Last updated: 11.07.2025

Who We Are

EPIC Research CIC is committed to protecting your privacy and personal data in accordance with UK data protection regulations, including the Data Protection Act 2018 and UK GDPR.

Data Controller: EPIC Research
Contact: hello@epicresearch.uk

What Personal Data We Collect

Website Visitors

• IP addresses and browser information (via cookies)
• Contact form submissions

Treatment Participants

• Personal identification information
• Medical history relevant to Huntington's disease
• Assessment results and progress measurements
• Video recordings of sessions (with explicit consent)
• Payment and billing information

General Inquiries

• Name, email address, phone number
• Correspondence records

How We Use Your Data

Legal Basis for Processing

We process personal data under the following legal bases:

• Legitimate interests: Website analytics, treatment development
• Consent: Video recordings, marketing communications
• Contract: Service delivery, payment processing
• Legal obligation: Professional compliance, safety reporting

Purposes

• Delivering The Dreamweave™ Protocol
• Developing innovative treatment methodologies in accordance with professional standards
• Improving treatment approaches
• Communicating treatment developments
• Website functionality and security

Data Sharing and Disclosure

We may share anonymised data with:

• Academic institutions
• Healthcare regulatory bodies
• Professional bodies as required

We will never sell your personal data. Identifiable information is only shared with explicit consent or legal requirement.

International Transfers

Personal data is processed within the UK. Any international transfers will be protected by appropriate safeguards in accordance with UK data protection law.

Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate information
• Erase your data (subject to professional obligations)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent (where applicable)

To exercise these rights, contact us at [Privacy Email Address].

Data Retention

We retain personal data only as long as necessary for treatment development purposes and legal obligations:

• Treatment participant data: 10 years following programme completion
• Website analytics: 24 months
• Contact inquiries: 3 years
• Financial records: 7 years (legal requirement)

Treatment-Specific Privacy Protections

In accordance with professional clinical practice standards:

• All treatment data is pseudonymised where possible
• Video recordings require explicit written consent
• Participants may withdraw from treatment programmes at any time
• Data is stored securely with restricted access
• Regular data protection impact assessments are conducted

Cookies and Website Analytics

We use essential cookies for website functionality and analytics cookies to improve user experience. You can manage cookie preferences through your browser settings.

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encrypted data storage and transmission
• Access controls and staff training
• Regular security assessments
• Incident response procedures

Changes to This Privacy Notice

We may update this privacy notice to reflect changes in our practices or legal requirements. Significant changes will be communicated directly to treatment participants and website users.

Contact and Complaints

For privacy concerns or to exercise your rights: Email: hello@epicresearch.uk
Address: 153 Armshead Rd, Werrington, Stoke-on-Trent. ST9 0EL

If unsatisfied with our response, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.