Privacy Policy

Last Updated: October 16, 2025

1. Introduction

EOCEL ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.eocel.com and interact with our services.

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

  • Contact Information: Name, email address, phone number, mailing address
  • Account Information: Username, password (encrypted), preferences
  • Payment Information: Processed securely through third-party payment processors (we do not store credit card information)
  • Communication Data: Messages, inquiries, feedback you send to us
  • Adverse Event Reports: Information related to product safety concerns or adverse reactions

2.2 Automatically Collected Information

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent, navigation patterns
  • Cookies and Tracking: See our Cookie Policy for details

3. How We Use Your Information

We use collected information for the following purposes:

  • To provide and maintain our services
  • To process orders and transactions
  • To communicate with you (order updates, newsletters, marketing)
  • To respond to customer service requests and support inquiries
  • To improve our website and user experience
  • To comply with legal obligations (including MoCRA adverse event reporting)
  • To detect, prevent, and address fraud or security issues
  • To conduct research and analysis

4. Legal Basis for Processing (GDPR)

We process your personal information based on:

  • Consent: You have given explicit consent for specific purposes
  • Contract Performance: Processing is necessary to fulfill our obligations to you
  • Legal Obligation: We are required by law to process your information
  • Legitimate Interests: Processing serves our legitimate business interests while respecting your rights

5. Information Sharing and Disclosure

We may share your information with:

5.1 Service Providers

  • Payment processors (Stripe, PayPal, etc.)
  • Shipping and fulfillment partners
  • Email service providers
  • Analytics services (with anonymization where possible)
  • Hosting and cloud infrastructure providers

5.2 Legal Requirements

We may disclose information when required by law, such as:

  • In response to legal process (subpoenas, court orders)
  • To comply with regulatory requirements (FDA MoCRA reporting)
  • To protect our rights, property, or safety
  • To prevent fraud or illegal activity

5.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Typical retention periods:

  • Account Data: Duration of account plus 3 years
  • Transaction Records: 7 years (tax/accounting requirements)
  • Adverse Event Reports: As required by FDA regulations (minimum 10 years)
  • Marketing Consent: Until withdrawn

7. Your Privacy Rights

7.1 GDPR Rights (European Users)

  • Access: Request a copy of your personal information
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your information
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Revoke previously given consent

7.2 CCPA Rights (California Residents)

  • Know: Request disclosure of data collection and use
  • Delete: Request deletion of personal information
  • Opt-Out: Opt-out of sale of personal information (Note: We do not sell personal information)
  • Non-Discrimination: Exercise rights without discriminatory treatment

7.3 Exercising Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Incident response procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

9.1 Types of Cookies

  • Essential Cookies: Required for website functionality
  • Performance Cookies: Analyze how you use our website
  • Functional Cookies: Remember your preferences
  • Marketing Cookies: Deliver relevant advertisements (with consent)

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection
  • Privacy Shield framework compliance (where applicable)

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

12. Third-Party Links

Our website may contain links to third-party websites (such as our Marsel Kei store). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email or prominent website notice. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

EOCEL

Email: privacy@eocel.com

Phone:

Address:

For GDPR inquiries, you may also contact our Data Protection Officer at dpo@eocel.com

You have the right to lodge a complaint with a supervisory authority if you believe we have not adequately addressed your privacy concerns.