Introduction
Welcome to EPI-TECH LTD (“we,” “our,” or “us”).
Your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website https://epi-tech.org or engage with our services, including:
- Professional training courses
- Career coaching, CV reviews, and consulting services
- Web-based learning platforms, communication tools, online bookings and digital downloads
We are committed to protecting your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or services, you agree to the terms of this Privacy Policy.
Who We Are
EPI-TECH LTD
- Registered in the United Kingdom
- Email: contact@epi-tech.org
- Website: https://epi-tech.org
If you have any privacy concerns, you can contact our Data Protection Lead at the email above.
What Personal Data We Collect
We collect different types of information depending on how you interact with us:
a. Identity & Contact Data
- Full name
- Email address
- Phone number
- Location or country of residence
b. Professional & Educational Data
- CVs or resumes you upload
- Employment history and professional background
- Course enrolments, completion records, and certificates
c. Transaction & Payment Data
- Payment details (processed securely via third-party providers like Stripe, Apple Pay, Google Pay, Paystack or PayPal)
- Purchase and transaction history
We do not store or have access to your full payment card details. These are processed securely by third-party payment gateways under their own privacy policies.
d. Technical Data
- IP address
- Browser type and version
- Device type, operating system, and usage statistics
- Cookies and similar technologies
e. Marketing & Communication Data
- Marketing preferences
- Feedback and survey responses
- Email open and click data
- Data from MailerLite email newsletters
How We Collect Your Data
We collect personal data through:
- Forms you complete on our website (e.g., registration, contact, or checkout forms)
- Email communications or event registrations
- Learning management systems or online platforms
- Cookies, analytics, and tracking tools
- Third-party integrations (e.g., payment processors, Zoom, Google Meet, email campaign tools, social media)
Legal Basis for Processing Data
We process your personal data under the following lawful bases:
- Contractual necessity: To provide you with services you request (e.g., training, coaching, or certificates).
- Consent: For activities like email marketing or testimonials (you may withdraw consent anytime by unsubscribing).
- Legal obligation: To comply with UK laws, tax regulations, and recordkeeping requirements.
- Legitimate interests: To improve our services, prevent fraud, and maintain security.
How We Use Your Data
We use your data to:
- Deliver and manage our courses, training, and coaching sessions
- Respond to enquiries and provide customer support
- Issue certificates or documentation for completed programs
- Process payments and maintain financial records
- Send service updates, offers, or newsletters (only if you’ve consented)
- Improve our website, offerings, and user experience
We do not sell, rent, or trade your personal data with third parties.
Comments and Media
Comments
When visitors leave comments on our site, we collect:
- The data shown in the comments form
- The visitor’s IP address and browser user agent string to detect spam
An anonymised string created from your email address may be provided to the Gravatar service to display your profile image.
Media
If you upload images to our website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract location data from images.
Cookies
Our website uses cookies to enhance your browsing experience.
Cookies help us:
- Remember your preferences
- Track analytics to understand user behaviour
- Provide secure logins and shopping functions
You can control or delete cookies at any time through your browser settings.
Analytics
We use tools such as Google Analytics and WordPress analytics to collect anonymous statistical data on:
- Pages visited and time spent
- User interactions and referral sources
Who We Share Your Data With
We may share your personal data with trusted third parties, including:
- Payment processors: Stripe, PayPal, Apple Pay, Google Pay, Paystack (for secure transactions)
- Email marketing platforms: Mailchimp or MailerLite
- Video conferencing tools: Zoom, Teams or Google Meet for online sessions
- Learning management systems: For course enrolments and progress tracking
- Regulatory bodies: Where legally required
- E-commerce: WooCommerce for order management
- Analytics: Google Analytics, WordPress for performance tracking
How Long We Retain Your Data
We retain data only for as long as necessary to:
- Provide services and support
- Comply with legal or tax obligations
- Resolve disputes and enforce agreements
We will only retain data up to the periods as required by the law.
Your Rights
Under the UK GDPR, you have the right to:
- Request access to your personal data
- Request correction or deletion of inaccurate data
- Object to or restrict processing
- Request a copy of your data in a portable format
- Withdraw consent for marketing or data use at any time
To exercise any of these rights, please contact us at contact@epi-tech.org.
We will respond within 30 days.
International Data Transfers
Some of our service providers operate outside the UK (e.g., MailerLite, Stripe or PayPal).
Where data is transferred internationally, we rely on the data protection safeguards and compliance measures implemented by these providers, which may include:
- Standard Contractual Clauses (SCCs)
- Participation in recognised data privacy frameworks
- Adherence to strong internal data protection and security standards
How We Protect Your Data
We take data protection seriously and use multiple safeguards, including:
- Secure (SSL) website encryption
- Restricted access to personal data by authorised staff only
- Two-factor authentication and password protection for systems
- Regular data backups and software updates
- Staff training in data protection principles
Data Breach Procedures
If a data breach occurs, we will:
- Investigate and contain the breach immediately
- Notify affected users and the ICO (where required) within 72 hours
- Take corrective measures to prevent recurrence
Third-Party Links and Embedded Content
Our website may include embedded content (e.g., videos, images, links).
Embedded content from other websites behaves as if you visited the external site directly.
These websites may collect data and use cookies in accordance with their own privacy policies.
Updates to This Policy
We may update this Privacy Policy periodically to reflect legal or operational changes.
The most recent version will always be posted on this page with an updated date.
Contact Us
If you have any questions or requests regarding this Privacy Policy, please contact:
Email: contact@epi-tech.org
Website: https://epi-tech.org
Last Updated: 30/10/2025
