Privacy Policy

EPOCH respects your privacy. This policy explains what personal information we collect, why we collect it, how we use it, and the choices you have. We collect only what is necessary to process orders, deliver timepieces, provide support, and operate the website securely.

Account information. Name, email address, and account preferences. Authentication credentials are handled securely by our authentication system; we do not store plaintext passwords.

Order information. Products purchased, order number, transaction reference, and payment status.

Shipping information. Name, address, city, region/state, postal code, country, and phone number where required for courier dispatch.

Customer support information. Information you submit through contact forms, support requests, and customer service communications.

Technical information. Where actually collected, this may include IP address, browser, device, operating system, and website interaction information used for security and site operation. We do not claim to collect information we do not actually collect.

We use personal information for legitimate purposes, including:

• Processing and fulfilling orders and deliveries;
• Processing payments and preventing fraud;
• Providing customer support and managing accounts;
• Sending transactional emails (order confirmations, shipping, service);
• Securing the website and meeting legal obligations.

Marketing communications are handled separately from transactional communications. We do not subscribe you to marketing emails without appropriate consent where required.

EPOCH does not store full card numbers, CVV codes, or payment authentication secrets. Payment is processed through our payment provider ([OWNER: payment processor name, e.g. Stripe]). We retain only the information necessary for order management, such as the provider name, transaction/reference ID, payment status, amount, currency, and relevant timestamps.

We work with the following categories of service providers:

• Payment processor — [OWNER: payment processor name, e.g. Stripe] (processes payment authorization and refunds).
• Hosting — Edge serverless hosting (Cloudflare Workers).
• CRM / lead capture — Connected CRM (lead capture for inquiries & checkout) (records inquiries and checkout contact information for fulfillment).
• Shipping carrier — [OWNER: insured courier, e.g. DHL Express] (delivers timepieces).

Only providers actually used by the production application are listed. Each provider processes only the information necessary to perform its role.

We retain personal information only as long as necessary for the purposes described here, and to meet legal, accounting, order-history, and security requirements. Where data is no longer necessary, we delete or anonymize it where possible. Specific retention periods depend on applicable legal and accounting requirements and should be confirmed by the owner.

Depending on your jurisdiction and applicable law, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, and to withdraw consent where applicable. These rights depend on applicable law and are not identical for every customer.

To exercise a right, contact us through our Support page. We authenticate requests before disclosing sensitive personal information.

You can request deletion of your account from the Client Account page. Before deletion we explain what will happen. Where transaction records must be retained for legal or accounting reasons, we minimize and restrict the personal information kept and retain only what is legally or operationally necessary.

We use only the cookies required to operate the website securely: authentication, cart, checkout, security, and session management. Where non-essential cookies or tracking are used, we obtain appropriate consent and you can manage your preferences. We do not claim to use cookies that do not exist.

See the cookie preferences available in the consent banner. You can accept or reject optional cookies at any time.

We take reasonable measures to protect personal information, including server-side validation, secure session handling, and limiting access to personal data. No method of transmission or storage is completely secure, but we work to protect your information using appropriate technical and organizational measures.

We may update this Privacy Policy. When we do, we update the version and effective date. Material changes may be communicated through the website or by email where appropriate.

For privacy questions, contact [OWNER: support@epoch… email address].