Last Updated: August 20, 2025

1. Controller Information

This Privacy Policy describes how Epic Wins OÜ (“we”, “us”, or “our”), a company registered in Estonia with its registered office at Ahtri 12, Tallinn 15551, Estonia, collects, uses, and protects your personal information when you visit our website epicwins.io (“Website”).

2. Data We Collect

2.1 Information You Provide Voluntarily

• Contact information when you use our contact forms (email address, name, message content)
• Any information you provide when subscribing to newsletters or promotional communications

2.2 Information Collected Automatically

• Cookies and Tracking Data: We use Google Analytics to collect anonymized usage statistics
• Technical Information: IP address, browser type, operating system, referring URLs, and pages visited
• Usage Data: Time spent on pages, click patterns, and other interaction data

2.3 Information We Do Not Collect

• We do not require user registration
• We do not collect payment information (as we do not process transactions)
• We do not collect sensitive personal data

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

3.1 Consent (Article 6(1)(a) GDPR): When you voluntarily provide information through contact forms or subscribe to communications

3.2 Legitimate Interests (Article 6(1)(f) GDPR): For website analytics, security, and business operations

4. How We Use Your Information

4.1 Contact Communications: To respond to your inquiries and provide requested information

4.2 Website Analytics: To understand user behavior, improve our services, and optimize website performance

4.3 Marketing Communications: To send newsletters and promotional content (only with your explicit consent)

4.4 Legal Compliance: To comply with applicable laws and regulations

5. Data Sharing and Third Parties

5.1 Google Analytics: We use Google Analytics to analyze website usage. Google may process your data according to their privacy policy. You can opt-out using Google’s opt-out tools.

5.2 Service Providers: We may share data with trusted service providers who assist in website operations, subject to appropriate data protection agreements.

5.3 Legal Requirements: We may disclose information when required by law or to protect our rights and safety.

5.4 No Sale of Data: We do not sell, rent, or trade your personal information to third parties.

6. Data Retention

6.1 Contact Form Data: Retained for up to 2 years or until the purpose is fulfilled

6.2 Analytics Data: Anonymized data retained according to Google Analytics settings (typically 26 months)

6.3 Newsletter Subscriptions: Retained until you unsubscribe

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

7.1 Right of Access: Request information about personal data we process

7.2 Right to Rectification: Correct inaccurate or incomplete data

7.3 Right to Erasure: Request deletion of your personal data

7.4 Right to Restrict Processing: Limit how we use your data

7.5 Right to Data Portability: Receive your data in a machine-readable format

7.6 Right to Object: Object to processing based on legitimate interests

7.7 Right to Withdraw Consent: Withdraw consent for data processing at any time

8. International Data Transfers

8.1 Your data may be transferred to countries outside the European Economic Area (EEA) where our service providers operate.

8.2 We ensure appropriate safeguards are in place for such transfers, including adequacy decisions or standard contractual clauses.

9. Data Security

9.1 We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9.2 Our Website uses SSL encryption to secure data transmission.

9.3 While we strive to protect your data, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

10.1 Our Website is intended for users aged 18 and above only.

10.2 We do not knowingly collect personal information from individuals under 18 years of age.

10.3 If we become aware that we have collected data from someone under 18, we will delete such information promptly.

11. Changes to This Privacy Policy

11.1 We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws.

11.2 We will notify users of material changes through website notices or other appropriate means.

11.3 Your continued use of the Website after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us through our website contact form at epicwins.io/contact-us/.

13. Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) if you believe we have violated your data protection rights.