Embedism Logo
Let's Talk

Privacy Policy & GDPR Statement

Last Updated: October 14, 2026

1. Introduction

Embedism Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This policy provides detailed information on how we comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

2. Data Controller

For the purpose of GDPR, the data controller is Embedism Ltd, Arch 534 Orphans Yard, Brixton Station Road, London, SW9 8QB. Our Data Protection Officer can be reached at hello@embedism.com.

3. Legal Basis for Processing

We process personal data under the following legal bases:

  • Contractual Necessity: To fulfil our obligations under contracts for services or products.
  • Legitimate Interests: For business operations, improving our services, and maintaining security, provided these do not override your fundamental rights.
  • Consent: Where you have provided clear, affirmative consent for a specific purpose (e.g., newsletter subscriptions).
  • Legal Obligation: To comply with statutory requirements (e.g., tax and accounting).

4. Information We Collect

We collect only the minimum amount of personal data necessary to provide our services:

  • Identity Data: Name, job title.
  • Contact Data: Email address, phone number, business address.
  • Technical Data: IP address, browser type, and usage data via essential cookies.
  • Communication Data: Records of correspondence when you contact us.
  • Marketing Source Data: How you found our website (for example, the campaign link or website that sent you), which we receive only if you submit one of our forms.

5. Cookies and Local Storage

We use essential cookies to make the website work. We also use your browser's local storage to remember how you arrived at our website, so we can see which of our marketing activities are useful.

  • What we store: Campaign tags in the link you followed (such as utm_source or utm_campaign), advertising click identifiers, the address of the website that sent you, the first page you visited and the date.
  • Where it is kept: On your device only. It is not sent to us when you browse the website.
  • When we receive it: Only when you submit our contact form or a document download form. It is then attached to your enquiry and kept under the same retention policy.
  • How long it is kept: Up to 90 days on your device.
  • How to remove it: Clear the site data for embedism.com in your browser settings, or contact us to remove it from an enquiry you have sent.

We do not use this information to identify you before you contact us, and we do not share it with advertising networks.

6. Data Retention

We apply a "conservative-yet-compliant" retention policy. Personal data is kept only for as long as necessary to fulfil the purposes it was collected for, including satisfying any legal, accounting, or reporting requirements. Typically, project-related data is retained for 7 years following the end of the contract.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Obtain a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where no overriding legal basis for processing exists.
  • Right to Restrict Processing: Request a temporary halt to data processing.
  • Right to Data Portability: Receive your data in a structured, commonly used format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.

8. International Transfers

We primarily store and process data within the UK and European Economic Area (EEA). If data is transferred outside these regions, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to maintain a level of protection equivalent to GDPR.

9. Data Security

We implement robust technical and organisational measures to prevent unauthorised access, disclosure, or loss of your data. This includes encrypted communications, access controls, and regular security reviews.

10. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

11. Contact

For any privacy-related inquiries or to exercise your rights, please contact us at:

hello@embedism.com