Emstra tölvuþjónusta ehf, company ID 571025-1240, Öldugerði 4, 860 Hvolsvöllur, Iceland, is the data controller for emstra.is. This page explains what the site collects, what it is used for and what rights you have. Questions go to [email protected].
The site counts visits on the server itself. No script runs in your browser for this, no cookie is set, and neither your IP address nor any device identifier is stored. We keep which page was viewed, when, and whether the device was a phone, computer or tablet. Nothing in these numbers can be traced back to you.
When you open the site a banner asks whether you accept cookies. If you decline, no measurement cookie is set. If you accept, two tools load: Google Analytics and Google Ads from Google, and the Meta Pixel from Meta (Facebook). They set cookies to measure how the site is used and how our advertising performs. You can withdraw consent by deleting the site's cookies in your browser; the banner will then appear again.
When you send an enquiry, answer a questionnaire or request a starter site, we receive what you type in, such as your name, email address, phone number and message. Enquiries reach us by email; questionnaire answers are stored in Emstra's database. We use them only to reply to you and to do the work you asked for. To stop spam we briefly record the sender's IP address and use Cloudflare Turnstile, which checks that the sender is a person.
When an enquiry or order is sent, our server notifies Meta of the action together with your IP address and browser type, so Meta can match it to an advertisement you may have seen. Meta's processing is described at facebook.com/privacy/policy. This happens regardless of cookies.
If you have a domain scanned, we store the domain and a hashed version of your IP address to limit the number of scans from one place. The IP address itself is not kept.
Emstra runs an internal tool that connects to the company's own Google Ads account through the Google Ads API. The tool reads reports on our own campaigns and estimated search volumes for keywords. It processes no information about visitors to this site or about customers, and shares nothing with third parties. Emstra's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The site and its database are hosted on Emstra's own server at Hostinger in Manchester, United Kingdom. The UK holds an EU adequacy decision, so the transfer is permitted under data protection law. Enquiries and questionnaire answers are kept while we are in contact and until you ask us to delete them. Accounting records are kept for seven years as Icelandic accounting law requires.
You have the right to know what information we hold about you, to have it corrected or deleted, and to object to processing. Send a request to [email protected] and we will answer within a month. If you believe we have mishandled your information you can complain to the Icelandic Data Protection Authority, Persónuvernd, at personuvernd.is.
This version is dated 14 September 2026. We update the policy when the site or its processing changes.