SECTION 2 – THE INFORMATION WE COLLECT AND THE LEGAL BASIS
When you access the website via any means, subscribe for a newsletter, become a member by signing-in, or make a purchase through the website, we may collect, store and use certain of your personal information in line with this policy.
A) Personal data you give to us
To register or make a purchase on the website, we ask for your name and email address. When you purchase something from our online store, to deliver your order, we also ask an address. When you make a purchase, depending on the payment option you choose, our payment service provider, will also collect and process your credit card or other payment details.
Credit Card Information: If you choose a direct payment gateway to complete your purchase, then ePay stores your credit card data. All transactions are secure and encrypted. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify’s Terms of Service here or Privacy Statement here
Registration for our e-mail newsletter: If you subscribe to our e-mail newsletter, we may send you send you emails about our store, new products and other updates. Mandatory information for sending the newsletter is your e-mail address alone. By subscribing to our newsletter, you give us your consent to the use of your personal data.
If you need to get in touch with our customer service team, or reach out to us through other means (such as through social media) we will collect information from you there too. We will collect information from you included in your reviews, including your display name and avatar if you choose one
B) Personal data we collect automatically
Even if you don’t end up placing an order, when you visit our websites we automatically collect certain information. From such data we cannot identify you but enable us to tailor our services. This includes your IP address, the date and time you accessed our services, the hardware, software or internet browser you use and information about your computer’s operating system. We can only see the gathered data in a statistical way but we don't know to whom it belongs to. The main goal here is to optimize and customize our online platform to your needs, making our site easier and more enjoyable to use. We strive to only use pseudonymized data for these analytical purposes.
C) Legal Basis
In view of purpose A, we rely on the legal basis that the processing of the personal data is necessary for the performance of a contract, specifically to finalize and administer your order and provide you with the item you purchase. If the required personal data is not provided, we cannot finalize the order, nor can we provide customer service. In view of purposes B, we rely on our legitimate commercial business interest to provide our services, and to improve its services.