Privacy policy

Last updated: 20 June 2026

This policy explains what personal data Epoch Controllers (“we”, “us”) collects, why, and your rights over it. We’re the data controller for the information described here.

Who we are

Privacy questions: hello@epochcontrollers.com

What we collect

• When you book a repair or place an order: your name, email address, postal address and phone number. These are collected through Stripe’s secure checkout so we can carry out the work and post your items back.
• Payment details: card payments are processed entirely by Stripe. We never see or store your full card number — only a confirmation of payment and a reference.
• If you create an account: your email, display name, and either a securely hashed password or a Google sign-in identifier.
• Automatically: basic technical logs (such as IP address, browser type and pages requested) for security and to keep the site running.

Why we use it, and our legal basis

• To provide the service — process bookings/orders, send confirmations, postage labels and dispatch updates, and answer your enquiries (performance of a contract).
• To keep the site secure and diagnose problems (legitimate interests).
• To meet legal duties such as accounting and tax record keeping (legal obligation).
• Marketing emails — only if you have explicitly opted in, and you can withdraw consent at any time (consent).

Cookies & local storage

We keep this minimal:

• Essential sign-in cookies — only set if you have an account and sign in, to keep you logged in.
• Theme preference — your light/dark choice is stored in your browser only.
• We do not use third-party advertising or tracking cookies.

Who we share it with

We only share data with the service providers needed to run the business, each acting on our behalf:

• Stripe — payment processing.
• Brevo — sending transactional and (opted-in) marketing email.
• Royal Mail — postage and delivery of your items.
• Google — only if you choose to sign in with Google.
• Our hosting and image-storage providers — to run the website and store listing images.

We never sell your personal data. Some providers may process data outside the UK; where they do, appropriate safeguards (such as standard contractual clauses) are in place.

How long we keep it

We keep order and repair records for as long as needed to provide the service and to meet legal and accounting obligations (typically up to six years). Technical logs are kept for a short period. Account data is kept until you ask us to close your account.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, email hello@epochcontrollers.com.

If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Changes

We may update this policy from time to time. The “last updated” date above shows when it last changed.