Privacy Policy

1. Introduction

Epnex (“Epnex Research”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website or purchase our products.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following types of personal data:

a. Identity Data

• Name
• Title

b. Contact Data

• Email address
• Telephone number
• Billing and delivery address

c. Transaction Data

• Purchase history
• Payment details (processed securely via third-party providers)

d. Technical Data

• IP address
• Browser type and version
• Device type
• Operating system

e. Usage Data

• Website interactions
• Pages viewed
• Time spent on site

f. Marketing Data

• Preferences for receiving marketing communications

3. How We Collect Your Data

We collect data through:

• Direct interactions (placing orders, creating accounts, contacting us)
• Automated technologies (cookies, analytics tools)
• Third-party services (payment providers, delivery partners)

4. How We Use Your Data

We use your personal data for the following purposes:

Order Processing

To process and deliver your orders, including payment processing and shipping.

Customer Support

To respond to enquiries and provide support.

Account Management

To manage your account and maintain records.

Marketing Communications

To send updates, offers, and product information (only where consent is given).

Legal & Compliance

To comply with legal obligations and prevent fraud.

5. Legal Basis for Processing

We process your data under the following lawful bases:

• Contractual necessity – to fulfil orders
• Legal obligation – for compliance and record-keeping
• Legitimate interests – to improve services and prevent fraud
• Consent – for marketing communications

6. Data Sharing

We may share your data with:

• Payment processors (e.g. Stripe)
• Shipping and logistics providers
• IT and website hosting providers
• Professional advisors (legal, accounting)

We ensure all third parties comply with GDPR requirements.

7. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations
• Standard Contractual Clauses (SCCs)

8. Data Retention

We retain your personal data only as long as necessary:

• Order data: up to 6 years (for tax/legal purposes)
• Marketing data: until consent is withdrawn
• Account data: until account deletion

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise your rights, contact: enquiries@epnex.co.uk

10. Cookies

We use cookies to:

• Improve website functionality
• Analyse site usage
• Personalise user experience

You can manage cookie preferences via your browser settings.

(A separate Cookie Policy is recommended.)

11. Data Security

We implement appropriate technical and organisational measures, including:

• Secure servers and encryption
• Access controls
• Regular security monitoring

However, no system is completely secure.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Updates to This Policy

We may update this policy from time to time. Updates will be posted on this page.

14. Contact & Complaints

If you have any concerns:

Email: enquiries@epnex.co.uk

You also have the right to lodge a complaint with: