Privacy Policy

1 Information We Collect

We collect information in the following ways:

Information you provide directly:

• Name, email address, phone number, and delivery address when you register or place an order.
• Password (stored in encrypted form) when you create an account.
• Payment details — processed securely by Razorpay; we do not store card or bank information.
• Messages or enquiries submitted through our contact form or email.
• Newsletter subscription preference and email address.

Information collected automatically:

• IP address, browser type, and device information when you visit our website.
• Pages viewed, time spent on the site, and referral source (via cookies and analytics tools).
• Cart and session data to enable a seamless shopping experience.

2 How We Use Your Data

We use your personal information to:

• Process and fulfil your orders, including sending confirmation and shipping updates.
• Manage your customer account and subscription.
• Send promotional emails and offers — only if you have opted in.
• Respond to your enquiries and provide customer support.
• Improve our website, products, and services through analytics.
• Detect and prevent fraud or unauthorised account activity.
• Comply with our legal and regulatory obligations.

3 Sharing of Information

We do not sell, trade, or rent your personal information to any third party. We share your data only in the following limited circumstances:

• Logistics partners — Your name, address, and phone number are shared with our delivery partners to fulfil your order.
• Payment processor — Razorpay processes your payment details securely under their own privacy policy.
• Email service provider — Used to send transactional and (opted-in) marketing emails.
• Analytics providers — Aggregated, anonymised data may be shared with tools like Google Analytics.
• Legal compliance — We may disclose data if required to do so by law or in response to valid legal requests from public authorities.

4 Cookies & Tracking

Our website uses cookies to enhance your experience. Cookies are small text files stored on your device by your browser.

• Essential cookies — Required for core functionality such as keeping items in your cart and maintaining your session.
• Analytics cookies — Help us understand how visitors interact with our website (e.g., Google Analytics).
• Preference cookies — Remember your settings and preferences across visits.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect your ability to use parts of the website, such as adding items to your cart.

5 Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your browser and our server.
• Hashed and salted password storage — your password is never stored in plain text.
• Secure payment processing via PCI-DSS compliant Razorpay — we never see or store your card details.
• Access controls limiting who within our team can access personal data.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously strive to improve our safeguards.

6 Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. We also retain data to comply with our legal obligations, resolve disputes, and enforce our agreements.

• Order records are retained for a minimum of 7 years as required under Indian accounting laws.
• If you delete your account, your personal information will be removed from our systems within 30 days, except where retention is legally required.
• Anonymised and aggregated data may be retained indefinitely for business analytics.

7 Your Rights

You have the following rights with respect to your personal data:

• Access — Request a copy of the personal information we hold about you.
• Correction — Update or correct inaccurate information via your account profile.
• Deletion — Request that we delete your personal data (subject to legal retention requirements).
• Opt-out — Unsubscribe from marketing communications at any time.
• Portability — Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us at privacy@epokaglobal.com. We will respond within 30 days.

8 Third-Party Links

Our website may contain links to third-party websites or services (e.g., social media platforms, payment gateways). These sites operate under their own privacy policies, and we have no control over their content or data practices. We encourage you to review the privacy policy of any site you visit.

9 Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

10 Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy regularly. Significant changes may be communicated to you via email if you have an account with us.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us.