Privacy Policy

Last Updated: 12 January 2026

1. Introduction
Epicmax ("we", "our", or "us") operates the website epicmax.co. We respect your privacy and are committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.
This Privacy Policy explains how we collect, use, store, and protect personal data collected through our website, as well as personal data processed in connection with business communications initiated via the website or obtained through other lawful sources.
If you have any questions, you can contact us at hello@epicmax.co.


2. Data Controllers
The data controllers responsible for the processing of personal data are:

• UAB Epicmax Lithuania (Lithuania)
• Epicmax Georgia LLC (Georgia)

3. Scope of This Privacy Policy
This Privacy Policy applies to personal data that we process when:

• you visit or interact with our website
• you submit inquiries or forms via the website
• you communicate with us following an initial contact initiated via the website
• we initiate business communication using publicly available information or third-party platforms in a lawful manner

This Privacy Policy does not apply to personal data of employees, contractors, or clients processed under separate agreements or internal policies.

4. Personal Data We Collect
We may collect and process the following categories of personal data:
Personal and Contact Data

• name and surname
• email address
• phone number
• company name
• job title
• project description or inquiry details

Technical and Usage Data

• IP address
• device and browser information
• pages visited and interactions with the website

Analytics and Behavioral Data

• information about how users interact with the website, collected via analytics tools

We do not intentionally collect payment data or special categories of personal data.

5. How We Collect Personal Data
We collect personal data through:

• contact and inquiry forms on the website
• cookies and similar technologies (only after obtaining user consent where required)
• analytics tools such as Google Analytics and Google Tag Manager
• CRM systems and internal business tools (including Pipedrive and Notion) used strictly for internal business operations and analysis

6. Purposes of Processing and Legal Basis
We process personal data only where permitted under Article 6 of the GDPR.
Personal data may be processed for the following purposes:

• responding to inquiries and communicating with prospective or existing business contacts, based on our legitimate interests
• managing leads, contacts, and business opportunities in our CRM systems, based on our legitimate interests
• analyzing website usage and improving website performance, based on user consent
• sending marketing communications and conducting remarketing activities, based on user consent
• complying with applicable legal and regulatory obligations

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Cookies and Tracking Technologies
We use cookies and similar technologies to ensure the proper functioning of the website and to analyze website usage.

• Essential cookies are necessary for the operation of the website and do not require consent.
• Analytics and marketing cookies are used only after you have provided explicit consent via our cookie consent banner.

You may manage or withdraw your cookie preferences at any time through the cookie settings available on the website.
For more information, please refer to our Cookie Policy.

8. Data Sharing and International Transfers
We do not sell or rent personal data.
We may share personal data with trusted service providers acting as data processors, including:

• Google Analytics and Google Tag Manager
• Pipedrive (CRM)
• Notion (internal documentation and business analysis)

Some of these service providers process personal data on servers located outside the European Union, including in the United States.
Where personal data is transferred outside the EU, we ensure appropriate safeguards in accordance with GDPR Chapter V, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• additional technical and organizational measures designed to protect personal data

Access to personal data may also be granted to authorized team members located outside the EU (including Georgia) strictly on a need-to-know basis and subject to confidentiality and security obligations.

9. Data Retention
We retain personal data only for as long as it is necessary for the purposes for which it is processed.
Personal data is periodically reviewed and manually deleted when it is no longer required for business purposes or when a valid request for deletion is received from the data subject, unless retention is required by applicable law.

10. Data Subject Rights
Under the GDPR, you have the following rights:

• the right to access your personal data
• the right to rectification of inaccurate or incomplete data
• the right to erasure of personal data
• the right to restriction of processing
• the right to data portability
• the right to object to processing, including processing for marketing purposes

To exercise your rights, please contact us at hello@epicmax.co.

11. Right to Lodge a Complaint
If you believe that your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with a competent data protection supervisory authority in your EU member state of residence, place of work, or where the alleged infringement occurred.

12. Security Measures
We implement appropriate technical and organizational measures to protect personal data, including:

• SSL encryption (HTTPS)
• restricted and role-based access to personal data
• two-factor authentication (2FA) for systems containing personal data
• IP anonymization in Google Analytics

13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Last Updated" date.
Continued use of the website constitutes acceptance of the updated Privacy Policy.