Privacy

Last updated 1 September 2026

This page explains how EPIC28 Ltd handles personal data when you use this website or contact us. We are a small firm and this site is deliberately simple: no analytics, no tracking pixels, no advertising, no third-party scripts beyond the web fonts served from this domain.

What we collect

The website itself does not set cookies and does not collect analytics. Our hosting provider, Cloudflare, processes standard request logs (IP address, user agent, timestamps) as part of delivering the site, under their own privacy policy.

If you email us, we keep your message, your email address and anything you choose to send us, so we can reply and keep a record of our correspondence.

Why we keep it

• To reply to enquiries and carry out engagements (legitimate interest, or performance of a contract).
• To keep business records that company law requires (legal obligation).

How long

Enquiry correspondence is kept while the relationship is active and for up to six years afterwards, in line with UK limitation periods. You can ask us to delete correspondence sooner where no legal obligation requires us to keep it.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to our processing it, or ask us to stop while you contest it. Contact [email protected] and we will respond within one month. If you are unhappy with how we handle a request you can complain to the Information Commissioner's Office (ico.org.uk).

Who we share with

Nobody, other than processors needed to run the business (email hosting, website hosting). We do not sell data, we do not share it for marketing, and we have never done so.

Changes

If this policy changes materially we will update the date above.