Epicor Software Corporation ("Epicor" and “we”) provides this Privacy Policy ("Privacy Policy") to help our web site visitors located within the People’s Republic of China (“PRC”) understand how we collect, use and disclose data, including Personal Information (as defined below) relating to individuals within the scope of the Personal Information Protection Law (“PIPL”) in force on and from 1 November 2021.
We collect Personal Information about individuals located within the PRC in a variety of ways through our normal business activities, both online and offline. This includes, for example, when you and your organization place orders or purchase products or services, enter into agreements or communicate with us, visit with us at conferences or trade shows, visit and use versions of www.epicor.com that have been created for visitors from the PRC and that link to it (together, the “Site”), or communicate with us electronically such as by sending and receiving email. The Personal Information we receive from customers pursuant to agreements and Personal Information relating to employees is not subject to this Privacy Policy.
This Privacy Policy explains Epicor's information practices including:
"Personal Information" means all kinds of information, recorded by electronic or other means, related to identified or identifiable natural persons, not including information after anonymization handling. (Article 4 PIPL).
We process this Personal Data with your consent, to perform or enter into contracts with you, in conformance with our legitimate business interests (maintaining our books and records, maintaining the security and integrity of this Site and our systems, enforcing the terms and conditions and Privacy Policy associated with this Site and our systems, monitoring the use and performance of this Site and our systems, quality assurance of our customer service operations, and product improvement and development) where your interest do not outweigh our interests, and to comply with legal obligations.
This Privacy Policy does not apply to the products and services sold by Epicor.
Strictly necessary cookies are necessary to provide the Website to you. We use such cookies without your prior consent.
Epicor collects and uses Personal Data from you in several ways and for the purposes listed below. We only use your Personal Data as described below:
Directly from You through Site Forms. We receive the Personal Data you submit to us (e.g., name, address, telephone number, email address, and location) so we can complete a requested transaction and respond to your requests.
The processing of your Personal Data for these purposes is based on necessity for the performance of a contract with you. We retain the information as described below in this Privacy Policy.
Improve our Products and Services. When you provide us with feedback and other information through the Site about our products and services, we use it for developing, enhancing, and improving our products and services.
The processing of your Personal Data for these purposes is based on our legitimate interests. We retain the information as described below in this Privacy Policy.
Information about Site Usage and Electronic Message We Send. Epicor and engaged third party service providers uses “cookies,” web beacons, server logs and related technology to collect information about how visitors interact with the Site and messages we send to individuals (e.g., which pages visitors view or emails individuals open, which URL of the website used before visiting the Site), Site usage preferences (e.g., language), and the technical characteristics of their Internet browsers and connection (e.g., IP Address, browser type, device identifiers, operating system version). We use this information to improve how the Site functions, improve the content we send to you, and provide you with personalized content and advertising on the Site, on other websites and online services and in electronic messages, as further described in the Epicor Cookie Policy. For example, we use your IP Address to identify the country from which you are accessing the Site so we can provide you with the version of the Site that is intended for that country. We also use cookies to store information necessary for visitors logging into certain portions of the Site and to remember visitors and their preferences. We currently use Google Analytics to collect and process certain website usage data. To learn more about Google Analytics and how to opt out, please visit www.google.com/policies/privacy/partners/.
You can learn how to decline or opt-out of cookies by reading the Epicor Cookie Policy.
The processing of your Personal Data for this purpose is based on your consent or necessity to provide the Site to you. We retain the information as described below in this Privacy Policy.
Commerce and Product Support. You may be asked to share Personal Data such as your name, address, telephone number, and email address when you make purchases, seek customer or technical support or otherwise interact with Epicor through the Site. When you buy directly from Epicor, Epicor and its vendors and suppliers who facilitate the purchase and delivery of products and services use this Personal Data to complete the transaction. Epicor shares Personal Data with its vendors and suppliers to complete transactions. Epicor has agreements in place with its vendors and suppliers to limit their use of the Personal Data to completing the transaction and performing services for Epicor. You may also interact directly with and provide Personal Data directly to Epicor’s vendors and suppliers when you purchase Epicor products and services or seek customer or technical support. In these circumstances, the vendors and suppliers collect and use your Personal Data subject to their privacy policies and will share Personal Data with us to complete the transaction.
The processing of your Personal Data for these purposes is based on the necessity for the performance of a contract with you. We retain the information as described below in this Privacy Policy.
Product Registration. Epicor allows customers to register products online or through similar ways. We request Personal Data, such as your name, address, email, and telephone number. Epicor receives this Personal Data and other product-related information in such submissions, and Epicor will use it to complete the registration.
The processing of your Personal Data for these purposes is based on the necessity for the performance of a contract with you. We retain the information as described below in this Privacy Policy.
Marketing and Other Informational Updates. With your consent and as otherwise permitted by law, we also use Personal Data (including address, telephone number, and e-mail address) and other information we receive from and about you from public sources (e.g., LinkedIn) to contact you with information from Epicor and its Affiliates /partners about their products and services, provide special offers and promotions that may be of interest to you, and notify you periodically about important changes to the Site (such as a material change to this Privacy Policy or notice of a security breach). You may withdraw your consent at any time by unsubscribing from such marketing communications or object to marketing measures at any time. Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal. In addition, withdrawing consent from marketing communications does not affect our ability to send you other communications, such as those related to providing services to you or responding to your requests.
You may opt out from receiving marketing-related communications by either clicking on the unsubscribe link at the bottom of marketing-related emails we send you or by clicking here. We will process opt-out requests without undue delay.
The processing of your Personal Data for this purpose is based on your consent or on our legitimate interests. We retain the information as described below in this Privacy Policy.
