Last updated: August 30, 2026
This Privacy Policy explains how Emotion Nest (“Emotion Nest”, “we”, “us”, or “our”), an independent educational website available at emotionnest.com, processes personal data. For privacy questions or requests, contact contact@emotionnest.com or use our contact page.
1. Scope and data controller
Emotion Nest is the controller for personal data processed through this website, except where a third-party service acts as an independent controller under its own terms. This policy covers the public website, contact form, privacy choices, analytics, embedded media, and the EmotionNest Concept Lab.
2. Personal data we process
Information you provide
- Contact messages: first name, last name, and email address are required to submit the contact form; message content is optional. If the required fields are not provided, the form cannot be submitted.
- Concept Lab input: the scenario type, topic, description, and optional contextual details you submit to generate an educational map. Do not submit names, medical information, credentials, or other sensitive personal data.
- Privacy choices: a random consent identifier, the policy version, selected categories, and the time of the choice. The consent record does not contain your IP address or browser user-agent string.
Information generated when you use the site
- Necessary technical and security data: IP address, requested URL, date and time, browser/device information, and security signals may appear in hosting, web-server, firewall, and Wordfence security logs.
- Site-search terms: a term entered into the site search becomes part of the requested URL and may therefore appear in server and security logs. If Analytics is approved, the search-results page URL may also be included in Google Analytics page-location data.
- Analytics data: only after you approve Analytics, Google Analytics may process page URLs, referral or campaign information, approximate location, device/browser information, interaction data, and online identifiers stored in cookies.
- External media data: only after you approve External Media, loading an embedded provider such as YouTube may disclose your IP address, device/browser information, referring page, and interaction data to that provider.
3. Why we process data and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Operate, secure, troubleshoot, and prevent abuse of the website | Technical and security data | Our legitimate interests in maintaining a secure and reliable service; and legal obligations where applicable |
| Respond to a message or take steps you request | Contact-form data and correspondence | Steps taken at your request and our legitimate interest in responding to enquiries |
| Remember and demonstrate privacy choices | Consent cookie and pseudonymous consent record | Legal obligations and our legitimate interest in maintaining an auditable consent mechanism |
| Measure site use and improve content | Google Analytics data | Your consent |
| Load YouTube or other external media | External-media request and provider data | Your consent |
| Generate a requested Concept Lab map and prevent automated abuse | Scenario input; a temporary one-way IP-derived rate-limit key; aggregate success/failure counts | Providing the function you request and our legitimate interest in security and abuse prevention |
You may withdraw consent at any time by selecting Privacy settings at the bottom of the site. Withdrawal does not affect processing that occurred before withdrawal.
4. Cookies and consent choices
Optional technologies are denied by default. Google Analytics and blocked external media do not load until the corresponding category is approved. Rejecting optional technologies does not prevent access to ordinary site content.
| Technology | Purpose | Category | Typical duration |
|---|---|---|---|
enpc_consent | Stores your privacy choices and policy version | Necessary | 180 days |
_ga and _ga_* | Google Analytics measurement and session/visitor distinction | Analytics — consent required | Set only after approval; duration is controlled by Google Analytics |
| WordPress, Elementor, or Wordfence security/session cookies | Core operation, administration, form security, or abuse prevention | Necessary | Session or as operationally required |
If your browser sends a Global Privacy Control signal, the site keeps all optional categories disabled. Clearing browser cookies may cause the privacy banner to appear again.
5. Contact form
Contact-form submissions are sent to contact@emotionnest.com. We use them to respond to the enquiry, maintain necessary correspondence, and protect against abuse. Please do not submit sensitive health information. Contact correspondence is normally retained for up to 12 months after the enquiry is resolved, unless a longer period is needed for an ongoing relationship, legal obligation, security matter, or the establishment, exercise, or defence of legal claims.
6. EmotionNest Concept Lab and AI processing
The Concept Lab sends the scenario text you submit from the Emotion Nest server to Emotion Nest’s AI routing service and an underlying AI model provider solely to generate the map you request. The Concept Lab plugin does not intentionally store scenario text in WordPress logs or its aggregate usage statistics. It stores only aggregate success/failure information. A one-way key derived from the requesting IP address is retained temporarily for rate limiting and expires after approximately ten minutes; daily aggregate request counts are also used to prevent abuse.
AI output can be incomplete or wrong and is provided for general educational use. Do not submit identifiable or sensitive personal data. Provider processing may occur in countries outside the European Economic Area and may also be governed by the provider’s privacy terms.
7. Recipients and service providers
Depending on the function you use and your privacy choices, personal data may be processed by:
- our hosting, web-server, backup, and email infrastructure providers;
- Wordfence/Defiant security technology used to detect malicious activity;
- Google Analytics, but only after Analytics consent;
- YouTube/Google or another embedded-media provider, but only after External Media consent;
- Emotion Nest’s AI routing service and the underlying AI model provider when you use Concept Lab;
- professional advisers or public authorities where disclosure is legally required.
We do not sell personal data. We do not currently use advertising or marketing cookies on this site.
8. International transfers
Some service providers may process data outside your country or outside the European Economic Area. Where the GDPR applies, such transfers should rely on an applicable adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism. A provider may also act as an independent controller for data it receives directly through its service.
9. Retention
- Consent records: up to 365 days, after which the server-side record is automatically deleted.
- Consent cookie: up to 180 days, unless you delete it or the policy version changes.
- Contact correspondence: normally up to 12 months after resolution, subject to the exceptions described above.
- Concept Lab scenario text: not intentionally retained by the WordPress plugin after the response; upstream providers may apply their own limited security or service-retention rules.
- Technical/security logs: retained only as long as reasonably necessary for security, diagnostics, backup integrity, and legal obligations.
- Analytics data: governed by the retention configuration of the Google Analytics property and your ability to withdraw consent.
10. Your data-protection rights
Subject to applicable law, you may have the right to request access, correction, deletion, restriction, portability, or objection; to withdraw consent; and to lodge a complaint with the data-protection authority in the country where you live or work. Some rights depend on the legal basis and circumstances of the processing.
Send a request to contact@emotionnest.com. We may request proportionate information to verify that the request concerns you. We normally respond within the period required by applicable law.
11. Security
We use HTTPS, access controls, security monitoring, software updates, backups, rate limits, and data-minimisation measures intended to protect the website and personal data. No internet service can guarantee absolute security.
12. Children
Emotion Nest is a general educational website and is not directed to children under 16. We do not knowingly request personal data from children. If you believe a child submitted personal data, contact us so we can review and, where appropriate, delete it.
13. Automated decisions
We do not use personal data collected through this site to make decisions that produce legal or similarly significant effects. Concept Lab generates educational content and does not make decisions about users.
14. External links
Articles may link to third-party websites. Following a link takes you to a service with its own terms and privacy practices. A normal link does not mean that Emotion Nest controls that third party.
15. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The date at the top identifies the current version. A material change to consent-dependent processing may cause the privacy banner to request a new choice.
16. Contact
Privacy questions and rights requests: contact@emotionnest.com
Website: https://emotionnest.com/
Contact form: https://emotionnest.com/contact/