Privacy policy.
PRIVACY POLICY
Last updated: 10 September 2026
This Privacy Policy explains how EPITOMI collects, uses, stores and protects personal data when customers visit the website, contact EPITOMI or purchase products and services.
1. Data Controller
The data controller is:
[LEGAL ENTITY NAME], trading as EPITOMI
Registered address: [REGISTERED ADDRESS]
Registration number: [REGISTRATION NUMBER]
VAT number: [VAT NUMBER, IF APPLICABLE]
Website:
Privacy and contact enquiries:
https://www.epitomi.org/contactus
Email:
2. Personal Data We Collect
Depending on how you interact with EPITOMI, we may collect:
• your name;
• email address;
• telephone number;
• billing address;
• organisation, job title or professional information;
• order, booking and payment transaction information;
• information submitted through forms, questionnaires or correspondence;
• information required to deliver consultancy, training or project services;
• event or workshop registration information;
• website usage, device, browser, IP address and cookie information; and
• records of communications with EPITOMI.
Payment card details are normally processed directly by the payment provider. EPITOMI may receive limited transaction information, such as payment status, amount, payment reference and billing details.
3. How We Use Personal Data
We may use personal data to:
• process and administer orders and payments;
• deliver digital content, consultancy, training, workshops or other services;
• manage registrations and customer accounts;
• communicate about orders, bookings, schedules and service delivery;
• provide customer support;
• issue invoices and maintain financial records;
• prevent fraud, misuse and security incidents;
• comply with legal, tax, accounting and regulatory obligations;
• improve the website, services and customer experience; and
• send marketing communications where consent has been provided or where otherwise permitted by law.
4. Legal Bases
EPITOMI processes personal data where processing is necessary:
• to perform a contract or take steps before entering into a contract;
• to comply with a legal obligation;
• for EPITOMI’s legitimate interests, including customer support, service improvement, fraud prevention and website security;
• to protect vital interests where applicable; or
• on the basis of consent, including certain marketing and cookie activities.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
5. Sharing Personal Data
EPITOMI may share personal data with trusted service providers where necessary, including:
• website and e-commerce platform providers;
• hosting and cloud-storage providers;
• payment processors and financial institutions;
• email and communication providers;
• accounting, legal and professional advisers;
• training facilitators, project partners or subcontractors involved in delivering a service; and
• public authorities where disclosure is required by law.
Service providers are permitted to process personal data only for the relevant service and subject to appropriate contractual and security requirements.
EPITOMI does not sell personal data.
6. International Transfers
Some service providers may process personal data outside Cyprus or the European Economic Area.
Where required, EPITOMI will rely on an adequacy decision, standard contractual clauses or another lawful safeguard for international data transfers.
7. Data Retention
Personal data is kept only for as long as reasonably necessary for the purposes for which it was collected.
Retention periods may depend on:
• the duration of the customer relationship;
• contractual and service-delivery requirements;
• tax, accounting and legal obligations;
• the need to resolve disputes or establish legal claims; and
• consent or marketing preferences.
When personal data is no longer required, it will be deleted, anonymised or securely restricted.
8. Your Rights
Subject to the conditions of applicable data-protection law, you may have the right to:
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent at any time; and
• lodge a complaint with a competent data-protection authority.
To exercise a right, contact EPITOMI at:
https://www.epitomi.org/contactus
EPITOMI may request information necessary to verify your identity before responding.
9. Marketing Communications
You may unsubscribe from marketing emails at any time by using the unsubscribe link contained in the message or by contacting EPITOMI.
Transactional communications relating to an order, booking or active service are not marketing communications and may still be sent where necessary.
10. Cookies
The website may use essential, analytics, functionality and marketing cookies.
Where required by law, non-essential cookies will be used only after consent has been obtained.
Users can manage cookie preferences through the cookie banner or browser settings.
11. Security
EPITOMI applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration or destruction.
However, no internet transmission or electronic storage method can be guaranteed to be completely secure.
12. Third-Party Links
The website may include links to third-party websites.
EPITOMI is not responsible for the privacy practices of third parties. Users should review the relevant third-party privacy notices before submitting personal data.
13. Complaints
You may submit a privacy concern directly to EPITOMI.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority in your country of residence.
14. Changes to This Policy
EPITOMI may update this Privacy Policy to reflect changes in legal requirements, services or data-processing practices.
The latest version will be made available on the website with its effective date.