About this notice
This notice explains how Etch Software Limited (“Etch”) processes personal data collected through the etch.co website and when you contact Etch directly. It should be read alongside our Data Protection Policy.
Etch is the data controller for the personal data described in this notice.
Personal data processed when you visit this website
Etch uses three third-party services that process limited personal data when you visit the site.
Cloudflare provides content delivery, security, and basic traffic analytics. As part of routing traffic, Cloudflare processes your IP address. Cloudflare’s analytics are cookieless and do not identify individual visitors.
Umami provides website analytics. Umami records aggregated information about page views, referrer, browser type, operating system, and country. It does not use cookies. IP addresses are processed at the point of collection to derive country and are not stored.
Sentry receives Content Security Policy (CSP) violation reports sent by your browser. These reports help Etch identify configuration and security issues on the site. PII scrubbing is enabled on the Sentry project to redact common categories of personal data before storage.
Personal data processed when you contact Etch
When you email or otherwise contact Etch, the personal data you provide — typically your name, email address, telephone number, and the content of your communication — is processed in order to respond and to manage any subsequent relationship.
Embedded content
Pages may include video content embedded from YouTube using Google’s privacy-enhanced mode. No cookies or other client-side storage are set when a page containing an embed is loaded. If you choose to play an embedded video, YouTube will set cookies and process personal data including your IP address. This processing is carried out by Google as a separate data controller under its own privacy policy.
Lawful basis
Etch relies on legitimate interests for the processing described under “Personal data processed when you visit this website”. The interests pursued are operating a functional and secure website and understanding aggregate traffic patterns. The processing is minimal, does not identify individuals, and is unlikely to affect your rights.
Etch relies on legitimate interests, and where applicable contract, for the processing of communications you initiate with Etch.
Recipients
Personal data processed under this notice is shared only with the providers named above (Cloudflare, Umami, Sentry) acting as processors on Etch’s behalf. Each provider has a Data Processing Agreement in place with Etch.
International transfers
Cloudflare and Sentry process personal data in the United States. Umami is incorporated in the United States but processes personal data in the European Union under its EU data residency option. Where personal data is transferred outside the United Kingdom, Etch relies on an appropriate safeguard, as set out in the Data Protection Policy.
Retention
Cloudflare and Umami analytics data is retained for the period configured in each platform and recorded in Etch’s Register of Systems. CSP reports in Sentry are retained for 90 days. Communications you initiate with Etch are retained in line with the retention periods set out in the Data Protection Policy.
Your rights
You have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and rights in relation to automated decision-making. Etch does not carry out automated decision-making.
To exercise any of these rights, contact [email protected]. Etch will respond within thirty days.
If you are not satisfied with Etch’s response, you have the right to complain to the Information Commissioner’s Office.
Cookies
This website does not use cookies or similar client-side storage for analytics or tracking. Cookies may be set by YouTube if you choose to play an embedded video, as described under “Embedded content”.
