Privacy Policy

Effective date: August 4, 2026
Last updated: August 4, 2026

1. Overview

Empire Platforms LLP, doing business as Empire and EmpireKeep (“Empire,” “EmpireKeep,” “we,” “us,” or “our”), respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

• Visit empirekeep.com or checkout.empirekeep.com;

• Purchase or use our software, consultations, plans, digital services, support, or related offerings;

• Create or use an EmpireKeep account or workspace;

• Upload documents or business records to our platform;

• Communicate with our team; or

• Otherwise interact with EmpireKeep.

Collectively, these websites, platforms, products, features, communications, and services are referred to as the “Services.”

Our storefront and checkout are powered by Shopify. Shopify and other service providers may process personal information to help us operate and improve the Services.

By accessing or using the Services, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will request it separately.

2. Our Role

For personal information that we collect and determine how to use, Empire generally acts as the data controller or business responsible for that information.

Certain service providers, including Shopify and payment processors, may process information on our behalf. In some situations, Shopify or another provider may independently determine how it processes certain information and may act as a separate controller or business under applicable privacy laws.

3. Personal Information We Collect

The information we collect depends on how you interact with EmpireKeep and which Services you use.

A. Identity and Contact Information

We may collect:

• Full name;

• Business name;

• Email address;

• Telephone number;

• Billing or business address;

• Country, state, province, or region;

• Job title or role; and

• Other contact information you provide.

B. Account and Authentication Information

When you use an account or workspace, we may collect:

• Account identifiers;

• Login credentials or authentication tokens;

• Account permissions and user roles;

• Security and verification information;

• Preferences and settings; and

• Account activity.

Passwords may be managed through authentication providers and are generally stored in protected or encrypted form rather than in readable form.

C. Business and Service Information

To provide business finance and operations services, we may collect:

• Business profile and operational information;

• Business type, industry, and organizational details;

• Client, vendor, project, or workflow information;

• Service selections and onboarding responses;

• Deadlines, tasks, preferences, and workspace configurations;

• Information necessary to provide consultations or support; and

• Other information you choose to enter into the platform.

D. Financial and Business Records

Depending on the Services you use, you may provide information contained in:

• Invoices;

• Receipts;

• Expense records;

• Transaction records;

• Bank or financial statements;

• Bookkeeping records;

• Financial reports;

• Tax-readiness documents;

• Business registration documents;

• Identification or tax-related records;

• Documents used for accountant or professional handoffs; and

• Other files or records you choose to upload.

Please avoid uploading personal information that is not reasonably necessary for the Services you are using.

E. Purchase and Payment Information

When you make a purchase, we may collect:

• Products or services purchased;

• Order number;

• Purchase amount;

• Currency;

• Billing information;

• Payment status;

• Refund or cancellation information;

• Discount or promotional information;

• Limited payment-method details, such as the payment type or last four digits; and

• Transaction and fraud-prevention information.

Full payment-card information is generally collected and processed directly by Shopify, payment gateways, banks, or other payment providers. We generally do not receive or store your complete payment-card number.

F. Communications and Support Information

We collect information you provide when you:

• Contact customer support;

• Send an email or message;

• Request a consultation;

• Complete a form or questionnaire;

• Submit feedback;

• Respond to a survey; or

• Otherwise communicate with us.

This may include the contents of your message, attachments, contact details, and records of our response.

G. Device, Technical, and Usage Information

When you access the Services, we or our providers may automatically collect:

• IP address;

• Device identifiers;

• Browser type and version;

• Operating system;

• Device type;

• Language and regional settings;

• Approximate location derived from your IP address;

• Referring and exit pages;

• Pages, products, or features viewed;

• Dates and times of visits;

• Clicks and navigation activity;

• Shopping-cart and checkout activity;

• Session information; and

• Error, diagnostic, security, and performance information.

H. Marketing and Preference Information

We may collect:

• Email and communication preferences;

• Advertising preferences;

• Cookie choices;

• Products or services you have shown interest in;

• Responses to marketing campaigns; and

• Information about whether you opened or interacted with a communication.

I. Information from Third Parties

We may receive information from:

• Shopify;

• Payment processors and banks;

• Authentication providers;

• Analytics and advertising providers;

• Customer-support and communication providers;

• Professional advisers;

• Business partners;

• Integrations you authorize;

• Fraud-prevention and security providers; and

• Publicly available sources where permitted by law.

4. How We Use Personal Information

We may use personal information for the following purposes.

A. Providing the Services

We use information to:

• Process purchases and payments;

• Deliver software, consultations, digital services, or support;

• Create and manage accounts and workspaces;

• Configure features and service preferences;

• Organize information and documents you provide;

• Provide requested reports, tools, workflows, and account functionality;

• Communicate about orders, accounts, services, and support requests;

• Process refunds, cancellations, or account changes; and

• Perform our contractual obligations to you.

B. Personalizing and Improving EmpireKeep

We may use information to:

• Remember your preferences;

• Personalize your experience;

• Understand how customers use the Services;

• Improve our website, software, support, and offerings;

• Develop new products and features;

• Diagnose technical issues;

• Measure service quality and performance; and

• Conduct internal analytics and research.

