Privacy Policy

Who is responsible

emmvi is a trading name of Jorge Gustavo Polin Barrionuevo, NIF 55434019V, of Av. de la Música 2, Aldaia, Valencia, Spain, who is the data controller for this website, emmvi.com. emmvi is a registered trademark in Spain.

For anything on this page, including any of the requests described below, write to sales@emmvi.com. A person reads it.

What this policy covers

This site only. It does not cover the websites, CRMs or automations we build for clients: on those, the client is the controller of their own customers’ data and their own policy applies.

What we collect when you fill in a form

The enquiry forms ask for your name, your email address, your company (optional) and your message. The enquiry form on the website design page also asks roughly how many pages you need, whether you want us to host the site, and a budget range.

When you submit it, that message is sent straight to our own inbox as an email, through a delivery service called Resend. It is not saved to a database on this website, because this website does not have one. Your email address is set as the reply address so we can answer you.

The legal basis is your request: you are asking us to get in touch, which under the GDPR is processing necessary to take steps at your request before entering into a contract.

What happens when you book a call

Booking goes through Calendly. Whatever you type into the booking form is collected by Calendly and reaches us as a calendar invite. Their privacy policy governs what they do with it.

One thing worth saying plainly, because most sites do not: the Calendly script and stylesheet load automatically on any page with a booking button, not only when you press it. That means Calendly’s servers can see your IP address and browser details even if you never click. Nothing is shown or opened until you do.

Measurement

We measure how the site is used so we know what to write and what to fix. Three tools are involved, and it is worth being specific about which does what.

• Google Tag Manager is a container. It measures nothing itself; it loads the other two. Because it is delivered by Google, Google receives your IP address and browser details when the page loads.
• Google Analytics 4 counts page views and sessions, and tells us roughly where visitors come from and which pages they read. Google states that Analytics does not store IP addresses: it uses them to work out an approximate location and then discards them.
• PostHog is product analytics. It records which pages you open and which things you click, and it links those events to a randomly generated identifier so we can tell one visit apart from another. It does not know your name unless you give it to us in a form. We use PostHog’s European cloud, so this data is stored in the EU and never leaves it.

None of this is connected to any advertising platform. We do not run ads and we do not pass any of it to anyone who does.

The legal basis for measurement is your consent, and you can stop all of it at any time with a tracker-blocking extension or your browser’s own protection. Nothing on this site breaks if you do.

Session recording

This is the most intrusive thing on the page, so it gets its own heading rather than a line buried in a list.

PostHog records sessions on this site. That means a playback of your visit as the page appeared: the pages you moved through, where you scrolled and what you clicked. We watch them to find the places where the site confuses people.

What you type into forms is masked and never reaches the recording. Your name, your email address and your message are replaced before the recording leaves your browser, so they exist only in the email that comes to us. Recordings are stored in PostHog’s European cloud and deleted automatically after 30 days.

If you would rather not be recorded, a tracker-blocking extension stops it, and you can write to us to have any recording of your visit deleted.

What is collected automatically

• Server logs. Our host, Vercel, records the usual request information, IP address, browser, the page requested and when. This is standard for any web server and is used to keep the site running and secure.
• Spam protection. When a form is submitted, your IP address is held in the server’s memory for ten minutes so that no more than five submissions can come from the same connection in that window. It is never written to disk, never stored alongside your message, and disappears when the window passes or the server restarts.

Cookies

The site itself sets no cookies. It has no login, no session and no preference store, so there is nothing of our own to remember.

The tools described above do set their own, and these are the ones you will find if you look:

• Google Analytics sets cookies beginning _ga to tell repeat visits apart. Google’s default lifetime for them is two years.
• PostHog sets a cookie beginning ph_ holding the random identifier described above, and uses your browser’s local storage alongside it.
• Calendly may set its own when its widget loads or when you open the booking window.

These belong to those companies rather than to us, and their own policies describe them in full. Clearing your browser’s cookies and site data removes all of them.

What we do not do

This list is as much a part of the policy as the rest of it.

• No advertising or retargeting trackers, and no link between our analytics and any advertising account.
• No calls to Google Fonts. The typeface is downloaded when the site is built and served from our own domain, so nothing about the way this page is drawn involves a request to Google.
• No selling, renting or sharing your details with anyone for their own marketing.
• No automated decisions about you. Nothing here decides anything on its own: when you send an enquiry, a person reads it and a person answers it.
• No attempt to identify you. The analytics identifier is random and we never try to match it to a name, an email address or a company unless you tell us who you are in a form.
• No newsletter sign-up hidden inside the contact form. If we ever add one, it will be a separate box you have to tick.

Who else handles your information

Five services are involved in running this site. Each processes data on our behalf or as an independent controller of their own platform, and each publishes its own policy and safeguards.

• Resend delivers the enquiry email to our inbox.
• Calendly handles call bookings.
• Vercel hosts and serves the site.
• Google delivers the Tag Manager container and runs Analytics.
• PostHog product analytics and session recording, on their European cloud.

Resend, Calendly, Vercel and Google are based in the United States or process data there, so sending an enquiry involves an international transfer. Each publishes the safeguards it relies on for transfers out of the European Economic Area; the links above are the current versions.

PostHog is the exception, and deliberately so: we chose their European cloud, so the analytics and the session recordings stay in the EU and no transfer arises for them at all.

How long we keep it

• Enquiries that do not lead to work: deleted within 12 months.
• If you become a client: for as long as we work together, and afterwards for the period that Spanish commercial and tax law requires records to be kept.
• Server logs: for the retention period our host applies, which is short and measured in days.
• Analytics: 14 months in Google Analytics, and the equivalent period in PostHog.
• Session recordings: 30 days, then deleted automatically.

You can ask us to delete an enquiry at any point before that and we will, unless we are legally required to keep it.

Your rights

Under the GDPR you can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable format, or to object to us processing it. Where processing rests on your consent, you can withdraw it at any time.

Write to sales@emmvi.com. We will answer within one month, and we will not ask you to justify the request.

If you think we have handled your data badly, you can complain to a supervisory authority. In Spain that is the Agencia Española de Protección de Datos (aepd.es). In the United Kingdom it is the Information Commissioner’s Office (ico.org.uk). You can also complain to the authority where you live.

Children

This site is aimed at businesses and is not intended for anyone under 16. We do not knowingly collect their information.

Changes to this policy

If what the site does changes, this page changes with it, and the date at the top changes too. There is no archive of previous versions; if you need one for a specific date, ask us.

Questions about any of this? Get in touch.