Your data rights

How to make a request

Email privacy@epickod.org with the subject “Data rights request”. State the right you are exercising, the account or organization concerned, the data scope, and a safe reply address. Do not email passwords, identity documents or payment-card data.

What happens next

• We log the request, identify whether Epicod or an EpicIMS customer is the controller, and acknowledge receipt.
• We use proportionate identity verification and ask only for information needed to prevent unauthorized disclosure.
• We respond without undue delay and normally within one month under GDPR, or within the applicable CCPA/CPRA deadline for covered requests.
• We may extend a complex GDPR request by up to two months with notice, or use a permitted CCPA extension.
• We explain any refusal or restriction, including accounting, legal-hold, security or third-party rights exceptions, and provide complaint information.

Customer data submitted to EpicIMS

If your information appears in a customer's invoices, client records, payments, receipts or audit trail, contact that customer first. Epicod will assist the customer as processor under the DPA. EpicIMS offers a tenant-scoped export and client anonymization path, but accounting records are not rewritten merely because a request is received.

California requests

Where CCPA/CPRA applies, California residents may request to know, delete, correct, opt out of sale/sharing, limit sensitive personal information where applicable, and receive equal treatment. Epicod does not sell personal information or share it for cross-context behavioural advertising. Requests are free and identity verification is proportionate to the sensitivity of the request.

Complaints

You may complain to the supervisory authority in your habitual residence, place of work or place of the alleged infringement. California consumers may contact the California Privacy Protection Agency or California Attorney General. Contact us first so we can investigate and respond.