Privacy Policy

1. Who We Are

Embra Technologies (“Embra,” “we,” “us,” or “our”) operates the website embratechnologies.org and any sub-sites. We provide website design, search engine optimization, and digital identity services for growing businesses.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or contact us about our services. Please read this policy carefully.

2. Data We Collect

Information you provide directly

• Contact form submissions, your name, email address, business name, website URL, and the message you write to us.
• Email correspondence, any information you include when emailing us at sales@embratechnologies.org.

Information collected automatically

• Log data, your IP address, browser type, operating system, referring URL, pages visited, and timestamps. This data is collected by our hosting provider (Vercel) in standard server logs.
• Analytics data, aggregated, anonymised traffic and engagement data collected via privacy-first Vercel Analytics. This includes general page counts, referrer domains, and country-level geographic region. No cross-site tracking or personal identifiers are used.
• Performance data, Core Web Vitals and page-load metrics collected by Vercel’s edge infrastructure. No personal identifiers are attached to this data.

Information we do NOT collect

We do not collect payment card details (all payments are processed by Stripe, directly). We do not knowingly collect personal information from children under 13.

3. How We Use Your Data

We use the information we collect for the following purposes:

• Responding to enquiries, to reply to contact form submissions and email messages.
• Providing services, to deliver the website design, SEO, and digital identity services you have engaged us for.
• Sending project updates, to communicate progress, milestones, and deliverables related to your active project.
• Improving our website, to understand which pages are most useful and where visitors encounter difficulties, using anonymised analytics data.
• Legal compliance, to comply with applicable laws and enforce our Terms of Service.

We do not sell, rent, or trade your personal information to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.

4. Cookies & Tracking

Our website may use the following types of cookies and local storage:

• Strictly necessary, cookies required for the website to function (e.g., CSRF tokens, session identifiers). These cannot be disabled.
• Analytics, Google Analytics 4 may set cookies to track anonymous usage patterns. You can opt out via your browser settings or by installing the Google Analytics Opt-out Browser Add-on.

You can control cookie settings through your browser. Disabling cookies may affect website functionality.

5. Third-Party Services

We use the following third-party services that may process your data:

• Vercel, our hosting and edge-delivery provider. Vercel processes server logs and performance data. See the Vercel Privacy Policy.
• FormSubmit, we use FormSubmit (formsubmit.co) to route contact form submissions to our email. Your form data (name, email, message) is transmitted to FormSubmit and forwarded to our inbox. See the FormSubmit Privacy Policy.
• Vercel Analytics & Axiom, used for anonymised performance monitoring and visitor count statistics. No personal identifiers or cross-site tracking cookies are stored. See the Vercel Privacy Policy and Axiom Privacy Policy.
• Stripe, used for payment processing on applicable invoices. We never see or store your full card details. See the Stripe Privacy Policy.
• Google Fonts / Next.js Font Optimization, font files are self-hosted via Next.js’s built-in font optimization. No requests are made to Google’s servers at runtime.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Contact form submissions, retained in our email for up to 3 years from the date of submission, or until you request deletion.
• Active client project data, retained for the duration of the project plus 2 years.
• Analytics data, Google Analytics retains data per your browser’s GA settings (default 14 months).
• Server logs, Vercel retains server logs for up to 30 days.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access, request a copy of the personal data we hold about you.
• Rectification, ask us to correct inaccurate data.
• Erasure, request that we delete your personal data, subject to legal obligations.
• Restriction, ask us to limit how we process your data.
• Portability, request your data in a structured, machine-readable format.
• Objection, object to our processing of your data for marketing or profiling purposes.

To exercise any of these rights, contact us at sales@embratechnologies.org. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including TLS/HTTPS encryption for all data in transit, access controls limiting who can view your data, and regular security reviews of our infrastructure and third-party integrations.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

If you are located in the European Union and believe we have violated your data protection rights, you may lodge a complaint with your local supervisory authority.