Privacy Policy

Last updated: 1 October 2026

Branded Greaseproof is operated by EPS Elite Packaging Solutions Ltd. This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, create an account, request a quotation, place an order, upload or send artwork, communicate with us, or otherwise use our services.

For the purposes of UK data protection law, EPS Elite Packaging Solutions Ltd is the data controller for the personal information described in this policy, except where another organisation acts as an independent controller for its own purposes.

1. How to Contact Us

If you have any questions about this Privacy Policy, how we use your personal information, or if you wish to exercise your data protection rights, you can contact us using the following details:

2. Personal Information We Collect

The information we collect depends on how you interact with us. It may include:

  • Identity and contact information, such as your name, business name, billing address, delivery address, email address and telephone number.
  • Order and transaction information, including products ordered, quantities, specifications, delivery details, order history, invoices, refunds and payment status.
  • Account information, including information associated with a customer account and your account preferences.
  • Artwork and proof information, including logos, artwork files, design briefs, proofs, comments, approval records and related communications.
  • Payment information. Payments are processed through payment service providers. We may receive transaction details and payment confirmation, but we do not normally receive or store your full payment card details.
  • Communications, including emails, enquiry forms, telephone enquiries, quotation requests, customer-service messages and other correspondence.
  • Website and device information, including IP address, browser type, device information, website activity, pages viewed and information collected through cookies or similar technologies.
  • Marketing preferences, including whether you have agreed to receive marketing communications and any opt-out preferences.

3. How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order, create an account, request a quotation, upload artwork, contact us or otherwise provide information to us;
  • automatically when you use our website, including through cookies and similar technologies;
  • from Shopify and other service providers that support our website, payments, order management, fulfilment, delivery, analytics or customer service;
  • from a business or organisation you work for where they provide your details as a contact for an order, quotation or account; and
  • from other third parties where this is lawful and relevant to our business relationship with you.

4. How We Use Your Personal Information and Our Lawful Bases

We only use personal information where we have a lawful basis to do so. Depending on the circumstances, we may rely on the following lawful bases:

Contract

We use personal information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes processing orders, taking payment, managing artwork and proofs, arranging production, providing customer support and organising delivery.

Legal Obligation

We use personal information where necessary to comply with legal, tax, accounting, regulatory or other statutory obligations.

Legitimate Interests

We may use personal information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include managing customer relationships, improving our services, preventing fraud, protecting our website and systems, handling business enquiries, maintaining business records and understanding how our website is used.

Consent

Where required, we rely on your consent for activities such as certain marketing communications and the use of non-essential cookies or similar technologies. You can withdraw consent at any time.

5. Orders, Artwork and Proof Approval

When you place a custom-print order, we may process artwork files, logos, design instructions and proof-approval information in order to prepare, manufacture and administer your order.

We may also retain relevant artwork and order records where reasonably necessary for customer service, dispute resolution, repeat orders, legal obligations and normal business administration.

Please avoid including unnecessary personal or sensitive information in artwork files or design briefs.

6. Payments

Payments made through our website are handled by Shopify and/or other payment providers made available at checkout. These providers process payment information in accordance with their own privacy and security practices.

We generally receive information confirming whether a payment was successful, along with transaction information needed to administer your order.

7. Who We Share Personal Information With

We may share personal information where necessary with trusted third parties, including:

  • Shopify, which provides the ecommerce platform used to operate our website and online store;
  • payment providers used to process transactions;
  • manufacturing, printing and fulfilment partners where information is necessary to produce or fulfil your order;
  • couriers, freight providers and delivery partners for the purpose of delivering your order;
  • IT, hosting, cloud storage, software and customer-service providers that support our business operations;
  • analytics and marketing providers, where permitted and subject to applicable consent requirements;
  • professional advisers, including accountants, lawyers, insurers and other advisers where necessary; and
  • regulators, courts, law-enforcement bodies or public authorities where disclosure is required or permitted by law.

We only provide third parties with the information reasonably necessary for the relevant purpose.

8. Shopify

Our online store is powered by Shopify. Shopify processes personal information in order to provide ecommerce, account, checkout, fraud-prevention and related services.

Shopify may also process certain information for its own purposes as described in its privacy information. You can find out more at Shopify's Privacy Policy.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the website, remember preferences, support checkout and account functionality, understand website performance and, where enabled, support analytics or marketing.

Strictly necessary cookies may be used without consent where permitted by law because they are required for the website or service to function. Where consent is required for non-essential cookies or similar technologies, we will request that consent through our cookie or privacy controls before using them.

You can use the available cookie settings on our website to manage your preferences where those controls are provided.

10. Marketing Communications

We may send marketing communications where permitted by UK data protection law and the Privacy and Electronic Communications Regulations.

Where consent is required, we will ask for it. In circumstances where the law allows us to rely on an existing-customer marketing exception or another permitted basis, we will only do so where the relevant conditions are met.

You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. Opting out of marketing will not prevent us from sending necessary service communications relating to an order, account, quotation or customer-service matter.

11. International Transfers

Some of our service providers, including ecommerce, technology and cloud-service providers, may process personal information outside the United Kingdom.

Where a restricted international transfer takes place, we will rely on an appropriate lawful transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses.

12. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, maintain customer relationships, handle disputes and comply with legal, accounting and tax obligations.

Order, invoice and accounting records may normally be retained for up to six years or longer where required by law or where an ongoing legal or regulatory matter requires continued retention.

Artwork, proofs and related order records may be retained for a reasonable period to support customer service, reorders, quality control and the handling of any dispute. We periodically review the information we hold and delete or anonymise it when it is no longer needed.

Marketing information is retained until you opt out or until we determine it is no longer appropriate to retain it, subject to retaining minimal suppression information where necessary to respect your opt-out request.

13. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No online system can be guaranteed to be completely secure, so please take reasonable care when sending information to us and avoid sending unnecessary sensitive information.

14. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including:

  • the right to request access to the personal information we hold about you;
  • the right to ask us to correct inaccurate or incomplete information;
  • the right to request deletion of your personal information in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing, including direct marketing;
  • the right to receive certain personal information in a portable format where applicable; and
  • the right to withdraw consent where we rely on consent.

These rights are not absolute and may be subject to legal exemptions. We may need to verify your identity before responding to a request.

To exercise your rights, contact us at brandedgreaseproof@epselite.com.

15. Complaints

If you are concerned about how we use your personal information, please contact us first so we can investigate the issue.

You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK's data protection regulator. More information is available at ico.org.uk.

16. Children's Privacy

Our products and services are intended for businesses and adult customers. We do not knowingly collect personal information from children for the purpose of selling our products or services.

17. Third-Party Links

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices of those third parties, and you should review their own privacy information before providing personal information to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, technology, service providers or legal requirements.

When we make changes, we will publish the updated policy on this page and update the date shown at the top.