Legal
Privacy Policy
Last updated 16 October 2026
Draft - subject to legal review before publication. Bracketed text marks information that must be confirmed. This draft is not legal advice.
This Privacy Policy explains how [Registered legal entity name - to be confirmed] (“Epinova Health”, “we”, “us”) handles personal information collected through this website.
Who is responsible for your data
[Registered legal entity name - to be confirmed] is the controller of personal information collected through this website. Contact details for privacy requests: [privacy contact address - to be confirmed]. Requests can also be made through our contact form.
What we collect
- Information you submit through our forms: name, work email, organization, role, country, organization type, areas of interest and your message. Careers enquiries may include a CV and profile link.
- Technical information needed to operate and secure the site: IP address (used transiently for rate limiting and abuse prevention), browser type and server logs retained by our hosting provider.
- Preferences stored in your browser: theme choice and cookie consent choice.
How we use it and our legal bases
- To respond to your enquiry or request - based on your consent and/or our legitimate interest in responding to business enquiries.
- To assess applications for roles - based on your consent.
- To protect the website against spam and abuse - based on our legitimate interests.
- Analytics, only if you opt in - based on your consent.
Sharing
We do not sell personal information. We share it only with service providers who help us operate the website and email (for example our hosting and email providers), under appropriate agreements, or where required by law.
International transfers
[To be completed by legal counsel based on hosting location and applicable law, including safeguards for transfers outside the user’s jurisdiction.]
Retention
Enquiry submissions are retained for up to 24 months after our last interaction, and careers submissions (including CVs) for up to 12 months, unless you ask us to delete them sooner. Security logs are retained for up to 90 days. [Confirm retention periods.]
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of your personal information, to withdraw consent and to data portability, and to complain to a supervisory authority. To exercise them, contact us as above.
Security
We use HTTPS, server-side validation, access controls and secure storage outside the public web directory. See our Data Protection & Security Overview.
Changes
We will update this policy as our services evolve and indicate the date of the latest revision above.


