Privacy Policy

This policy explains how Epimelio collects and uses personal data when you visit this website, contact us, or use the Epimelio service.

1. Who we are

Epimelio is operated by the company named below, which is the data controller for this website and for account data of the service.

Contact: Sweetpeen Ltd · [email protected]

2. What we collect

• Details you send through our forms: name, business name, email, phone, team size and your message.
• Account details when you sign up: your name, email, business name and type, tax details, currency and time zone.
• Data your business enters in the service, such as appointments, services, staff, client details, notes, photos and receipts.
• Details clients give when they book through a booking page: name, phone, email and the appointment they choose.
• Basic technical data needed to run the website securely, such as IP address and browser type in server logs.

3. Why we use it

• To answer your requests and send you information you asked for.
• To provide, secure and support the Epimelio service under our agreement with your business, including sending the SMS and emails your business sets up.
• To meet legal and accounting obligations.

We do not sell personal data, and we do not use the data your business stores in Epimelio, or its clients’ details, for our own advertising. Payments by card are handled by Stripe, and SMS messages are delivered through an SMS provider, only for these purposes.

4. Your business’s data and its clients

For the data your business enters in the service, including its clients’ details and the bookings made on its booking page, your business is the controller and we process it on its behalf. Clients who want to use their rights should contact the business they booked with. Marketing messages always carry an unsubscribe link.

5. How long we keep it

Form messages are kept for as long as needed to handle your request and our follow-up. Service data is kept while your business’s account is active and deleted after it is closed, except where the law requires us to keep it longer, for example receipts.

6. Security

Connections are encrypted with HTTPS, passwords are stored hashed, every business’s data is kept separate at database level, and access inside a business follows the roles it gives its people.

7. Cookies

This website uses only the cookies it needs to work, such as remembering your language. The Epimelio service uses a secure cookie to keep you logged in.

8. Your rights

Under the GDPR you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict its use, and complain to your data protection authority. To use these rights, email us.

9. Changes

We may update this policy. The date at the bottom of the page shows the latest version.