What we collect, why, and for how long.

Who is responsible

Empley is the data controller for information collected on this site. Questions and requests go to info@empley.com and are answered within five business days.

Intro calls and contact

When you email us or book an intro call, we process your name, email, company and whatever you write. The basis is legitimate interest: responding to a business inquiry.

Data is kept while the dialogue is active, and for a maximum of 24 months after the last contact.

The newsletter

You give an email address and nothing else. It's used only to send updates, never for profiling and never shared with a third party.

Unsubscribe via the link in every email or by writing to info@empley.com. Your address is then deleted.

Cookie-free analytics

This site sets no marketing cookies and uses no third-party analytics. We count page views with our own, minimal signal: a page path and a timestamp.

• No IP address is stored.
• No cookie or device identifier is set.
• No data is shared with ad networks.
• Numbers are aggregated and can't be traced to a person.

Downloads

The governance pack and case packs are ungated. You download them without leaving any details, so a security lead can review us without becoming a lead.

Client engagements

In client work the roles reverse: you're the controller, we're the processor. Agents run in your environment, against your systems, with your data. A DPA, data flow map and kill switch are part of the governance pack.

Your rights

You have the right to access, correction, deletion, restriction and objection. Send requests to info@empley.com. If you're not satisfied with our response, you can contact your local data protection authority.