Privacy

What we collect

Analytics. We use Google Analytics 4 to understand how the site is used — which pages get read, where visitors come from, what works and what doesn't. GA4 sets cookies in your browser and sends usage data to Google. IP addresses are anonymised by Google before storage.

Contact form. When you fill in the contact form, we receive whatever you put in it: name, email address, your message, and optionally a phone number and website. The form is delivered to us by Resend, an email infrastructure provider.

Server logs. Our servers log each resource request with the visitor's IP address, the page requested, the browser, and a timestamp. We use these for debugging and to spot abuse. They're rotated every 30 days.

That's it. No tracking pixels, no advertising cookies, no profiling, no data sold to anyone.

Where the data goes

The site itself runs on our own infrastructure in the European Union. Page requests, server logs and contact form submissions stay there.

Two third parties are involved:

• Google (Google Analytics 4) — processes analytics data. Google is a US company; data may be transferred outside the EU under the EU–US Data Privacy Framework.
• Resend — delivers contact form submissions to our inbox. Resend's EU region is used, which runs on AWS infrastructure in Ireland; data stays in the EU throughout.

Both have their own privacy policies and we have data processing terms in place with them.

How long we keep it

• Analytics data: 14 months in GA4, then deleted automatically.
• Contact form messages: kept while the conversation is live, then for as long as the business relationship continues. Deleted on request, or within two years of last contact if no relationship developed.
• Server logs: rotated every 30 days.

Your rights

Under UK and EU data protection law you can ask us to show you what we hold about you, correct it, delete it, or stop processing it. Email hello@empirical.agency (opens mail app) and we'll handle it within a calendar month — usually much sooner.

If you're not happy with how we've handled a request, you can complain to the Information Commissioner's Office in the UK, or your local data protection authority elsewhere in the EU.

Cookies

The site sets a small number of first-party cookies for things like remembering form state and basic site function. These don't identify you and aren't shared with anyone.

Google Analytics sets its own cookies for analytics. If you'd rather not be tracked, most browsers let you block third-party cookies, or you can install the Google Analytics opt-out browser add-on. We don't use cookies for advertising or anything beyond analytics.

Changes

If this statement changes substantively, the last reviewed date below changes too. Older versions aren't kept publicly but we can send you a previous version on request.