Privacy Policy

Scope

This policy applies to empirist.com, its website analytics, and the personal data you choose to submit through its consultation form or by email. We use Cloudflare Web Analytics and Cloudflare Workers Analytics Engine to understand traffic, site performance, and aggregate interactions. We do not use advertising profiles or session recordings.

Data we process

• Contact and professional details you provide, including your name, work email, organisation, preferred meeting time, and technical inquiry.
• Security data necessary to protect the form from abuse, including the Cloudflare Turnstile token and associated network information processed by Cloudflare.
• Standard technical request logs maintained by our hosting and security provider for reliability and abuse prevention.

Website analytics

Cloudflare Web Analytics measures page visits, referring websites, country, device and browser categories, and page performance. Our own aggregate event measurements include navigation and email-link clicks, scroll depth, time while a page is visible, consultation-form interactions, and successful delivery counts. Campaign attribution is limited to simple utm_source, utm_medium, and utm_campaign labels; use campaign codes, not personal information, in these links.

Our event dataset does not store visitor or session identifiers, IP addresses, full referrer URLs, arbitrary query strings, or the contents of form fields. Events are not linked into individual browsing histories. Cloudflare processes network information to deliver and protect the service; the collection endpoint also uses rate limiting. Our browser analytics respect Do Not Track and Global Privacy Control signals.

Custom event data is retained by Cloudflare Analytics Engine for three months. Cloudflare Web Analytics provides a six-month reporting window. These measurements help us improve the website and understand which content and contact routes are useful.

Purpose and legal basis

We use submitted data to answer your inquiry, assess a possible engagement, arrange a meeting, and protect the service from abuse. Depending on the context, processing is based on steps requested before entering a contract, our legitimate interest in responding to professional inquiries and securing the website, or consent where required.

Infrastructure and recipients

The website runs on Cloudflare infrastructure. Turnstile verifies form submissions and Zoho Mail delivers the message to our designated business email group through its EU API. We do not sell submitted personal data. Access is limited to service providers and team members who need it for the purposes described here.

Storage and retention

The contact endpoint does not write submissions to an application database. Messages are retained in our business email systems only for as long as needed to handle the inquiry, maintain appropriate business records, resolve disputes, or meet legal obligations.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may also contact the competent data-protection authority. Send requests to office@empirist.com; we may need to verify your identity before acting on a request.