I’m Mohamed Sahal Ameen, Lead Developer and Cybersecurity Lead at Epoch Batteries: I build epochbatteries.com and look after its security. This post explains how the site protects the information you share with us, and how to reach me if you find a security problem on our website or online store.
Your payment details are handled by Shopify
When you check out, your cart is handed to Shopify’s secure checkout. Your card number and other payment details are entered there and processed by Shopify and its payment partners; they are never sent to or stored on our own website’s servers. Shopify is certified Level 1 PCI DSS compliant, the highest level of the payment card industry’s security standard.
Every connection is encrypted
Our website is served only over HTTPS, so what you send and receive is encrypted in transit. A request made over plain HTTP is redirected to HTTPS, and the site tells your browser, through HTTP Strict Transport Security (HSTS), to use only an encrypted connection to it for the next two years.
Our forms are checked for abuse
Our contact, support, dealer and other forms are protected by Google reCAPTCHA v3. Each submission’s reCAPTCHA check is verified on our server before the form is accepted, which keeps automated spam and abuse out of our inboxes.
Messages that claim to be from us
If you receive an email, text or call that claims to be from Epoch Batteries and asks for a password or your full card number, don’t reply and don’t click its links. Forward it to developer@epochbatteries.com so we can look into it.
How to report a security vulnerability
If you believe you’ve found a security vulnerability in epochbatteries.com or our online store, please email developer@epochbatteries.com. Reports go to me directly. A helpful report includes:
- the page or URL affected;
- what the issue is, and what someone could do with it;
- the steps to reproduce it, with screenshots or a short video if they help;
- how we can reach you with follow-up questions.
While you investigate, please:
- test only with accounts and data that belong to you, and never access, change or delete another customer’s information;
- don’t run denial-of-service, spam or social-engineering tests against our website, staff, customers or dealers;
- give us reasonable time to fix the issue before sharing its details publicly.
We appreciate responsible reports and will work with you to understand and fix the issue.
Contact
- Security reports and questions: developer@epochbatteries.com
- Mohamed Sahal Ameen on LinkedIn
For orders, warranty claims and product questions, please use our support page instead, so your request reaches the right team.