Who we are
emdtools.com is the website of EMD Tools (Evergreen Microtools Development). It is operated by Glenwhisper Limited, a company incorporated in Hong Kong (HK Business Registration No. 76935415; Registered office: Unit 1603, 16th Floor, The L. Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong). Glenwhisper Limited decides how the personal data described here is used (the "data user" under Hong Kong's Personal Data (Privacy) Ordinance, and the "controller" under the UK and EU GDPR). You can reach us through the contact form.
What this policy covers
This policy covers emdtools.com only. Each tool runs on its own website with its own privacy policy, which explains what that tool stores (in most cases, very little, because the work happens in your browser):
- UPC Label Generator: upclabelgenerator.com/privacy
- Data Matrix Code Generator: datamatrixcodegenerator.com/privacy
- Name Badge Creator: namebadgecreator.com/privacy
Get updates sign-ups
When you sign up on Get updates, we store your email address, where the form was shown, the date, the country your connection came from (as reported by Cloudflare) and a scrambled, daily-changing code made from your IP address (used only to stop repeated automated sign-ups; it cannot be turned back into your IP address or linked across days).
We use your address only to email you when we launch a new tool. We delete sign-ups 24 months after they were made, or sooner if you ask. To stop the emails, reply to any of them or use the contact form. The legal basis under the UK and EU GDPR is your consent, which you can withdraw at any time.
Contact form
When you send a message, we store your name, email address, topic, message, the page you sent it from, the date, your connection's country and the same daily-changing code. A copy is emailed to our team inbox so we can reply. We use it only to answer you and to improve our tools. We delete messages 24 months after they were sent. The legal basis under the UK and EU GDPR is our legitimate interest in answering the people who write to us.
Cookies and analytics
This site sets no cookies. To count visits we use Cloudflare Web Analytics, which does not use cookies, does not fingerprint your device and does not track you across websites. It records page views with coarse details such as the page, the referring site, the country and the browser type.
Spam and abuse protection
The contact form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. Turnstile looks at signals from your browser and connection, is not used for advertising, and in most cases shows no puzzle. Both forms also have limits per connection, using the daily-changing code described above.
Who processes data for us
Cloudflare, Inc. hosts the site, delivers its pages, protects it from attacks, runs the database (D1) that holds sign-ups and contact messages, provides Web Analytics and Turnstile, and delivers the email copy of contact messages to our inbox. To deliver any website, Cloudflare has to handle your IP address and basic request details. Cloudflare acts as our processor under its data processing addendum. See Cloudflare's privacy policy.
Our team inbox is a Google Gmail account, so contact messages and our replies are also stored by Google LLC. We do not use any other service providers for the personal data on this page, and we never sell or rent it.
Where your data is handled
We are based in Hong Kong. Cloudflare runs its network and database on servers in many countries, and Google stores email, including in the United States, so your data may be handled outside Hong Kong, the UK and the EU. As of November 2026, Cloudflare's data processing addendum includes the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Under the PDPO, we use your data only for the purposes on this page, wherever it is processed.
Your rights
Everyone. Under Hong Kong's PDPO, which applies to us wherever you live, you can ask whether we hold personal data about you, get a copy of it, and ask us to correct it. You can also ask us to delete it.
In the UK and the European Economic Area. Under the UK GDPR and the EU GDPR you also have the right to:
- get a copy of the personal data we hold about you;
- have it corrected if it is wrong;
- have it deleted;
- object to, or ask us to restrict, how we use it;
- receive it in a portable format;
- withdraw your consent at any time, without affecting what we did before.
How to ask. Send a message through our contact form from the email address the request is about. We may ask you to confirm the request from that address before we act. We reply within one month, which is also inside the 40 days the PDPO allows for access and correction requests. There is no charge.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to Hong Kong's Office of the Privacy Commissioner for Personal Data (PCPD) at pcpd.org.hk, to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or to the data protection authority where you live.
Children
This site is meant for adults. We do not knowingly collect personal data from children under 13. If you think a child has sent us their details, contact us and we will delete them.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top before the change takes effect. If a change affects what we do with data we already hold, we will tell the people affected by email where we can.