How Eppur collects, uses and protects personal data on this website and in its dealings with partners, investors and enquirers.
This website, eppur.global (the “Site”), is operated by Eppur (“we”, “us”), a corporation registered in Delaware, United States, with registration number 10020878, whose registered address is 8 The Green, Suite R, Dover, DE 19901, USA.
Eppur is the controller of the personal data described in this policy. Where a group company processes personal data for its own purposes, it does so under this policy or a policy it provides to you directly.
This policy covers personal data we collect through the Site and in the ordinary course of our business relationships: enquiries, investor relations, partner and counterparty contacts, media and recruitment. It does not replace the data protection terms in any contract you or your organisation has entered into with Eppur, which take precedence for the data they cover.
The Site is a corporate information site. It does not offer accounts, transactions or user-generated content.
When you use the enquiry form, you provide your name, organisation, email address, the subject of your enquiry and your message. The form is delivered to us by Web3Forms, a form-processing service that forwards your submission to our inbox and acts on our instructions; nothing is stored on the Site itself. We receive the submission and any correspondence that follows.
When you deal with us as an investor, partner, adviser, supplier, journalist or candidate, we hold the business contact details and correspondence that the relationship requires, together with information you or your organisation provide for due diligence, know-your-customer, anti-money-laundering or sanctions checks where the law or our counterparties require them.
With your consent, we use Google Analytics 4 to understand how the Site is used. It collects the pages you view, how you arrived, the time you spend, your approximate location derived from your IP address (Google Analytics 4 does not log or store the full address), and your device, browser and screen size. It identifies your browser with a random cookie identifier, not your name, and we have not enabled advertising features, Google Signals or any linking to Google advertising accounts. Analytics cookies and identifiers are used only after you click Accept on the cookie banner; before that, the Google tag runs in consent mode with storage switched off and sends only cookieless, unlinked page-view signals. You can withdraw your consent at any time through the Cookie settings link in the footer. Our Cookie Policy lists the cookies involved.
Our hosting provider may keep standard server logs, which record the IP address, browser type, pages requested and time of each request, for security and operational purposes.
The Site loads its typefaces from two third-party services: Google Fonts (Google LLC) and CDNFonts. When your browser requests those files it sends your IP address and browser details to those providers, who process them under their own privacy policies. See our Cookie Policy.
In investor relations and business development we may receive contact details from introducers, advisers, public registers, professional networks and the organisations you represent.
We use personal data for the purposes below. For visitors from the European Economic Area and the United Kingdom, the legal basis under the GDPR and UK GDPR is shown for each.
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and any correspondence that follows | Legitimate interests; steps taken at your request before entering a contract |
| Managing relationships with investors, partners, counterparties, advisers and suppliers | Performance of a contract; legitimate interests |
| Sending investor updates, project news and market notes to people who have asked for them | Consent, which you may withdraw at any time; legitimate interests for existing business relationships |
| Due diligence, KYC, AML and sanctions screening | Legal obligation; legitimate interests |
| Measuring how the Site is used, with Google Analytics | Consent, given through the cookie banner and withdrawable at any time |
| Operating, securing and improving the Site | Legitimate interests |
| Establishing, exercising or defending legal claims | Legitimate interests; legal obligation |
Where we rely on legitimate interests, they are the interests of running a global infrastructure development business: originating and financing projects, communicating with the people who fund and build them, and keeping our systems secure. We do not use personal data for automated decision-making that produces legal or similarly significant effects, and we do not sell personal data.
We share personal data only where necessary and with appropriate protections:
Eppur is a United States company with group companies, partners and projects in Europe, the United Kingdom, Latin America and elsewhere. Personal data collected in the EEA or the UK will be transferred to the United States and may be transferred to other countries where we or our service providers operate.
Where those countries have not been found to provide adequate protection, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, supplemented where necessary, or on a lawful derogation. Google Analytics data is processed by Google LLC in the United States under Google’s data processing terms and its certification to the EU-US Data Privacy Framework and the UK Extension. You may ask us for details of the safeguards applied to your data.
We keep personal data for as long as the purpose it was collected for requires, and then delete or anonymise it. As a guide: enquiry correspondence is kept while the enquiry is live and for a reasonable period afterwards in case you return; investor, partner and counterparty records are kept for the life of the relationship and for the period that tax, company, financial-services and anti-money-laundering law requires afterwards; server logs are kept for a short period for security purposes only; Google Analytics keeps user-level data for the retention period we set in that service, after which only aggregated reports remain.
You have the right to ask for access to your personal data; to have it corrected or erased; to restrict or object to its processing; to receive it in a portable format; and to withdraw consent where consent is the basis for processing. You may also complain to a supervisory authority: in the UK, the Information Commissioner’s Office; in the EEA, the authority in the country where you live or work. We would ask you to contact us first so we can try to resolve your concern.
To the extent a US state privacy law applies to you, you may have the right to know what personal data we hold about you, to have it deleted or corrected, and to opt out of the sale or sharing of personal data or its use for targeted advertising. Eppur does not sell or share personal data, and does not use it for targeted advertising. We will not discriminate against you for exercising any right.
To exercise any right, email hello@eppur.global with “Privacy request” in the subject line. We may need to verify your identity before we act. We respond within the time the applicable law allows, and without charge unless a request is manifestly unfounded or excessive.
We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and contractual security obligations on our providers. No transmission over the internet is completely secure, and you send information to us at your own risk. If we become aware of a breach affecting your personal data we will notify you and the relevant authorities where the law requires.
Children. The Site is not directed at anyone under 18 and we do not knowingly collect personal data from them.
Third-party sites. The Site may link to sites we do not control. Their privacy practices are their own.
Changes. We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be flagged on the Site.
Eppur
8 The Green, Suite R
Dover, DE 19901, USA
hello@eppur.global