Privacy Notice

EmpiFlow builds manufacturing software. This notice explains what personal data we collect through empiflow.io, why we collect it, and what you can ask us to do with it. We have deliberately kept this site simple: there is one form, no account system, no advertising, and no cookies.

1. Who we are

EmpiFlow ("we", "us") is a software consultancy based in Kuala Lumpur, Malaysia. For any question about this notice or your data, contact hello@empiflow.io.

2. What we collect

Only what you type into our contact form:

• Name — required, so we know who we're replying to.
• Email address — required, so we can reply.
• Company name — optional.
• Your message — required, and entirely up to you what it contains.

We do not ask for, and ask that you do not send, sensitive personal data — identity-card or passport numbers, financial or payment details, health information, or anything similar. If you need to share commercially sensitive information about your plant, wait until we're talking directly and can agree how to handle it.

The form also contains a hidden anti-spam field. Legitimate visitors never see or fill it; if it is filled, the submission is silently discarded and nothing is sent or stored.

3. How we use it

To read your enquiry and reply to it, and to keep a record of enquiries so we can follow up properly. That is all. We do not sell, rent, or share your data with third parties for their own marketing, and we do not add you to a mailing list — we have no newsletter.

4. Where it goes

When you submit the form, your details are:

• emailed to our own EmpiFlow inbox, and
• appended as a row to a private Google Sheet that only we can access.

Both are operated through Google Workspace, which processes the data on our behalf and may store it on servers outside Malaysia. This site is hosted on Cloudflare Pages.

5. Analytics and cookies

This site sets no cookies and stores nothing in your browser. We use Cloudflare Web Analytics, which counts page views without cookies, without fingerprinting, and without tracking you across other websites. It does not identify individual visitors, and we cannot link a page view to a person.

6. How long we keep it

Enquiries are kept for as long as there is a reasonable prospect of doing business together, and reviewed periodically. If an enquiry goes nowhere, we delete it. You can ask us to delete yours sooner at any time — see below.

7. Your rights

Under Malaysia's Personal Data Protection Act 2010 you may ask us to show you the personal data we hold about you, correct it if it's wrong, delete it, or stop using it. Email hello@empiflow.io and we will respond within 21 days. There is no charge for a reasonable request.

8. Security

Data reaches us over an encrypted connection and is held in access-controlled Google Workspace accounts protected by strong authentication. No system is perfectly secure, so we ask again: don't send us anything highly sensitive through a web form.

9. Changes to this notice

If we change how we handle personal data, we will update this page and the date at the top. Material changes will be described here rather than made quietly.