Privacy Policy

1. Who we are

This Privacy Policy explains how EPDlogy collects and processes personal data when you use this website, contact us, request a quote, or communicate with us about EPD verification, EPD preparation, LCA consultancy or related services.

EPDlogy is based in Helsinki, Finland. For privacy-related questions, contact us at [email protected].

2. Personal data we may collect

We may collect information you provide directly, such as your name, company name, email address, phone number, product or sector information, project details, preferred timeline and message content.

If you request a PDF report from our CBAM Default Values tool, we collect the email address you provide together with the product query context (such as country, sector and CN/TARIC code), based on your consent given in the form.

We may also receive limited technical information from website hosting and security systems, such as IP address, browser type, device information, visited pages and timestamps.

3. Why we use personal data

We use personal data to respond to enquiries, prepare quotations, communicate about potential or ongoing projects, deliver contracted services, maintain business records, protect the website and comply with legal obligations.

We do not sell personal data.

4. Legal basis for processing

Depending on the situation, personal data is processed on the basis of legitimate interest, steps prior to entering into a contract, performance of a contract, consent, or legal obligation.

5. Third-party services

The website may use third-party tools such as hosting and security services (Cloudflare), email systems, form delivery services (Web3Forms), Google Forms or similar form tools. These providers may process data only as needed to provide their services.

Form submissions on this website — including the PDF report form of the CBAM Default Values tool — are delivered to our email inbox via Web3Forms, a form delivery service. Web3Forms transmits the submitted information and does not use it for its own purposes; the information is handled according to the provider's terms and privacy policy.

If a Google Form or another external form is used, the information submitted through that form is handled according to the relevant provider's terms and privacy settings.

6. Data retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including communication, project delivery, accounting, legal and compliance needs.

7. Your rights

Under applicable data protection laws, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, and data portability where applicable.

You may also have the right to lodge a complaint with a data protection authority.

8. Cookies and local storage

The website may use necessary cookies or similar technologies for basic functionality, security and performance. If non-essential analytics or marketing cookies are added in the future, cookie consent settings should be updated accordingly.

The CBAM Default Values tool stores the email address you enter for the PDF report locally in your own browser (local storage), so you are not asked for it again on your next download. This information stays on your device and can be removed at any time by clearing your browser's site data.

9. Contact

For questions about this Privacy Policy or personal data processing, contact: [email protected].

This page is intended as a practical website privacy notice and should be reviewed by legal counsel if formal legal advice is required.