Privacy policy

Effective from: 16 October 2026

I'm Kevan Smith, and I run Epiphany Content. This page explains what personal information we collect through epiphanycontent.com, why we collect it, who helps us handle it, and what you can ask us to do with it. I've tried to keep it in plain English. If anything here is unclear, email me and I'll answer it myself.

Who we are

The website is run by Epiphany Content Ltd, a company registered in England and Wales, company number 11609641. Our registered office is Apartment 166 Hove Gardens House, 5 Ethel Street, Hove, East Sussex, BN3 3JY.

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), Epiphany Content Ltd is the controller of the personal information described here. We are registering with the Information Commissioner's Office, and we'll add our registration number here as soon as it's issued.

For anything to do with your information, email kevan@epiphanycontent.com or write to the address above.

What we collect and why

When you get in touch through the contact form. We collect your name, email address, phone number, subject and message, so that we can reply and, if it makes sense for both of us, talk about working together. Our lawful basis is our legitimate interest in answering people who contact us, and, where you're asking about our services, taking steps you've asked for before a contract.

When you sign up for The Epiphany Brief. We collect your email address, and your name if you give it, so that we can send you the newsletter. We also record that you signed up on the website. Our lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in every email, or by emailing me.

When you buy something through the website. We collect the details needed to take your order and payment, and to keep the records the law requires. Our lawful basis is the contract with you and our legal obligations, including tax records.

When you use our free tools. Our quiz, readiness diagnostic, friction audit and GEO audit tools ask for your details so we can send you your results. They work on the same basis as the newsletter, with consent, and you can unsubscribe in the same way.

When you visit the site. We keep a count of visits using Rybbit, a privacy-friendly analytics tool that doesn't use cookies or identify you. We use it to see which pages people read, so we can improve them. Our lawful basis is our legitimate interest in understanding how the site is used.

We never sell your information, and we don't use it for automated decisions that affect you.

Cookies

The site uses only the cookies it needs to work and to stay secure:

  • wf-csrf and wf-csrf.sig, from Webflow, which protect the forms from misuse. They last until you close your browser.
  • _cfuvid, from Cloudflare, which helps tell real visitors from bots. It lasts until you close your browser.

Strictly necessary cookies like these don't need your consent under the Privacy and Electronic Communications Regulations. We don't use advertising or analytics cookies. If that ever changes, we'll ask for your permission first and update this page.

The forms are protected by Cloudflare Turnstile, which checks your browser for signs of automated activity when you submit. Some pages play video through Gumlet, which collects anonymous playback statistics.

Who helps us handle your information

We use a small number of trusted providers to run the website and the business. Each one handles your information only to provide its service to us:

  • Webflow, which hosts the website and receives form submissions and orders;
  • Google Workspace, which runs our email, where form messages arrive and where we reply;
  • Encharge, which holds our newsletter list and sends The Epiphany Brief;
  • Cloudflare, which runs the bot checks on our forms;
  • Rybbit, which provides our cookie-free visit statistics;
  • Gumlet, which delivers the videos on the site;
  • Vercel, which hosts our free tools and the Epiphany Hub (hub.epiphanycontent.com);
  • Stripe and PayPal, which process payments securely, so we never see your full card details.

Some of these providers are based in the United States, or store data there. Where your information leaves the UK, the transfer is protected either by the UK's adequacy regulations (including the UK-US Data Bridge) or by the UK International Data Transfer Agreement or Addendum that the provider offers.

How long we keep it

  • Enquiries: for two years after our last conversation, then we delete them. If we start working together, your details move into our client records.
  • Clients and orders: for as long as the law requires us to keep business and tax records, which is at least six years after the end of the financial year they relate to.
  • Newsletter and tool sign-ups: until you unsubscribe. After that we keep only your email address on a suppression list, so we never email you again by mistake.

Your rights

You have the right to:

  • ask for a copy of the information we hold about you;
  • ask us to correct anything that's wrong;
  • ask us to delete your information;
  • object to us using it, or ask us to limit how we use it;
  • withdraw your consent at any time, for example by unsubscribing;
  • ask for your information in a format you can take elsewhere.

To use any of these, email kevan@epiphanycontent.com. We'll reply within one month, and there's no charge.

If you're unhappy with how we've handled your information, please tell me first and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top. If a change matters for something you've signed up to, we'll email you about it.