A plain-language summary of how EMRYS Systems collects, stores and protects personal data, and your rights under UK GDPR. If anything here is unclear, contact us and we'll explain.
Any personal information you give us, through the contact form, an account sign-up, or the simulator login, is stored securely and used only to provide the service you asked for. We do not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes.
Depending on how you use the site, this can include:
Contact form: name, email address, and the message you send us.
Account / simulator access: username, email address, and a securely hashed password (we never store passwords in plain text).
Payment: handled entirely by Stripe; we do not collect or store your card details ourselves.
Technical data: basic session information (e.g. login state, cookie expiry) needed to keep you signed in.
We do not use third-party advertising trackers or sell browsing data to ad networks.
Data is held on secured servers with access restricted to those who need it to operate the site. Passwords are never stored in readable form. Session cookies are set to Secure, HttpOnly and SameSite=Strict, and expire automatically when your browser session ends or after a fixed period of inactivity.
We keep personal data only for as long as it's needed for the purpose it was collected: for example, contact enquiries are retained only while we're corresponding with you, and account data only while your account remains active.
We do not share, sell, rent, or otherwise disclose your personal data to third parties for their own marketing or commercial use. Data is only ever accessed by EMRYS Systems for the purpose of running the site and responding to you, or where we're legally required to disclose it (for example, in response to a lawful request from a UK authority).
Where we use third-party infrastructure to run the site (for example, hosting or email delivery), those providers act strictly on our instructions and are not permitted to use your data for their own purposes.
Payments: when you purchase access to Emrys MX, payment is handled by Stripe, our third-party payment processor. To complete your transaction, Stripe receives the information needed to process payment (such as your email address and card details) directly; we do not see or store your card details ourselves. Stripe processes this data under its own privacy policy and terms, available at stripe.com/privacy.
Under UK data protection law, you have the right to:
• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Delete your data ("right to be forgotten"), where applicable
• Restrict or object to certain processing
• Data portability: receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us using the details below. We'll respond within one month, as required by law.
We use strictly necessary session cookies to keep you signed in and to remember your access level (for example, on the simulator). We do not use third-party advertising or cross-site tracking cookies.
If you have any questions about this policy, want to know what data we hold about you, or want it corrected or deleted, email us at info@emryssystems.com or use the contact page. If you remain unsatisfied with our response, you have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO) at ico.org.uk.