Where practical, we may use aggregated or de-identified information for these purposes.

C. Security and Fraud Prevention

We may use information to:

• Authenticate users;

• Protect accounts and transactions;

• Detect suspicious activity;

• Prevent fraud, abuse, unauthorized access, or misuse;

• Investigate security incidents;

• Enforce our agreements and policies; and

• Protect EmpireKeep, our users, and others.

Payment processors, Shopify, and other security providers may use automated systems to identify potentially fraudulent or unauthorized activity.

D. Communications

We may use your information to:

• Respond to questions and requests;

• Provide account, order, payment, or service updates;

• Send administrative or operational notices;

• Provide customer support;

• Notify you of important policy or service changes; and

• Maintain our relationship with you.

E. Marketing and Advertising

Where permitted by law, we may use information to:

• Send promotional emails or messages;

• Inform you about services, features, or offers;

• Measure the effectiveness of campaigns;

• Create audiences for advertising;

• Display relevant advertisements; and

• Understand which marketing channels lead customers to EmpireKeep.

You may unsubscribe from promotional emails using the unsubscribe link included in the message. Opting out of promotional communications will not prevent us from sending necessary transactional, security, service, or account communications.

F. Legal and Business Purposes

We may use information to:

• Comply with applicable laws, tax requirements, accounting obligations, and valid legal processes;

• Respond to lawful requests from courts, regulators, or government authorities;

• Establish, exercise, or defend legal claims;

• Resolve disputes;

• Enforce contracts, policies, and terms;

• Conduct audits and compliance reviews; and

• Support a merger, acquisition, financing, restructuring, sale, or transfer of all or part of our business.

5. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR apply, we process personal information using one or more of the following legal bases:

Performance of a Contract

We process information when necessary to provide Services you requested, process a purchase, manage your account, deliver support, or otherwise perform an agreement with you.

Legitimate Interests

We may process information for legitimate business interests, such as operating and improving EmpireKeep, securing the Services, preventing fraud, communicating with customers, and understanding service performance, provided those interests are not overridden by your rights.

Consent

We may rely on consent for certain marketing communications, non-essential cookies, targeted advertising, or other processing where consent is legally required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

Legal Obligations

We may process information when necessary to comply with legal, regulatory, tax, accounting, or law-enforcement requirements.

Protection of Rights

We may process information where necessary to protect the rights, safety, property, or security of EmpireKeep, our customers, or others.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary.

A. Shopify

Our storefront and checkout are hosted and supported by Shopify. Information submitted through our storefront or checkout may be transmitted to and processed by Shopify to provide ecommerce, checkout, security, analytics, personalization, and related services.

Shopify may also process certain information for its own purposes, as described in the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

B. Payment Providers

We may disclose transaction and payment information to:

• Payment gateways;

• Card networks;

• Banks;

• Fraud-prevention providers; and

• Other financial service providers involved in processing or securing your payment.

These providers process payment information according to their own agreements and privacy policies.

C. Technology and Operational Providers

We may disclose information to providers that support:

• Cloud hosting and storage;

• Account authentication;

• Software infrastructure;

• Database management;

• Analytics;

• Customer support;

• Email and communications;

• Document processing;

• Security and fraud prevention;

• Website functionality;

• Marketing and advertising; and

• Business operations.

These providers are permitted to use information only for authorized purposes, subject to applicable agreements and law.

D. Professional Advisers

We may disclose information to accountants, auditors, lawyers, insurers, consultants, and other professional advisers where reasonably necessary.

E. Integrations and Services You Request

If you connect EmpireKeep with another service or request that we share information with a third party, we may disclose information as directed or authorized by you.

Third-party integrations are governed by the third party’s own privacy practices.

F. Corporate Affiliates

We may disclose information within our corporate group or to affiliated entities for legitimate operational, administrative, security, or service-delivery purposes.

G. Legal Authorities and Protection of Rights

We may disclose information when we reasonably believe disclosure is required to:

• Comply with applicable law;

• Respond to a valid subpoena, court order, warrant, or government request;

• Protect legal rights;

• Investigate fraud or illegal activity;

• Enforce our agreements; or

• Protect the safety and security of EmpireKeep, our users, or others.

H. Business Transactions

Information may be disclosed or transferred in connection with a merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or similar business transaction.

7. Sale, Sharing, and Targeted Advertising

We do not sell personal information in exchange for money.

We may use analytics, advertising, or marketing technologies that involve disclosing identifiers, cookie data, device information, or browsing activity to advertising or marketing partners. Some privacy laws may define these activities as “selling,” “sharing,” or using information for “targeted advertising,” even when no money is exchanged.

Where required by applicable law, you may opt out through:

• The privacy or cookie controls displayed on our website;

• A “Your Privacy Choices” or similar link, where available;

• A supported browser-based opt-out preference signal; or

• A request sent to empirekeep@empireplatforms.com.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

8. Cookies and Similar Technologies

EmpireKeep, Shopify, and our service providers may use cookies, pixels, tags, local storage, software development kits, and similar technologies.

