Legal
This site collects very little: what you choose to type into the contact form, plus the ordinary technical logs a web server keeps. This page explains what happens to it, who sees it, and what you can ask us to do about it.
PRIVACY
EpsiDesk is the controller for personal data collected through this website. EpsiDesk is part of the Epsi group and provides outsourced customer support, back office and HR services to companies worldwide. The contact point for anything in this policy is Support@epsidesk.com.
This policy covers this website. Work we carry out for a client under contract is a separate matter: there the client is normally the controller of their customers' data and we act on their instructions, under the terms of that contract. If you are a customer of one of our clients and want to know how your data is handled, ask that company, or write to us and we will point you to the right place.
There are two sources of personal data on these pages, and a third that only exists once we start talking.
Whatever you choose to put in the form reaches us: usually your name, a work email address, the company you are writing on behalf of, and a short description of what you need. Fill in only what you are comfortable sending. We do not ask for payment details, identity documents, or any of the special categories of data the GDPR treats as sensitive, anywhere on this site.
Like any website, the server keeps a short technical record of each request: an IP address, the page requested, the time, and the browser and device type your software reports. These exist so the site stays available and so we can investigate a fault or abuse. They are not used to build a profile of you or to target anything at you.
If you reply by email, or we arrange a call, that correspondence sits in our normal business email and calendar systems, in the same way as any other business conversation. Notes taken to prepare for the call sit alongside it.
We collect the minimum needed to answer you properly. Under the GDPR, every use of personal data needs a lawful basis. Ours are set out plainly below.
What you type into the contact form is delivered to us as an email. That delivery is handled by a third-party email delivery provider, which processes the message on our instructions and for that purpose alone. Apart from that provider, and the ordinary business systems we use to read email and book meetings, your enquiry is not shared outside EpsiDesk. It does not go to advertisers, data brokers or list vendors. We would disclose information only where the law required it.
Inside EpsiDesk, an enquiry is seen by the people who need to see it: whoever answers it, and the colleagues involved in scoping the work you asked about. Our delivery teams work across multiple time zones, so the person who reads your message may be working in a different country from you. Where personal data moves between countries in that way, we take the steps the GDPR requires for transfers of that kind, and the same handling rules apply wherever the work is done.
We keep an enquiry for as long as it is useful to the conversation it belongs to. If it turns into work, the records live for as long as we are working together, and afterwards for the period our contractual and tax obligations require. If it does not turn into work, we keep enough to recognise the context if you come back to us later, and it is then removed in the ordinary course of clearing old correspondence.
Server logs are short-lived by design and are kept only for the period needed to spot faults and abuse. You can ask us to delete your enquiry sooner than any of this. Unless there is a legal reason to keep something, we will.
These rights are yours whether or not we end up doing business together, and using one of them costs you nothing.
Ask what personal data we hold about you and receive a copy of it, together with an explanation of what we are doing with it.
If something we hold about you is wrong or incomplete, tell us and we will correct it.
Ask us to delete what we hold. We will, unless there is a legal obligation that requires us to keep a particular record.
Where we rely on legitimate interests, you can object. Tell us why, and we will stop unless we have compelling grounds that override your rights.
You can ask us to pause our use of your data while a question about it is resolved, and, where the right applies, to provide the data you gave us in a portable form.
You can complain to the data protection supervisory authority for your country. We would prefer you raised it with us first so we can put it right, but you are under no obligation to.
Email Support@epsidesk.com and say what you want done. Putting "data request" in the subject line helps it reach the right person quickly. There is no charge, and you do not have to justify the request. We may ask a question or two to be sure we are looking at the right records, and we will respond within the time the GDPR allows.
Use the same address for any general question about this policy. If you would rather talk it through, email us to book a call. This page is the current version of the policy, and the version published here is always the one that applies; if the way we handle any of the above changes, we will change this page.