Privacy Policy
EPCFire.com
1. Introduction
EPCFire.com ("EPCFire", "we", "us" or "our") is a UK-based business.
We're committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, purchase products, create an account, sign up for emails or otherwise use our services.
We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller Information
Business Name: EPCFire.com
EPCFire.com3 Catherine Wheel Mews
High Street
Southampton
SO30 2EA
United Kingdom
Website: https://epcfire.com
Privacy Contact: support@epcfire.com
2. Information We Collect
Depending on how you interact with our website, we may collect the following information:
- Personal identification information: your name and email address.
- Contact information: billing address, mailing address and telephone number where provided.
- Account information: registration details, account status and purchase history.
- Transaction information: payment amounts, dates, transaction identifiers and payment status.
- Technical information: IP address, browser type, device information, cookies and website usage information.
- Communications: messages you send to us, including customer support requests and enquiries.
- Marketing preferences: email sign-up details and communication preferences.
When you purchase a product, payment card information is processed by our third-party payment processor, Stripe.
We don't store full payment card numbers or card security codes on our own servers.
3. How We Use Your Information
We use personal information for the following purposes:
- To process payments and purchases.
- To provide access to purchased products and services.
- To manage customer accounts.
- To respond to enquiries and provide customer support.
- To send transactional communications, including payment confirmations and account notifications.
- To send newsletters or promotional communications where permitted by law.
- To maintain website security, prevent fraud and investigate suspicious activity.
- To understand website usage and improve our services.
- To comply with applicable legal, tax, accounting and regulatory obligations.
We don't sell personal information to third parties.
4. Legal Basis for Processing
Where UK GDPR applies, we process personal information on the following legal bases, as appropriate:
- Contractual necessity: to fulfil purchases, process orders and deliver requested services.
- Legal obligations: to comply with accounting, taxation and other applicable legal requirements.
- Legitimate interests: to maintain website security, prevent fraud, respond to customer enquiries and improve our business operations, where those interests aren't overridden by your rights and freedoms.
- Consent: where required for optional marketing communications, analytics cookies or other processing that requires consent.
You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Payment Processing
We use Stripe to securely process payments for our products.
When you make a payment, relevant payment and billing information is provided to Stripe for processing.
Stripe may process personal information to complete transactions, detect fraud, meet legal obligations and operate its payment services.
We may receive transaction-related information from Stripe, such as payment status, transaction identifiers, payment amounts and limited payment-method details.
We don't receive or store full payment card numbers.
Stripe's handling of personal information is described in the Stripe Privacy Policy.
Information about our refund arrangements is available in our Refund Policy.
6. Service Providers
We may use trusted third-party service providers to support the operation of our website and services. These may include:
- Payment processors.
- Website hosting providers.
- Email service providers.
- Analytics providers.
- Technical support services.
Personal information is shared only where necessary for the relevant services or another lawful purpose.
Where third parties process personal information on our behalf, we require appropriate contractual and security safeguards.
7. Cookies and Google Analytics
Our website may use cookies and similar technologies to support website functionality, remember preferences, maintain security and analyse website performance.
Where Google Analytics is enabled, it may collect information about website interactions, including pages visited, approximate location, device information and usage patterns.
Google's privacy policy is available at Google Privacy Policy. You can learn more about opting out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
Where legally required, we obtain consent before placing or accessing non-essential cookies, including analytics cookies.
You can also manage cookies through your browser settings and any cookie preference controls provided on our website.
8. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.
Payment transactions are handled by Stripe using security measures appropriate to payment processing.
Although we take reasonable precautions to safeguard information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
9. Data Retention
We keep personal information only for as long as reasonably necessary for the purposes it was collected for, including providing services, maintaining business records, resolving disputes and meeting legal obligations.
Retention periods depend on the nature of the information, the services provided and applicable legal requirements. For example:
- Account information: may be kept while an account remains active and for an appropriate period afterwards.
- Transaction and accounting records: may be kept for the periods required by applicable tax and accounting legislation.
- Marketing information: may be kept until consent is withdrawn or the information is no longer needed.
- Customer support communications: may be kept for a reasonable period to resolve enquiries and maintain service records.
When information is no longer required, we take appropriate steps to delete or anonymise it securely.
10. Your Data Protection Rights
Subject to applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information.
- Request restriction of certain processing activities.
- Object to certain processing activities.
- Request transfer of your information where data portability applies.
- Withdraw consent where processing is based on consent.
You have the right to object to processing based on legitimate interests in applicable circumstances, and to object to direct marketing at any time.
To exercise your rights, please email support@epcfire.com.
We'll respond in accordance with applicable data protection requirements. Some requests may be subject to legal exceptions, including requirements to keep transaction records.
11. Marketing Communications
Where permitted by law, we may send newsletters, service announcements or promotional information.
You can unsubscribe from marketing emails using the unsubscribe link in the relevant email or by contacting support@epcfire.com.
Unsubscribing from marketing emails doesn't stop us sending necessary transactional or account-related messages.
12. International Data Transfers
Some third-party service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to make sure appropriate protections are in place in accordance with applicable data protection laws. These may include adequacy regulations or approved contractual safeguards.
You can contact support@epcfire.com for more information about the safeguards that apply to your information.
13. Children's Privacy
Our services aren't directed at children, and we don't knowingly collect personal information from children where doing so would be unlawful.
If you believe a child has provided us with personal information inappropriately, please contact support@epcfire.com so we can investigate and take appropriate action.
14. Third-Party Websites
Our website may contain links to external websites and services.
We aren't responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external services you use.
15. Complaints
If you have concerns about how we process your personal information, please contact us first at:
EPCFire.com3 Catherine Wheel Mews
High Street
Southampton
SO30 2EA
United Kingdom
Email: support@epcfire.com
You may also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
If you live outside the UK, you may also have the right to contact your local data protection authority.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or data processing practices.
Any updates will be published on this page with a revised "Last updated" date. Where required by law, we'll give additional notice of material changes.
17. Contact Us
For questions, privacy requests or concerns about this Privacy Policy, please contact:
EPCFire.com3 Catherine Wheel Mews
High Street
Southampton
SO30 2EA
United Kingdom
Email: support@epcfire.com
Website: https://epcfire.com