Privacy Policy

Privacy Policy

Last updated: March 25, 2025

This privacy policy describes how epiqoo (the “Site,” “we,” “us,” or “our”) collects, uses, and shares your personal data when you visit epiqoo.myshopify.com (the “Site”), use our services, make a purchase there, or otherwise communicate with us regarding the Site (together, the “Services”). For the purposes of this privacy policy, “you” and “your” refer to you as a user of the services, regardless of whether you are a customer, website visitor, or any other individual whose information we have collected under this privacy policy.

Please read this privacy policy carefully.

Changes to this Privacy Policy

We may update this privacy policy from time to time, for example, to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will publish the revised privacy policy on the Site, update the “Last updated” date, and take any other steps required by law.

How we collect and use your personal data

To provide the Services, we collect as outlined below. The information we collect and use varies depending on how you interact with us.

In addition to the specific purposes listed below, we may use the information collected about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What personal data do we collect?

The type of personal data we receive about you depends on how you interact with our Site and use our Services. When we use the term “personal information,” we refer to information that identifies you, relates to you, describes you, or can be associated with you. The following sections describe the categories and specific types of personal data we collect.

Information we collect directly from you

Information you provide to us directly through our Services may include:

• Contact details – including your name, address, phone number, and email address.

• Order information – including your name, billing address, shipping address, payment confirmation, email address, and phone number.

• Account information – including your username, password, security questions, and other information used for account security.

• Customer support information – including information you include in your communication with us, for example when you send a message via the Services.

Some features of the Services may require you to provide certain personal information. You may choose not to provide this information, but this may limit your access to or use of these features.

Information we collect about your use

We may also automatically collect certain information about your interaction with the Services (“Usage Data”). For this purpose, we may use cookies, pixels, and similar technologies (“Cookies”). Usage data may include information on how you access and use our Site and your account, including device information, browser information, network connection data, IP address, and other data about your interaction with the Services.

Information received from third parties

We may also receive information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

• Companies that support our Site and Services, such as Shopify.

• Our payment processors who collect payment information (e.g. bank account, credit or debit card information, billing address) to process your payment, fulfill your orders, and provide you with the products or services you requested, in order to fulfill our contract with you.

• When you visit our Site, open or click on emails from us, or interact with our Services or advertisements, we or third parties working with us may use online tracking technologies such as pixels, web beacons, SDKs, third-party libraries, and cookies to automatically collect certain information.

All data we receive from third parties is handled according to this privacy policy. See also the section below: Third-party websites and links.

How we use your personal data

Providing products and services

We use your personal data to provide the Services and fulfill our contract with you, including processing your payments, fulfilling your orders, sending you notifications about your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, organizing shipping, facilitating returns and exchanges, and other account-related features and functions. We may also improve your shopping experience by allowing Shopify to match your account with other Shopify services you may wish to use. In this case, Shopify will process your data in accordance with its own Privacy Policy and Consumer Privacy Policy.

Marketing and advertising

We may use your personal data for marketing and advertising purposes, such as sending promotional messages via email, SMS, or mail and showing you advertisements for products or services. This may include using your personal data to better tailor the Services and advertisements on our Site and on other websites. If you are located in the EEA, the legal basis for this data processing is our legitimate interest in marketing our products, as per Art. 6(1)(f) GDPR.

Security and fraud prevention

We use your personal data to detect, investigate, or take action against potential fraudulent, illegal, or malicious activities. If you choose to use the Services and register an account, you are responsible for maintaining the confidentiality of your login credentials. We strongly advise you not to share your username, password, or other access data with third parties. If you believe your account has been compromised, please contact us immediately. If you are located in the EEA, the legal basis for this processing is our legitimate interest in securing our website for you and other customers, as per Art. 6(1)(f) GDPR.

Communication and service improvement

We use your personal data to provide customer support and to improve our services. This is in our legitimate interest to respond to you, provide effective services, and maintain our business relationship, as per Art. 6(1)(f) GDPR.

Cookies

Like many websites, we use cookies on our Site. Specific information on the cookies used in connection with our Shopify store can be found at: https://www.shopify.com/legal/cookies.