These technologies may be used for:

Essential Functions

To operate checkout, maintain sessions, authenticate users, prevent fraud, save security settings, and provide requested functionality.

Preferences and Functionality

To remember language, location, account, cart, and service preferences.

Analytics and Performance

To understand website use, diagnose errors, evaluate performance, and improve the Services.

Marketing and Advertising

To measure campaigns, understand referrals, build advertising audiences, and display relevant advertisements where permitted.

Where required by law, non-essential cookies will be used only after you provide consent. You can manage available choices through our cookie banner, privacy settings, or browser controls.

Blocking certain cookies may affect the operation or availability of some features.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Maintain your account;

• Provide the Services;

• Preserve transaction and customer-support records;

• Meet tax, accounting, legal, and regulatory requirements;

• Prevent fraud and abuse;

• Resolve disputes;

• Enforce agreements; and

• Protect legal rights.

Retention periods vary depending on the type of information, the Services involved, the sensitivity of the information, and applicable legal requirements.

When information is no longer reasonably required, we may delete, anonymize, aggregate, or securely isolate it. Residual copies may remain temporarily in backups or archives until they are overwritten or deleted through normal retention processes.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• Access controls;

• Account authentication;

• Encryption in transit where supported;

• Security monitoring;

• Restricted employee and contractor access;

• Vendor security reviews;

• Data minimization; and

• Incident-response procedures.

No online system, transmission, or storage method is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been accessed without authorization.

Please do not send passwords, complete payment-card numbers, or other highly sensitive information through ordinary email.

11. International Data Transfers

Empire is based in India and uses service providers that may operate in India, the United States, Canada, the United Kingdom, the European Economic Area, and other countries.

As a result, personal information may be transferred to, stored in, or processed in countries other than the country where you live. Privacy and data-protection laws in those countries may differ from those in your jurisdiction.

Where required by applicable law, we use recognized safeguards for international transfers, which may include adequacy decisions, contractual protections, standard contractual clauses, or other legally approved mechanisms.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request confirmation of whether we process your personal information;

• Access personal information we maintain about you;

• Request correction of inaccurate or incomplete information;

• Request deletion of personal information;

• Request restriction of certain processing;

• Object to certain processing;

• Receive certain information in a portable format;

• Withdraw consent;

• Opt out of promotional communications;

• Opt out of the sale, sharing, or use of personal information for targeted advertising;

• Limit certain uses of sensitive personal information, where applicable;

• Appeal a decision regarding a privacy request; and

• Lodge a complaint with an appropriate data-protection or privacy authority.

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain certain information to complete a transaction, provide a requested service, prevent fraud, comply with law, or protect legal rights.

13. Exercising Your Rights

To submit a privacy request, contact:

Email: empirekeep@empireplatforms.com
Telephone: +91 91 2450 9022

Please clearly describe the right you wish to exercise and the information or account involved.

To protect your information, we may need to verify your identity before completing a request. Verification may require confirming information associated with your account, order, or prior interactions with EmpireKeep.

You may designate an authorized agent where permitted by law. We may request evidence that the agent is authorized to act on your behalf and may still need to verify your identity directly.

We will respond within the period required by applicable law. We will not discriminate against you for exercising a legally available privacy right.

14. Shopify Privacy Requests

Shopify processes certain information relating to customers of Shopify-powered stores.

For requests involving information controlled by Empire, contact us directly.

For information Shopify processes independently, you may review the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal to access available privacy controls.

15. Children’s Privacy

The Services are intended for adults and businesses and are not directed to children under 18.

We do not knowingly collect personal information directly from children. If you believe a child has provided personal information to us, contact empirekeep@empireplatforms.com so that we can review and, where appropriate, delete the information.

16. Third-Party Websites and Services

The Services may contain links to websites, applications, or services operated by third parties.

We do not control the privacy, security, content, or practices of those third parties. Information you provide directly to a third party is governed by that party’s privacy policy and terms.

A link from EmpireKeep does not necessarily mean that we endorse or control the linked service.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

• Our Services;

• Our technology or providers;

• Our information practices;

• Legal or regulatory requirements; or

• Our business operations.

When we make changes, we will publish the updated policy and revise the “Last updated” date. We will provide additional notice where required by applicable law.

Your continued use of the Services after an updated policy takes effect means the updated policy will apply to future interactions, subject to any consent requirements under applicable law.

18. Questions, Complaints, and Appeals

If you have a question, complaint, or concern about this Privacy Policy or our handling of personal information, contact us using the details below.

We will review your concern and respond as appropriate. Depending on where you live, you may also have the right to appeal our response or submit a complaint to your local privacy or data-protection authority.

19. Contact Us

Empire Platforms LLP
Doing business as Empire and EmpireKeep

Email: empirekeep@empireplatforms.com
Telephone: +91 91 2450 9022
Website: empirekeep.com

Postal address:
C-20, G Block Road
Bandra Kurla Complex, Bandra East
Mumbai, Maharashtra 400051
India