Privacy Policy
This Privacy Policy ("Policy") applies to https://www.emphere.com, and Emphere, Inc. ("Company", "we", "us", or "our") and governs data collection and usage. By using our website, you consent to the data practices described in this statement.
1. Collection of your Personal Information
We may collect personally identifiable information when you voluntarily provide it, such as:
- First and last name
- Email address
- Job title
- Company/employer name
- Message content submitted through contact forms
We do not collect any personal information about you unless you voluntarily provide it to us through our contact forms or by sending us an email.
2. Use of your Personal Information
We use your personal information for the following purposes:
- To respond to your inquiries and contact requests
- To provide you with information about our products and services
- To improve our website and services
- To comply with legal obligations
3. Lawful Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following lawful bases:
- Consent: For analytics cookies and marketing communications. You may withdraw consent at any time.
- Legitimate Interest: For website operation, security, and responding to your inquiries.
- Legal Obligation: When we are required to comply with applicable laws.
4. Service Providers and Third Parties
We use the following third-party service providers to operate our website:
PostHog (Analytics)
We use PostHog to analyze website usage and improve user experience. PostHog collects data such as pages visited, time spent on site, browser type, and device information. PostHog is hosted in the United States.
Data collected: IP address, browser type, device information, pages visited, referrer URL, session duration
Location: United States
PostHog analytics only runs after you provide consent via our cookie banner.
Resend (Email Service)
We use Resend to send and receive emails from our contact forms. When you submit a contact form, your name, email address, and message are transmitted to Resend for email delivery.
Data processed: Name, email address, message content
Clay (Website Analytics)
We use Clay to understand how our website is used and which organizations visit it. Clay's script may collect your IP address, browser type, device information, pages visited, and referrer URL, and may store identifiers in your browser.
Consent: If you are in Europe or the United Kingdom, Clay loads only after you accept analytics in our cookie banner. Elsewhere it is on by default, and you can turn it off at any time through Cookie settings in the site footer. We treat Global Privacy Control as an opt out. Turning analytics off stops Clay from loading and removes the identifiers it stored in your browser.
Calendly (Meeting Scheduling)
When you open our contact window, we load Calendly's scheduling widget so you can book a call. It does not load until you open that window. Calendly receives your IP address and browser information, may set cookies, and receives the name, email address, and any other details you enter to book. Calendly's privacy notice applies to that information.
YouTube (Embedded Video)
Some pages, including our research posts, include a video hosted on YouTube, which is operated by Google. The video player does not load, and your browser makes no request to YouTube, until you click play. When you do, we use YouTube's privacy enhanced mode, and Google receives your IP address and browser information and may set cookies or use similar technologies. Google's privacy policy applies to that data.
Cloudflare (Security and Region Check)
We use Cloudflare to help protect our website and to work out which region you are visiting from. Cloudflare may set a security cookie (_cfuvid) and processes your IP address for these purposes. To decide whether to show the cookie banner, your browser asks a small service we run on Cloudflare which region your request comes from. The answer goes back to your browser only, and we do not store it. Cloudflare's privacy policy applies.
Cloudflare Turnstile (Form Protection)
Our forms use Cloudflare Turnstile to tell people from automated bots. When you view or submit a form, Turnstile runs in your browser and may collect technical signals such as your IP address, browser and device characteristics, and how you interact with the page. Cloudflare processes that data under its own privacy policy, linked above.
Third-Party Resources
Our website loads resources from the following external services, which may receive your IP address as part of standard web requests:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) - for web fonts
- jsDelivr (cdn.jsdelivr.net) - for JavaScript libraries
5. Cookies and Tracking Technologies
Our website uses cookies to enhance your experience:
- Essential cookies: Required for basic website functionality. These do not require consent.
- Analytics cookies: Used by PostHog to analyze site usage. These are only set after you provide consent via our cookie banner.
Visitors in Europe and the United Kingdom see a cookie banner and choose whether to allow analytics. Elsewhere, analytics is on by default and you can turn it off at any time through Cookie settings in the site footer. Your choice is stored in your browser, not on our servers. To prevent duplicate submissions, our research preview form stores a timestamp in your browser for 24 hours after you apply.
6. International Data Transfers
Your personal data may be transferred to and processed in the United States, where some of our service providers are located. For transfers from the EEA, UK, or Switzerland, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The EU-U.S. Data Privacy Framework (DPF), where applicable
These mechanisms ensure that your data receives an adequate level of protection when transferred internationally.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: Retained for up to 2 years after your last interaction with us
- Analytics data: Retained by PostHog according to their data retention policy (typically 1 year)
- Email communications: Retained for as long as necessary to respond to your inquiry and for our records
After the retention period expires, we will securely delete or anonymize your data.
8. Your Rights (GDPR and CCPA)
Depending on your location, you may have the following rights regarding your personal data:
For EEA/UK/Swiss Residents (GDPR)
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Request limitation on how we use your data
- Right to Data Portability: Request your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
For California Residents (CCPA)
- Right to Know: Request information about the personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: We do not sell personal information
- Right to Non-Discrimination: Exercise your rights without discriminatory treatment
To exercise any of these rights, please contact us at privacy@emphere.com. We will respond to your request within 30 days.
You also have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
9. Security of your Personal Information
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption in transit using TLS/SSL
- Secure hosting infrastructure
- Access controls and authentication
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Children Under Thirteen
Our website is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by updating the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.
12. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Emphere, Inc.
Seattle, Washington
General inquiries: contact@emphere.com
Privacy inquiries: privacy@emphere.com
Effective as of September 28, 2026
