Privacy Policy
At epacX, we are committed to protecting your personal information and your right to privacy. This policy explains how we collect, use, and safeguard your data.
This Privacy Policy describes how epacX Flexible Packaging Co., Ltd. ("epacX," "we," "us," or "our") collects, uses, stores, and protects information obtained from visitors to our website and clients engaging in our flexible packaging manufacturing services. By accessing our website or using our services, you agree to the terms outlined in this policy.
We operate in full compliance with applicable data protection regulations including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and relevant Chinese data protection laws including the Personal Information Protection Law (PIPL).
Information We Collect
Personal Information
- Full name and job title
- Business email address and phone number
- Company name and business address
- Country and region of operation
Usage & Technical Data
- IP address and browser type
- Pages visited and time spent on site
- Referring URLs and search queries
- Device type and operating system
Business Transaction Data
- Purchase orders and invoices
- Custom packaging specifications
- Shipping and delivery records
- Payment method (no card data stored)
Communications Data
- Inquiry form submissions
- Email correspondence records
- Chat and support ticket history
- Feedback and survey responses
Note: We collect only the minimum data necessary to provide our services and fulfill our contractual obligations. We do not collect sensitive personal information such as government IDs, biometric data, or health information.
How We Use Your Information
We process your personal data based on the following legal bases and for the following purposes:
Service Delivery & Order Fulfillment
ContractualProcessing your orders for Bag-in-Box, Spout Pouches, Vacuum Bags, and other flexible packaging products; managing production specifications; coordinating shipping and logistics.
Customer Communications & Support
ContractualResponding to inquiries, providing technical support for OEM/ODM projects, sending order updates, quality reports, and important service notifications.
Legal & Regulatory Compliance
Legal ObligationMaintaining business records as required by Chinese commercial law, complying with FDA/BRC/ISO certification requirements, and responding to lawful government requests.
Service Improvement & Analytics
Legitimate InterestAnalyzing website usage patterns to improve user experience, understanding which packaging solutions attract most interest, and optimizing our B2B service offerings.
Marketing Communications
ConsentSending newsletters, product updates, and promotional materials about new packaging solutions--only with your explicit consent. You may opt out at any time.
Data Sharing & Disclosure
epacX does not sell, rent, or trade your personal information to any third party for their marketing purposes. Period.
We may share your data only in the following limited circumstances:
Logistics & Freight Partners
Sharing shipping addresses and contact details with freight forwarders and customs brokers solely to fulfill your delivery orders.
Payment Processors
Transmitting billing information to licensed payment service providers (e.g., bank wire, PayPal) under strict data processing agreements.
Certification Bodies
Providing necessary documentation to FDA, BRC, and ISO auditors during compliance certification processes as required by law.
Legal Authorities
Disclosing data when required by law, court order, or government regulation, always limited to what is legally required.
International Transfers: For clients in South America, the Middle East, and other regions, data may be transferred internationally. We ensure adequate protection through Standard Contractual Clauses (SCCs) or equivalent mechanisms as required by applicable law.
Data Security Measures
We implement industry-standard technical and organizational security measures to protect your data against unauthorized access, loss, or misuse:
All data transmissions are encrypted using TLS 1.3 or higher protocols.
Access to customer data is restricted to authorized personnel on a need-to-know basis with role-based permissions.
Regular automated backups are maintained with encrypted storage to prevent data loss.
All employees handling customer data undergo mandatory privacy and security training annually.
In the event of a data breach, we will notify affected parties within 72 hours as required by GDPR and applicable regulations.
Your Privacy Rights
Depending on your jurisdiction, you have the following rights regarding your personal data. We are committed to honoring all requests within 30 days:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of your data where no legal obligation requires retention.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict
Request restriction of processing while accuracy or legal basis is disputed.
How to Exercise Your Rights
To submit a data request, please contact our Data Protection Officer with your full name, company, and specific request. We will verify your identity before processing.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to registered business clients
- Display a prominent notice on our website for 30 days following the update
Your continued use of our services after any policy update constitutes your acceptance of the revised terms.
Privacy Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer directly.
Data Protection Officer
[email protected]Registered Address
epacX Flexible Packaging Co., Ltd.
Guangdong Province, China
Response Time
We respond to all privacy requests within 30 days
Submit a Privacy Request
© 2025 epacX Flexible Packaging Co., Ltd. All rights reserved.