Legal
Privacy Policy
Last updated: 27 February 2026
Important: This is placeholder legal copy. It must be replaced with legally reviewed content before go-live. EM Group is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and the Australian Privacy Act 1988.
1. Who We Are
EM Group (“we”, “us”, “our”) is a software company based in Melbourne, Australia. Our website is https://emgroup.io. For data protection enquiries, contact us at hello@emgroup.io.
2. Data We Collect
We collect the following personal data when you use our contact form:
- Name — to address you correctly
- Email address — to respond to your enquiry
- Company name — to understand your business context
- Service interest — to route your enquiry appropriately
- Message content — to understand your requirements
We also collect analytics data automatically via Google Analytics 4 and Hotjar (see Section 6).
3. Purpose & Legal Basis
We process your data for the following purposes:
- Responding to your enquiry — Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) / Contractual necessity (Art. 6(1)(b))
- CRM management via HubSpot — Legal basis: Legitimate interest
- Website analytics — Legal basis: Consent (obtained via Cookiebot banner)
4. Third-Party Data Processors
We share your data with the following processors under appropriate data processing agreements:
- HubSpot, Inc. — CRM and contact management. Data may be stored in the United States under EU Standard Contractual Clauses.
- Google LLC (GA4) — Website analytics. Data is anonymised before transfer where possible.
- Hotjar Ltd. — Heatmapping and session recording (anonymised).
- Cookiebot / Cybot A/S — Cookie consent management.
5. Data Retention
We retain contact form submissions in our CRM for up to 3 years, or until you request deletion. Analytics data is retained per provider defaults (GA4: 14 months; Hotjar: 365 days).
6. Cookies
We use cookies for analytics and performance measurement. A Cookiebot consent banner is displayed on your first visit. You may withdraw consent at any time by clicking the “Cookie Settings” link in the footer.
Categories of cookies we use:
- Strictly necessary — Required for the website to function. Cannot be disabled.
- Analytics — Google Analytics 4 and Hotjar (require consent).
7. Your Rights
Under the GDPR you have the following rights:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure / “right to be forgotten” (Art. 17)
- Right to restrict processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7(3))
To exercise any right, email hello@emgroup.io. We will respond within 30 days.
8. Security
We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, access controls, and regular security reviews.
9. Changes to This Policy
We may update this policy from time to time. The “Last updated” date above will reflect the most recent revision. Continued use of the website after changes constitutes acceptance.
10. Contact & Complaints
For data protection enquiries, contact us at hello@emgroup.io.
You have the right to lodge a complaint with your supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC).