Privacy Policy

A. Introduction

This privacy policy explains how we collect, hold, use and disclose personal information, and the purposes for which it is processed.

This policy applies to all personal information processed by us in the course of providing our services, including through our website, mobile applications and our online presence, including social media profiles (collectively referred to as the online offering).

The terms used are intended to be gender-neutral.

B. Responsibility and Contact Details

Last updated: January 2026

B.1. Organisation Responsible for Personal Information

Forkline Trucks GmbH
(operating as EP Store)

Graf-Adolf-Platz 12
40213 Düsseldorf
Germany

HRB 106945
Managing Director: Bennit Schmieder

Telephone: +61 (0) 800 000 000
Email: [email protected]

B.2. Privacy Contact

For all privacy-related enquiries, requests or complaints:

Email: [email protected]

C. Overview of Personal Information Processing

This section summarises the categories of personal information processed, the purposes of processing and the affected individuals. Further details are provided in Section F.

C.1. Types of Personal Information Collected

• Identification information
• Payment information
• Location data
• Contact details
• Content and communication data
• Contractual information
• Usage and interaction data
• Metadata and technical data
• Photographic and video recordings
• Social media contact and interaction data
• Event and promotion participation data

C.2. Categories of Individuals

• Customers
• Employees
• Prospective customers
• Business and contractual partners
• Website and platform users
• Competition and promotion participants
• Individuals appearing in content

C.3. Purposes of Processing

• Providing products and services
• Customer support and enquiries
• Website operation and security
• Marketing and advertising
• Analytics and performance measurement
• Personalisation and user profiling
• Competition and promotion management
• Fraud prevention and credit assessment
• IT systems and infrastructure management

C.4. Legal Basis for Processing (Australia)

We process personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Processing is carried out where:

• You have consented (APP 3, APP 6)
• Processing is necessary to provide products or services requested by you
• Processing is required or authorised by Australian law
• Processing is necessary for our legitimate business activities, where permitted by law

D. Disclosure of Personal Information

To operate our website and services, personal information may be disclosed to:

• Dealers registered on our platform
• Manufacturers of ordered products
• Analytics and marketing service providers
• Providers of embedded website features
• IT service and infrastructure providers

Disclosures occur only where necessary to provide our services or where you have consented.

Overseas Disclosure

Some service providers process personal information outside Australia, including in the United States.

Where personal information is disclosed overseas, we take reasonable steps to ensure that recipients handle the information in a manner consistent with the Australian Privacy Principles, including through contractual safeguards.

E. Cookies

E.1. Purpose

We use cookies to ensure website functionality, improve performance and, with your consent, for analytics and marketing purposes.

Cookies may store information such as:

• Cookie preferences
• Shopping cart data
• Session identifiers
• Login status and user settings

We do not use analytics or marketing cookies without your consent.

E.2. Legal Basis

• Essential cookies: Necessary for website operation
• Analytics and marketing cookies: Used only with your consent

E.3. Retention

• Session cookies are deleted when you close your browser
• Persistent cookies may remain for up to two years

E.4. Withdrawal of Consent

You may withdraw consent at any time through cookie settings or browser controls.

E.5. Cookie Consent Management

We use a consent management tool to record and manage cookie preferences and demonstrate compliance.

F. Specific Processing Activities

F.1. Website Operation and Log Files

Information collected:
IP address, access times, pages visited, browser and device information, referring URLs.

Purpose:
Website functionality, security, troubleshooting and performance optimisation.

Retention:
Session data is deleted after use; log files are retained for up to 7 days.

F.2. Intermediation Services

Orders placed via our website are fulfilled by independent dealers. We act as an intermediary only.

Information processed:
Contact details, order information, payment-related data, usage data.

Purpose:
Order facilitation, customer support and administration.

Disclosure:
Relevant information is shared with the dealer fulfilling your order and related logistics partners.

Retention:
Generally up to 10 years where required for tax or legal purposes.

F.3. Payment Processing

Payments are processed by third-party payment service providers.

We do not store full payment credentials.

Retention:
Up to 14 months, unless otherwise required by law.

F.4. User Accounts

Users may create an account or purchase without registering.

Purpose:
Account management, security, personalised services.

Retention:
Up to 24 months after last activity.

F.5. Enquiries and Contact Forms

Information collected:
Name, contact details, enquiry content, technical metadata.

Purpose:
Responding to enquiries, customer support and administration.

Retention:
Up to 24 months.

F.6. Marketing Communications

We send marketing communications only with your consent or where permitted by law.

You may unsubscribe at any time using the links provided or by contacting us.

Retention:
Up to 24 months after last interaction.

F.7. Analytics and Advertising Tools

We use analytics and advertising tools (including Google, HubSpot and Meta) only with your consent.

These tools may collect usage data, device information and interaction metrics.

Data may be processed overseas, including in the United States, subject to contractual safeguards.

Retention:
Generally up to 24 months.

F.8. Embedded Services

We embed third-party services such as YouTube, WhatsApp, live chat and CAPTCHA tools.

Data is transferred only when you actively use these features and where consent is required.

F.9. IT Services and Hosting

Our website and systems are hosted by third-party providers, including HubSpot.

These providers act under contractual obligations to protect personal information.

G. Data Retention and Deletion

Personal information is retained only as long as necessary for its purpose or as required by law.

Where information is no longer required, it is securely deleted or de-identified.

H. Security Measures

We implement appropriate technical and organisational measures to protect personal information, including:

• Access controls
• Encryption
• Network security measures
• Regular system monitoring

H.1. IP Address Masking

Where possible, IP addresses are anonymised or pseudonymised.

H.2. Secure Transmission

We use TLS encryption for data transmitted via our website.

I. Your Rights

Under Australian privacy law, you have the right to:

• Access personal information we hold about you
• Request correction of inaccurate or outdated information
• Withdraw consent where processing is based on consent
• Make a privacy complaint

Requests can be made by contacting us using the details in Section B.

J. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: https://www.oaic.gov.au

K. Changes to This Privacy Policy

We may update this privacy policy from time to time.
Where changes are significant, we will notify you or seek new consent where required.fy their accuracy before contacting us.