Legal

Privacy policy

Last updated 7 November 2026

The short version

  • This site sets no cookies and runs no analytics or advertising trackers.
  • We only collect what you send us, mainly through the project brief form and email.
  • We use it to reply, scope and deliver work. We never sell it.
  • You can ask us to see, correct or delete your data at any time.

01Who we are

Emelar Republik is a software studio that works with companies worldwide. The data controller for this website is Emelar Republik.

For anything in this policy, email contact@emelarrepublik.com. We reply within one business day.

02What we collect

We collect personal data only when you give it to us, or when your browser sends it to load the site.

  • Project briefs: your name, work email, company, the type of work, budget range, timing and your message.
  • Email and calls: whatever you choose to share when you write to us or meet with us.
  • Server logs: your IP address, browser type and the pages requested. Our hosting provider records these to keep the site secure and working.

The site does not use cookies, analytics, advertising pixels or session recording. Fonts and images are served from our own domain, so loading a page does not send your data to a font or image service.

03How we use it

  • To reply to your brief, scope the work and send you a quote.
  • To deliver and support work you have agreed with us.
  • To keep the site and our systems secure, and to investigate misuse.
  • To meet legal, tax and accounting obligations.

Where data protection law asks for a legal basis, we rely on taking steps at your request before entering a contract, on performing that contract, on our legitimate interest in running and securing the studio, and on legal obligations. We do not send marketing email unless you ask us to.

04Your code and data during an engagement

During an audit or a build we may have access to your repositories, staging environments and test accounts. Your written agreement with us governs that access. On top of it:

  • We ask for staging environments and test data wherever possible, and we never need live customer passwords.
  • We use your code and data only to deliver the agreed work. We do not share it, sell it, or use it to train AI models.
  • At handover we confirm which access you can revoke, and we delete local copies of your code unless the agreement says otherwise.

05Who we share it with

We use a small number of service providers to run the studio. They process data on our instructions and are bound by contract to protect it.

  • Cloudflare, which hosts this website and delivers project briefs from the form.
  • Google, which provides the email inbox that receives project briefs.

We share data with authorities only when the law requires it. We never sell or rent personal data.

06International transfers

We work with clients in many countries, and our providers run servers in several regions. Your data may be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

07How long we keep it

If a brief does not lead to work, we delete it within 24 months. Project records are kept for as long as the engagement lasts, plus any period that tax and accounting law requires. Server logs are kept for a short period set by our hosting provider.

08Your rights

Depending on where you live, you may have the right to:

  • see the personal data we hold about you and get a copy of it
  • correct it if it is wrong
  • ask us to delete it
  • object to or restrict how we use it
  • withdraw consent where we relied on it

Email contact@emelarrepublik.com and we will respond within 30 days. You can also complain to your local data protection authority, such as the ICO in the UK or the supervisory authority in your EU country.

09Security

We protect data with access controls, encrypted connections and the minimum access each person needs. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you without undue delay.

10Children

This site and our services are for businesses. We do not knowingly collect data from anyone under 16.

11Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. For significant changes affecting current clients, we will also tell you directly.