Last updated 21 June 2026
Privacy, without the fog.
This policy covers the Emberex website and explains separately how the planned Etsy Review Carousel will handle data if approved and launched.
Who is responsible
Emberex is a UK-based independent two-person software team and trading name. Emberex is responsible for the personal information described in this policy. You can contact us through the privacy contact form.
Website information
We do not use advertising trackers, analytics scripts, cookies or browser storage on this website. Our hosting provider, Railway, processes ordinary technical request information needed to deliver and protect the website, which may include IP address, request time, requested path and browser information.
If you submit the contact form, we process your name, email address, selected topic and message so we can respond. Resend transmits the message to a private Microsoft-hosted inbox. The website does not place contact submissions in its own database and does not log their contents.
Purpose and lawful basis
We process enquiries because it is in our legitimate interests to answer product, support, privacy and security questions. Where your message concerns a potential or existing agreement, processing may also be necessary to take steps at your request or perform that agreement.
Retention
Contact messages are normally kept for no longer than 12 months after the conversation ends. We may keep a message longer where it is reasonably needed for an unresolved dispute, security investigation or legal obligation. Operational hosting logs are retained according to Railway’s configured service and account limits.
Planned app data use
Etsy API access is not currently enabled. If Etsy approves the integration, Emberex will process only seller-authorised review data needed to provide the Shopify storefront widget and will follow Etsy’s then-current caching, freshness and deletion requirements. Emberex will not use Etsy buyer emails or sales data.
Sharing and international processing
We use Railway for website hosting and Resend for contact-form delivery. The recipient mailbox is hosted by Microsoft. These providers process information on our behalf and may process it outside the United Kingdom using their applicable transfer safeguards. We do not sell personal information.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict your personal information, object to processing, and receive portable information. Use the contact form to make a request. We may need to verify your identity.
You may also complain to the UK Information Commissioner’s Office. We encourage you to contact us first so we can try to resolve the issue.
Changes
We will update this page when the website, providers or planned app data flows materially change. The date above identifies the current version.