Privacy Policy

Last Updated: November 27, 2025

This Privacy Policy describes how E-Pal Merch (“E-Pal Merch,” “we,” “our,” “us”) collects, uses, and protects your personal information when you use our websites and services (“Services”). By using our Services, you agree to the practices described below.

1. Information We Collect

We collect several types of information to operate the Services and fulfill your orders.

A. Information You Provide to Us

  • Account Information: Name, email address, password, and contact details you provide when creating an account.
  • Purchase Information: Name, email, shipping address, phone number, products purchased, and transaction details.
  • Payment Information: Payment details are processed securely by third-party payment processors. We do not store full credit card numbers.
  • Communications: Messages you send us, including support inquiries, surveys, or feedback.

B. Information Automatically Collected

When you use the Services, we or our analytics partners may collect:

  • IP address

  • Device type, operating system, browser type

  • Usage behavior (pages visited, time spent, clicks, referring URL)

  • General location inferred from your IP address

  • Cookies, pixels, and similar tracking technologies

You can disable cookies in your browser settings, though doing so may limit site functionality.

C. Information From Third Parties

We may receive information from payment processors, analytics providers, or advertising platforms, which may be combined with data you provide.

2. How We Use Personal Information

We use the information we collect for:

  • Fulfilling and shipping orders
  • Processing payments
  • Customer support
  • Account management
  • Maintaining, improving, and personalizing the Services
  • Analytics, insights, and performance monitoring
  • Preventing fraud or misuse
  • Marketing and promotional communication
  • Legal and regulatory compliance

We may also create aggregated or de-identified data for analytics or product improvement.

3. How We Share Personal Information

We may share personal information with:

  • Service Providers: Trusted vendors who assist with payment processing, shipping, analytics, marketing, security, and customer support.
  • Legal Requirements: Government bodies or law enforcement when required by applicable law.
  • Business Transfers: Parties involved in mergers, acquisitions, or similar transactions.
  • With Your Consent: When you direct us to or explicitly approve it.

4. Analytics & Advertising

We use analytics tools (such as Google Analytics) and advertising technologies to understand site usage, improve services, and deliver relevant marketing. You may opt out of personalized ads through:

  • Google Ad Settings

  • DAA or NAI opt-out tools

  • Browser-level Global Privacy Control signals

5. Your Rights

Depending on your location, you may have rights such as:

  • Access to your personal data

  • Correction of inaccurate data

  • Deletion of your data

  • Restriction of processing

  • Data portability

  • Objecting to certain uses

  • Filing complaints with a data authority

To exercise these rights, please Contact Us. We may request identity verification to protect your information.

6. European Economic Area (EEA) & UK Residents

Where applicable laws apply, we process personal data on the basis of:

  • Contractual necessity (to fulfill orders)

  • Consent (for marketing)

  • Legitimate interests (security, analytics, improvements)

  • Legal obligations

7. California Residents (CCPA)

If you are a California resident, you may request:

  • The categories of data we collect

  • The sources of that data

  • How we use and share it

  • Access to or deletion of your data

  • Correction of inaccurate data

  • To opt out of certain data sharing

We do not knowingly sell or share data of children under 16. To submit a request, please Contact Us.

8. Data Retention

We retain personal information as long as necessary to:

  • Fulfill orders

  • Operate the Services

  • Meet legal obligations

  • Resolve disputes

  • Enforce our agreements

Data may be retained longer if required by law.

9. Security

We use industry-standard security measures to safeguard your information. No online system is 100% secure, but we continuously improve our protections.

10. Do Not Track

Our Services do not currently respond to browser-based Do Not Track signals.

11. Updates to This Policy

We may update this Privacy Policy periodically. Changes take effect when posted. Your continued use of the Services indicates acceptance of the revised policy.

12. Contact Us

If you have questions or requests, please Contact Us.