Online and Offline Promotions, Contests and Sweepstakes. You may be asked to provide an email address or screen name, or other Personal Data, for entry into a particular promotion, including sweepstakes and contests so that we can let you know if you won a prize. The specific rules and regulations governing the particular promotion, contest or sweepstakes will vary and your participation constitutes your agreement to abide by those rules and regulations. Certain promotions, contests or sweepstakes may be run by an Epicor service provider or vendor or co-branded with one of our partners. In these instances, the collection of your Personal Data may occur directly by the service provider or vendor or a third-party partner on their website. The promotion will state the privacy policy or policies governing the collection of such information if they should differ from this Privacy Policy.
The processing of your Personal Data for this purpose is based on your consent or on our legitimate interests. We retain the information as described below in this Privacy Policy.
In some circumstances, we may psuedonymise and/or anonymise your Personal Data for business purposes including to improve our products and services, in which case we may use such information without further notice to you. The processing of your Personal Data for this purpose is based on our legitimate interests. We retain the information as described below in this Privacy Policy.
As previously stated in this Privacy Policy, Epicor may share Personal Data within Epicor (including our worldwide affiliates and other members of the Epicor Group) to fulfill its obligations to you and operate its business consistent with this Privacy Policy and applicable data protection law. In addition to what is already stated in this Privacy Policy, we will also share your Personal Data with third parties in the following situations and for the following purposes:
Epicor maintains appropriate organizational and technical measures for the protection of the security, confidentiality, and integrity of Personal Data from unauthorised or unlawful access, accidental loss, destruction, damage, misuse, disclosure and alteration. Unfortunately, no data transmission over the Internet can be guaranteed to be secure, therefore, we cannot ensure the security of any information you send to us and you do so at your own risk. If Epicor learns of a security system's breach, we will comply with all applicable law to notify you about the breach so that you can take appropriate protective steps. Epicor may post a notice on the Site if a security breach occurs. If this happens, you will need a web browser or mobile device enabling you to view the Site. Epicor may also send an email to you at the email address you have provided to us in these circumstances or communicate with you by other means if we can. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
While we take various steps to ensure the accuracy and completeness of your Personal Data, we rely upon you to provide accurate and complete Personal Data when interacting with us. All persons in the scope of the General Data Protection Regulation whose Personal Data is being processed by Epicor have the legal right to request: (i) access, (ii) rectification (iii) erasure, (iv) restriction of processing, (v) object to processing, and/or (vi) data portability of their Personal Data. Any such requests should be submitted using the Individual Rights Request Form applicable to China.
You also have the right to lodge a complaint with an EU supervisory authority. However, if you have a complaint regarding the processing of your Personal Data we kindly request that you first contact us directly as indicated in the Contacting Epicor section of this Privacy Policy, and we will reply promptly.
We consider several factors to determine how long we keep Personal Data. We consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. Once we no longer have a need for your Personal Data, we will securely destroy it in accordance with our standards and applicable laws and regulations.
The Site may contain links to third-party websites, however, please be aware that Epicor is not responsible for and does not control the privacy practices of these other websites. We encourage you to read the privacy policies for these other websites, as they may differ from ours. The Site also contains links to co-branded websites that may display Epicor's logo and trademarks but which are maintained by third parties. Such websites may be identified by the fact that they do not display an "Epicor.com" URL. Please read the privacy policy on the co-branded website for the applicable privacy practices relating to personal information collected via that website, as it may differ from this Privacy Policy.
Because Epicor operates globally, we will transfer your Personal Information within our global operations (including to the United States of America) to fulfill our obligations to you, subject to the limitations of applicable data protection law and this Privacy Policy. Privacy laws differ across the globe. To help visitors whose native language may not be English understand our privacy practices, we may provide special information on our Privacy Policies that may be applicable to these visitors in different languages. Epicor entities outside the European Economic Area may also have supplemental privacy policies that may apply in those countries.
You understand that when Personal Information is collected through the Site, we will transfer it within Epicor to the United States and other locations around the world. The United States and other jurisdictions may not provide data protection or privacy laws equivalent to the laws of the PRC and/or your country, however, we put appropriate measures in place to protect your Personal Information, such as Standard Contractual Clauses (SCC) (to the standard approved of by the European Commission until such time as the Cybersecurity Administration of China (CAC) formulates and approves its own SCCs for use throughout the PRC). You may contact us at the address below to request a copy of the safeguards we have in place in and across the PRC.
When Epicor receives formal written inquiries or complaints, Epicor will contact the individual regarding his/her concerns. We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the handling of Personal Data that cannot be resolved between Epicor and an individual.
We encourage you to periodically review this Privacy Policy. If we change our privacy practices, an updated version of this Privacy Policy will reflect those changes. Without prejudice to your rights under applicable law, we reserve the right to update and amend this Privacy Policy without prior notice to reflect technological advancements, legal and regulatory changes and good business practices to the extent that it does not change the privacy practices as set out in this Privacy Policy. If you do not agree to the changes to this Privacy Policy, you should request deletion of your Personal Data by submitting a request using the Individual Rights Request Form applicable to China.
The Personal Information Handler for the Site is the organization listed below. If you have any questions, comments, or concerns about this Privacy Policy, please write to us at:
| Affiliate located in the People's Republic of China | US Parent Entity |
|
Epicor Software (Shanghai) Co. Ltd. |
Epicor Software Corporation |
You may also contact our Data Privacy Officer by post at:
Epicor Software Corporation
Attention: Data Privacy Officer
6 Arlington Square West
Bracknell
Bracknell RG12 1PU
United Kingdom