Privacy Policy

Applies to epitheal.com and blog.epitheal.com only. shop.epitheal.com (Shopify) has its own separate privacy policy, covered under Shopify's Settings → Policies.

Last updated: 8 September 2026

Who we are

This website is operated by Epitheal Limited, registered in Ireland under company CRO number 612186, with registered address at Gteic@AnSpidéal, Páirc na Meán, An Spidéal, Co. na Gaillimhe, Ireland, H91 CH01. We are the data controller for the personal data described in this policy.

For any privacy-related query, contact: privacy@epitheal.com.

What data we collect

This website does not use cookies and does not include any forms that collect personal data directly.

We do process a limited amount of technical data as part of standard web hosting:

Server/access logs. Our hosting providers (GitHub Pages for epitheal.com, Fly.io for blog.epitheal.com) automatically log standard technical information for every visit, including IP address, browser type, referring page, and timestamp. This is standard practice for any website and is used only for security, troubleshooting, and keeping the site running reliably. We do not use this data for marketing or profiling.

If you contact us by email (including via a mailto: link on this site), any personal data you choose to include in that email is processed as ordinary business correspondence, in line with this policy.

Legal basis for processing

We process the technical log data described above under our legitimate interest in operating, securing, and maintaining a functioning website. Email correspondence you send us is processed under legitimate interest in responding to your enquiry, or, where applicable, in taking steps prior to entering into a contract with you.

How long we keep data

Server/access logs are retained only as long as necessary for security and operational purposes, in line with our hosting providers' standard retention practices, and are not kept longer than needed. Email correspondence is retained in line with normal business record-keeping practice.

Sharing your data

We do not sell or share personal data with third parties for marketing purposes. Technical log data is processed by our hosting providers (GitHub, Fly.io) acting as processors on our behalf, strictly for the purpose of running the website.

International transfers

epitheal.com is hosted via GitHub Pages. GitHub (a Microsoft subsidiary, US-based) self-certifies to the EU-US Data Privacy Framework, the European Commission's adopted adequacy decision for transfers of this kind. blog.epitheal.com is hosted on Fly.io in Paris, France (EU), and does not involve an international transfer.

Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data
  • Object to or restrict certain processing
  • Data portability, where applicable
  • Lodge a complaint with a supervisory authority if you believe your data has been mishandled: the Irish Data Protection Commission (dataprotection.ie) if you are in the EEA, or the UK Information Commissioner's Office (ico.org.uk) if you are in the UK.

To exercise any of these rights, contact us at privacy@epitheal.com.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.