We use cookies to operate and improve our Site and Services (including saving your actions and preferences), to analyze usage, and to better understand user interactions with the Services (based on our legitimate interest in operating, improving, and optimizing the Services). We may also allow third parties and service providers to use cookies on our Site to better tailor services, products, and advertising on our Site and other websites.

Most browsers accept cookies by default. However, you can configure your browser to remove or reject cookies. Please note that removing or blocking cookies may affect your user experience and cause certain features or functionalities of the Services to work improperly or become unavailable. In addition, blocking cookies may not fully prevent us from sharing information with third parties, such as our advertising partners.

How we share personal data

In certain circumstances, we may share your personal data with third parties to fulfill a contract, for legitimate purposes, or for other reasons outlined in this privacy policy. These may include:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and shipping)

• With business and marketing partners to provide you with services and advertising. Our business and marketing partners use your data in accordance with their own privacy policies

• If you instruct us, request it, or otherwise give us your consent to share specific information with third parties—for example, to send you products or through the use of social media widgets or login integrations, with your consent

• With our affiliates or otherwise within our corporate group, as part of our legitimate interest in running a successful business

• In connection with a business transaction such as a merger or bankruptcy; to comply with legal obligations (including responding to subpoenas, warrants, and similar requests); to enforce our terms of service; and to protect or defend the Services, our rights, and the rights of our users or others

We disclose the following categories of personal data and sensitive personal data for the purposes listed above in “How we collect and use your personal data” and “How we share personal data”:

We do not use or disclose your personal data for purposes of drawing inferences about you without your consent.

With your consent, we share personal data for marketing and promotional purposes as outlined.

Third-party websites and links

Our Site may contain links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We are not responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of information found there. Information you provide in public or semi-public areas—including posts on third-party social networks—may be viewed by other users of the Services and/or users of those platforms. Including such links does not imply endorsement of the content or the platform owners/operators, unless stated in the Services.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal data from children. If you are a parent or guardian of a child who has provided us with personal data, please contact us to request deletion.

As of the effective date of this privacy policy, we do not have actual knowledge that we “sell” or “share” personal data of individuals under 16 (as defined under applicable law).

Data security and retention

Please note that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Also, the data you send to us may not be secure in transit. Please avoid using unsecured channels to share sensitive information.

The duration for which we retain your personal data depends on various factors, including whether we need the data to manage your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal data. These rights are not absolute and apply only under certain conditions. In some cases, we may lawfully reject your request.

• Right of access/information: You may have the right to request access to the personal data we hold about you, including how we use and share it

• Right to deletion: You may have the right to request the deletion of your personal data

• Right to correction: You may have the right to request correction of inaccurate personal data

• Right to data portability: You may have the right to receive a copy of your personal data and request that it be transferred to a third party

• Right to opt out of sale/sharing/targeted advertising

• Right to restrict processing

• Right to withdraw consent

• Right to appeal: If we deny your request, you may have the right to appeal our decision

• Manage communication preferences: You can unsubscribe from marketing emails using the link in our messages. We may still send you transactional emails

You can exercise these rights as described on our Site or by contacting us at the address below.

We will not discriminate against you for exercising your rights. We may request information (such as your email or account details) to verify your identity before responding. You may also authorize a representative to submit requests on your behalf. Before accepting such a request, we may require proof of authorization and may still require you to confirm your identity directly.

We will respond within the time frame required by law.

Complaints

If you have complaints about how we handle your personal data, please contact us. If you're unsatisfied with our response, you may have the right to appeal or file a complaint with your local data protection authority. For the EEA, a list of supervisory authorities is available here.

International users

Please note that we may transfer, store, and process your personal data outside your country of residence. Your data may also be processed by staff or third-party service providers in those countries.

When transferring data outside of Europe, we rely on recognized mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts from the UK authority, unless the data is transferred to a country with an adequate level of protection.

Contact

If you have any questions about our privacy practices or this privacy policy, or if you wish to exercise your rights, please email or write to us at:

E-Mail: legal@epiqoo.com
Address: Herzogspitalstraße 24, 80331 Munich, Germany

Unless otherwise stated, we are the controller of your personal data within the meaning of applicable data protection law.