This Privacy Policy explains how Epiphany IP Solutions (“Epiphany IP”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information obtained through our website, enquiry forms, downloadable resources, email communications and professional-service interactions.

By using our website or submitting information to us, you acknowledge the practices described in this Policy. Where consent is required, we will seek it separately and you may withdraw it as described below.

This Policy applies to personal information collected through:

• the Epiphany IP Solutions website and webpages;
• guides and consultation forms;
• emails, calls, meetings and other communications;
• event, newsletter or marketing registrations; and
• professional-service intake, conflict checks and engagements.

This Policy does not govern third-party websites, platforms or services that may be linked from our website.

Please do not submit through a general website form: trade secrets, unpublished enabling technical information, native CAD or source files, third-party confidential information, government identity documents, payment-card details or other highly sensitive information unless we have expressly requested it and appropriate arrangements have been confirmed.

We may collect information directly from you when you complete a form, request a guide, contact us, provide documents, participate in a meeting or engage us. We may also receive information from your employer, authorised representative, business contact, publicly available professional sources or a service provider acting on your instructions.

We may use personal information to:

• provide a requested guide, resource or response;
• evaluate an enquiry and conduct intake, identity, authority or conflict checks;
• communicate about possible next steps, requested services or an existing matter;
• prepare proposals, engagement documentation, invoices and service records;
• provide and administer agreed intellectual-property or related professional services;
• maintain records, manage deadlines and meet legal, regulatory, professional, accounting or security obligations;
• operate, secure, troubleshoot and improve our website, forms and internal systems;
• prevent misuse, fraud, unauthorised access or other harmful activity;
• send requested resources and, with optional consent where required, occasional updates or marketing communications; and
• establish, exercise or defend legal rights and respond to lawful requests.

Depending on the circumstances and applicable law, we may process personal information based on your consent, steps requested before an engagement, performance of an agreement, compliance with legal or professional obligations, or another lawful basis. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully and may limit our ability to provide a requested resource or response.

This Policy is intended to operate consistently with applicable privacy and data-protection law, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as their provisions are brought into force and apply to the relevant processing.

We may share personal information only as reasonably necessary with:

• personnel, consultants and authorised representatives who need it for the stated purpose;
• website hosting, cloud storage, email, customer-relationship management, analytics, cybersecurity, payment, accounting and other service providers acting under appropriate arrangements;
• patent or trademark offices, foreign associates, local counsel, translators, search providers, filing agents, vendors or experts where required for an agreed matter;
• professional advisers, auditors, insurers or financial institutions;
• government, regulatory, judicial or law-enforcement authorities where disclosure is legally required or permitted; and
• a successor or relevant counterparty in connection with a proposed restructuring, merger, transfer or sale, subject to appropriate safeguards.

We do not sell or rent personal information. We do not share information submitted for an enquiry with unrelated third parties for their own direct marketing.

Because intellectual-property work and technology services may involve multiple countries, personal information may be processed in India or in other jurisdictions where our service providers, foreign associates or professional collaborators operate. Where applicable, we use reasonable contractual, technical and organisational measures and comply with restrictions or requirements governing international transfers.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, professional, security, accounting, limitation, conflict-check or record-management requirements. Retention periods may vary according to the nature of the information and whether an engagement is established. Information that is no longer required will be deleted, anonymised or securely disposed of, subject to lawful retention obligations.

We use reasonable administrative, technical and organisational safeguards intended to protect personal information against unauthorised access, alteration, disclosure, loss or misuse. However, no electronic transmission, email, storage system or website can be guaranteed to be completely secure. Please use appropriate caution when deciding what to submit electronically.

Our website may use essential cookies required for security and functionality. It may also use analytics or preference technologies where enabled. You can manage cookies through your browser settings and, where presented, through the website’s consent controls. Disabling certain cookies may affect website functionality.

Subject to applicable law and relevant exceptions, you may request:

• information about the personal data we process and the purposes of processing;
• access to or a summary of relevant personal information;
• correction, completion or updating of inaccurate information;
• erasure of information that is no longer required or lawfully retained;
• withdrawal of consent;
• cessation of optional marketing communications; or
• review of a privacy concern or grievance.

We may need to verify your identity or authority before acting on a request. Some information may need to be retained where required by law, professional obligations, conflict-check requirements, legal claims, security needs or an active engagement.

We send marketing updates only where permitted and, where required, with optional consent. You may unsubscribe by using the option provided in the communication or by emailing us. Service, enquiry, legal or administrative communications are not marketing and may still be sent when necessary.

Our website and professional services are intended for adults and business users. We do not knowingly solicit personal information from persons under 18 through our enquiry forms. A parent or guardian who believes that a minor has submitted information may contact us to request review and deletion, subject to applicable law.

Submitting information through a website form, requesting a guide or contacting us does not by itself create a professional-client, agent-client, attorney-client, confidential, fiduciary or advisory relationship. An engagement, scope of work, confidentiality arrangement and responsibility for any deadline arise only when expressly confirmed in writing by an authorised representative of Epiphany IP Solutions.

This statement does not limit any privacy obligations that apply to personal information under this Policy or applicable law.

Our website may contain links to government resources, social networks or other third-party websites. Their privacy and security practices are governed by their own policies, and we are not responsible for those practices.

We may update this Policy to reflect changes in law, technology, services or business practices. The updated version will display a revised “Last updated” date. Material changes may also be communicated through an appropriate website notice or direct communication where required.

To ask a privacy question, exercise an applicable right or submit a grievance, contact:

Privacy and Grievance Contact
Epiphany IP Solutions
Email: info@epiphanyipsolutions.com
Website: epiphanyipsolutions.com/contact/
India office: Neil Rao Towers, 7th Floor, Plot 117, Road 3, EPIP Phase 1, Whitefield, Bengaluru, Karnataka 560066, India

Please use the subject line “Privacy Request” and provide sufficient information to identify the relevant interaction and understand your request.

Legal note: This Policy is a general website privacy notice and should be reviewed against Epiphany IP Solutions’ actual hosting, analytics, CRM, email, payment, retention, vendor and cross-border processing arrangements before publication. Where a specific engagement notice or contractual privacy term conflicts with this general Policy, the specific applicable term will govern to the extent permitted by law.