Privacy Policy

Effective Date: August 21, 2026

1. Introduction

Welcome to Epicpaths. We are committed to respecting your privacy and protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard the personal information you provide when visiting our public website (epicpaths.com) or inquiring about our digital accessibility consulting services.

Note: If you are a user of the Epicpaths Matrix Engine SaaS platform, your data is governed by our separate Matrix Terms of Service and dedicated SaaS data processing agreements.

2. Information We Collect

As a visitor to our public website, we only collect information that is strictly necessary or that you voluntarily provide to us:

Information You Provide: When you fill out a contact form, request a consultation, or email us, we collect your name, email address, company name, and the contents of your message.
Automated Technical Data: Like most standard websites, we automatically collect basic log data, IP addresses, and browser types to monitor website security, prevent spam, and understand general user behavior.
Security & Spam Prevention: To protect our site from spam and automated abuse, we utilize Cloudflare Turnstile. Turnstile runs invisibly in the background to verify human visitors without tracking your behavior, recording your physical interactions, or placing tracking cookies. As a condition of utilizing this security service, your session data processing is subject to Cloudflare’s Turnstile Privacy Addendum.

3. How We Use Your Information

We use the information collected through our public website solely for legitimate business purposes, which include:

Responding to your inquiries and providing consultation estimates.
Improving our website’s functionality, security, and user experience.
Complying with our legal and regulatory obligations.

We do not sell, rent, or trade your personal information to third parties.

4. Cookies and Tracking Technologies

Our website utilizes cookies to ensure baseline functionality and to respect your privacy preferences. For a detailed breakdown of the exact cookies we use and to manage your consent preferences, please visit our dedicated Cookie Policy.

5. Data Retention

We retain contact form submissions and general inquiries for customer service purposes for a limited time, but we do not use the information submitted through them for unsolicited marketing. If we establish a consulting relationship, your data will be retained in accordance with our standard client contracts.

6. Your UK GDPR Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR), you are entitled to specific rights regarding your personal data:

The Right to Access: You can request a copy of the personal data we hold about you.
The Right to Rectification: You can request that we correct any inaccurate or incomplete information.
The Right to Erasure: You can request that we delete your personal data (“the right to be forgotten”).
The Right to Restrict or Object: You can request that we limit the processing of your data or object to it entirely.

7. Your US State Privacy Rights (CCPA/CPRA)

If you are a resident of California, Colorado, Connecticut, Virginia, or other US states with applicable privacy laws, you are granted specific rights regarding your personal information:

The Right to Know and Access: You may request details about the categories and specific pieces of personal data we have collected about you over the past 12 months.
The Right to Delete: You may request the deletion of your personal data, subject to certain legal exceptions (such as retaining data necessary to complete a transaction or comply with a legal obligation).
The Right to Non-Discrimination: We will not discriminate against you (e.g., by denying services or changing pricing) for exercising your privacy rights.

Notice of “Do Not Sell or Share”: Epicpaths does not sell your personal information for monetary value. Furthermore, we do not “share” your personal information with third parties for cross-context behavioral advertising. We operate on a strict “opt-in” basis for tracking cookies for US visitors.

8. Third-Party Processors and Infrastructure

To operate our website and provide our services securely, we share limited personal data with trusted third-party service providers. We only share the minimum amount of data necessary for these processors to perform their specific functions. Our core processors include:

Security & Infrastructure: We use Cloudflare Turnstile for invisible spam protection and web application firewall (WAF) services to secure our site against malicious traffic.
Communications: We utilize MailPoet to manage our email newsletters and client communications.
Consent Management: We use Complianz to log and respect your privacy preferences and cookie choices in compliance with global regulations.
Payment Processing: If you purchase non-Enterprise consulting services directly through our site, payments are securely processed by third-party Merchants of Record (such as Lemon Squeezy or PayPal). We do not store or process your full credit card information on our servers.

All third-party processors are bound by strict data processing agreements and are prohibited from using your personal data for their own marketing purposes.

9. International Data Transfers

Epicpaths is based in the United Kingdom. If you are accessing our website or inquiring about our services from the United States, the European Economic Area (EEA), Canada, or other regions, please be aware that your information will be transferred to, stored, and processed in the UK and potentially the US (where some of our secure cloud infrastructure providers are hosted).

When we transfer personal data internationally, we ensure it is protected by utilizing recognized legal safeguards. This includes relying on adequacy decisions recognized by the UK government and the European Commission, or implementing Standard Contractual Clauses (SCCs) with our third-party processors to ensure your data receives a level of protection consistent with UK and EU privacy laws.

10. Data Security

We implement robust, industry-standard technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration. This includes HTTPS encryption across all web traffic, secure server environments, and strict access controls. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.

11. Third-Party Links

Our website may contain links to third-party websites or resources. Please note that we do not control these external sites and are not responsible for their privacy practices. We encourage you to read the privacy policies of any website you visit.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please reach out to us using the contact form on our website or by writing to our designated privacy contact at info@epicpaths.com.