Privacy Policy
Last updated: 3 June 2026
This Privacy Policy explains how EP Store collects, uses and protects your personal data when you visit ep-store.com or use our services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection law.
1.Data controller
The controller responsible for processing your personal data is:
E-P Equipment Co., Ltd. (trading as EP Store) No. 1 Xiaquan Village, Lingfeng Street Anji, Huzhou, Zhejiang 313300 China
Legal representative: Jinhui He Email: [email protected]
For any questions about this policy or your data, please contact us at [email protected].
2.Data we collect
Depending on how you use our website, we may process the following categories of personal data:
- Identity and contact details (name, company, email address, phone number, delivery and billing address)
- Order and contract data (products requested, order history, communication with your local dealer)
- Account data (login credentials, preferences, region and language settings)
- Technical data (IP address, browser type, device information, access timestamps)
- Usage data (pages visited, search queries, interactions with the website)
- Communication data (messages sent through contact forms, email or live chat)
3.How we use your data
We process your personal data for the following purposes:
- Providing the website and its core functions, including your cart and account
- Forwarding your enquiries and orders to the relevant authorised dealer
- Responding to your questions and providing customer support
- Sending service messages and, where you have consented, marketing communications
- Improving our website and product range through analytics
- Ensuring the security of our systems and preventing misuse
- Complying with legal, tax and accounting obligations
4.Legal bases for processing
We rely on the following legal bases under Article 6(1) GDPR:
- Performance of a contract or pre-contractual measures (Art. 6(1)(b)) for orders and enquiries
- Your consent (Art. 6(1)(a)) for marketing and non-essential cookies
- Compliance with a legal obligation (Art. 6(1)(c)) for tax and bookkeeping duties
- Our legitimate interests (Art. 6(1)(f)) in operating, securing and improving our services
Where processing is based on consent, you may withdraw it at any time with effect for the future.
5.Cookies and tracking
Our website uses cookies and similar technologies. Strictly necessary cookies are required for the site to function, for example to remember your cart and session, and are set on the basis of our legitimate interest. Analytics and marketing cookies are only set with your consent, which you can give or withdraw at any time through our cookie settings or your browser. Session cookies are deleted when you close your browser; persistent cookies are stored for up to two years.
6.Sharing your data
We share personal data only where necessary, with:
- Authorised EP dealers who fulfil your order and provide local service
- EP Equipment group companies involved in delivery and after-sales support
- Service providers acting on our behalf (hosting, IT, analytics, communications), bound by data processing agreements
- Public authorities where required by law
We never sell your personal data.
7.International transfers
As our company is based outside the European Economic Area (EEA) and some of our service providers operate internationally, your data may be transferred to countries outside the EEA. Where this happens, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
8.Data retention
We keep personal data only for as long as necessary for the purposes described above, or as required by law. Order and contract data is generally retained for the duration of statutory warranty and accounting periods. Account data is deleted when you close your account, and contact enquiries are deleted once they are no longer needed, unless longer retention is legally required.
9.Data security
We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. This includes TLS encryption of data transmitted between your browser and our website, recognisable by the https:// prefix, and restricted internal access to personal data.
10.Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Request correction of inaccurate data (Art. 16)
- Request erasure of your data (Art. 17)
- Restrict or object to processing (Art. 18 and 21)
- Receive your data in a portable format (Art. 20)
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise any of these rights, contact us at [email protected].
11.Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The current version is always available on this page, with the date of the last update shown at the top.
12.Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected] or by post at the address given under Data controller above.