This policy describes how Epiidosis Investments LLC handles information submitted through this website and during counterparty engagement.
This Privacy Policy describes how Epiidosis Investments LLC ("Epiidosis," "we," "us," or "our") collects, uses, discloses, and safeguards information in connection with epiidosis.com, epiidosis.ae, epiidosis.in, and any successor or affiliated domain designated by the Company (collectively, the "Website"), and in connection with our counterparty intake, scheduling, document exchange, and non-disclosure agreement tools (collectively, the "Services").
This Policy applies across all of the domains listed above and to all locales in which the Website is published. Please read it together with our Cookie Policy, Terms of Use, and Legal & Investment Disclaimer.
The entity responsible for determining the purposes and means of processing personal data described in this Policy is Epiidosis Investments LLC, a company incorporated in Dubai, United Arab Emirates under DED License No. 896592 and Commercial Register No. 1478542, with its registered office at Office 818, Park Lane Tower, Business Bay, Dubai, United Arab Emirates. Epiidosis can be contacted regarding privacy matters at enquiry@epiidosis.com.
This Policy covers all personal data processed through the Website and Services, including the public-facing corporate site, the counterparty contact and intake form, the private scheduling links used to arrange calls, the staff-facing case management dashboard (which is separately access-controlled and used only by authorized Epiidosis personnel), the private document exchange links used to send or request materials from counterparties, and the non-disclosure agreement generation and e-signature workflow.
This Policy does not cover information processed by third parties whose websites or services may be linked from the Website; those third parties are responsible for their own privacy practices.
The categories of personal data we collect depend on how you interact with the Website and Services:
We process personal data for the following purposes: to respond to and evaluate counterparty inquiries; to arrange and confirm scheduled discussions; to generate, negotiate, and record the execution of non-disclosure agreements, including capturing forensic signature evidence for evidentiary purposes; to manage an active case or engagement, including internal notes, document exchange, and financial or deal-structuring provisions relevant to that engagement; to evaluate recruitment applications; to maintain the security, integrity, and performance of the Website; and to comply with applicable legal, regulatory, and contractual obligations, including anti-money-laundering and counterparty due-diligence requirements described in our Compliance & Counterparty Due-Diligence Statement.
Our legal bases for these processing activities include: your consent (for example, where you submit an inquiry, request a scheduling link, or elect to share device geolocation when signing an NDA); the necessity of processing to take steps requested by you prior to entering into an agreement, or to perform an agreement to which you are party; our legitimate interests in operating, securing, and improving the Website and in evaluating and managing counterparty relationships; and compliance with legal obligations to which Epiidosis is subject.
Because Epiidosis operates across the United Arab Emirates, India, the United States, and other jurisdictions, and because our hosting and infrastructure providers operate global networks, personal data may be transferred to, stored in, and processed in countries other than the country in which you are located, including countries that may not have data protection laws equivalent to those of your home jurisdiction. Where we transfer personal data across borders, we take reasonable steps to ensure that appropriate safeguards are in place, consistent with applicable law.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to evaluate an inquiry, to manage an active engagement, to maintain a permanent record of official case notes, executed agreements, and NDA signature evidence for evidentiary and audit purposes, and to comply with applicable legal, regulatory, or record-keeping obligations. Internal staff notes and official project notes recorded in the case management system are retained permanently as part of the firm's institutional record, consistent with our internal governance and audit requirements. Where personal data is no longer required for these purposes, we take reasonable steps to delete, anonymize, or securely archive it.
We maintain administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction, including encrypted transport (HTTPS/TLS) across the Website, access-controlled and session-authenticated staff tooling, unique unlisted tokens (rather than public listings) for document exchange and NDA signature links, and role-based access restricting sensitive case, financial, and compliance information to authorized personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Subject to applicable law, you may have rights to request access to, correction of, deletion of, or a copy of the personal data we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent (without affecting the lawfulness of processing before withdrawal). To exercise any of these rights, please contact us at enquiry@epiidosis.com. We may need to verify your identity before responding to a request, and certain requests may be limited where retention is required for legal, evidentiary, or audit purposes, including in respect of executed non-disclosure agreements and permanent case records.
Epiidosis is established in the Emirate of Dubai and processes personal data with reference to the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL") and other applicable UAE data protection requirements. This Policy is intended to reflect the principles of that framework, including lawfulness, purpose limitation, data minimization, accuracy, storage limitation, and security of processing.
The Website is accessed by visitors and counterparties from multiple jurisdictions. Where the EU/UK General Data Protection Regulation ("GDPR") applies to our processing of your personal data — for example, because you are located in the European Economic Area or the United Kingdom at the time of processing — we process your data consistent with the applicable requirements of that regulation, including as to legal basis, data-subject rights, and cross-border transfer safeguards described elsewhere in this Policy. We do not represent blanket compliance with the GDPR in respect of processing to which it does not apply, and the applicability of the GDPR should not be assumed for all visitors or all processing activities.
If you are a California resident, applicable California privacy law (including the California Consumer Privacy Act, as amended) may give you specific rights regarding your personal information, including the right to know what personal information we collect, to request deletion, and to opt out of certain disclosures. We do not sell personal information as defined under California law. Where applicable US state privacy law grants you rights beyond those otherwise described in this Policy, you may exercise them by contacting us at enquiry@epiidosis.com.
The Website and Services are directed at corporate counterparties, professional contacts, and prospective business associates, and are not directed at children. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us with personal data, please contact us at enquiry@epiidosis.com and we will take appropriate steps to delete it.
In the event of a security incident affecting personal data we hold, we will take reasonable steps to assess and contain the incident, and will notify affected individuals and, where legally required, applicable regulatory authorities, in accordance with applicable law and within any timeframes such law prescribes.
Questions, requests, or complaints regarding this Policy or our data-handling practices may be directed to enquiry@epiidosis.com or to Epiidosis Investments LLC, Office 818, Park Lane Tower, Business Bay, Dubai, United Arab Emirates.
We may update this Policy from time to time to reflect changes in our practices, the Services, or applicable law. The "Last updated" date at the top of this page indicates when this Policy was last revised. We encourage you to review this Policy periodically.