EmbraceIAPrivacy policy
Last updated: 24 July 2026
This policy explains what personal data we collect through the embraceIA.com site, why, how long we keep it, and what your rights are.
1. Data controller
EmbraceIA Limited (EmbraceIA Ltd), a Private Limited Company under the laws of England and Wales, registered with Companies House under number 17105640, with registered office at 23, The Drive, London, E4 7AJ, United Kingdom.
Contact: anthony.shingleton@embraceIA.com
Representative in the European Union (Article 27 GDPR): Mr Anthony Shingleton, 83520 Roquebrune-sur-Argens, France, reachable at anthony.shingleton@embraceIA.com. You may contact him for any question relating to the processing of your data.
2. Data collected
2.1 Data you send us
Via the contact form: your name, your company name, your work email address and the message you write.
These are the only fields collected. We ask for neither banking data nor sensitive data within the meaning of Article 9 GDPR.
2.2 Technical data
Our host keeps connection logs (IP address, date, page viewed) for security and proper operation of the service.
2.3 Downloads
The documents offered for download on this site are accessible freely, with no form or email address. Downloading them triggers no collection of personal data.
3. Purposes and legal bases
- Responding to your request — legal basis: pre-contractual measures taken at your request (Art. 6.1.b) and legitimate interest in responding to a professional enquiry (Art. 6.1.f).
- Ensuring the security and operation of the site — legal basis: legitimate interest (Art. 6.1.f).
We do not add you to any mailing list without your explicit consent, and we do not resell any data.
4. Retention period
- Contact requests with no follow-up: 12 months from the last exchange, then deletion.
- Engaged commercial relationship: duration of the relationship, then 3 years for prospecting purposes, unless a longer legal retention obligation applies.
- Technical logs: kept by the host according to its own policy, generally 6 to 12 months.
5. Recipients
Your data is processed by EmbraceIA Ltd. It is neither sold, rented nor passed to third parties for commercial purposes.
6. Sub-processors
- Hostinger UAB (Lithuania) — site hosting. Servers located in the European Union.
- Vercel Inc. — technical processing of the contact form.
- Brevo (Sendinblue SAS, France) — recording your request and delivering the email notification.
The site's fonts are hosted on our own servers: displaying them triggers no call to a third-party service.
7. Transfers outside the European Union
Some of our sub-processors may process data outside the European Union. Such transfers are governed by the European Commission's standard contractual clauses or by an adequacy decision.
As EmbraceIA Ltd is established in the United Kingdom, data may be processed there. The United Kingdom benefits from an adequacy decision from the European Commission, recognising an equivalent level of protection.
8. Cookies
This site sets no cookies for analytics, advertising or tracking. No consent banner is therefore required.
9. Security
The site is served exclusively over HTTPS. Technical access is restricted and authenticated. Requests received are stored on professional services with their own security measures.
10. Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability of your data.
To exercise them, write to anthony.shingleton@embraceIA.com. We respond within one month.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL (France) or the supervisory authority of your country of residence.
11. Changes
This policy may be updated. The date of the last update appears at the top of the page.