can self-manage your calendar subscriptions via our Manage My ECAL feature. For information on how to manage your Calendar application, and for any other support related questions, please go to our Support Centre at support.ecal.com.

21. Cookies

Cookies are essential for our website to function optimally and enhance website performance for a better user experience. The website administrator(s) controls all cookies used on the site and grants third parties access for statistics and analytics purposes. Cookies are needed to remember to identify visitors and remember their site actions and online behaviours.

We use cookies for various reasons, which are explained in detail below. Please know that cookie-related information is not used to identify you personally.

We do not use cookies on the ECAL calendar application.

View ECAL’s Cookie Policy here.

22. Contact us

If you have any questions about this privacy statement, or your dealings with us, please email support@ecal.com.

HyperKu Pte Ltd
160 Robinson Road #14-04
Singapore Business Federation Centre
Singapore 068914