Privacy policy

PRIVACY POLICY

Last Updated: February 2026 Effective From: February 2026

This policy explains how EPIC-KICK LTD collects, uses, stores, and protects your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or placing an order, you acknowledge that you have read and understood how we collect, use, and disclose your information as described in this Privacy Policy.

1. DATA CONTROLLER

The data controller responsible for your personal data is:

Legal Name: EPIC-KICK LTD Company Number: 16259824 VAT Number: 509 0257 08 Registered Address: Suite 407 Park House, 10 Park Street, Bristol, BS1 5HX, United Kingdom Email: support@epickick.co.uk For any questions about how we handle your data, or to exercise your rights under UK GDPR, please contact us using the details above.

1. WHAT PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data depending on how you interact with our website and services:

When You Place an Order: Full name, email address, phone number, billing address, shipping address, payment information (processed securely by our payment providers — we do not store your full card details), order history, and any communication related to your order.

When You Create an Account: Name, email address, password (encrypted), and any preferences you set within your account.

When You Subscribe to Our Newsletter: Email address and, where provided, your name. You can unsubscribe at any time using the link in every email.

When You Contact Us: Name, email address, phone number, and any information you provide in your message, including order numbers and details of your enquiry.

When You Browse Our Website: IP address, browser type and version, operating system, device type, pages visited, time spent on pages, referring URLs, and cookie data. See Section 7 (Cookies) for details.

1. LAWFUL BASES FOR PROCESSING

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Contract: To process and fulfil your orders, manage your account, handle returns and refunds, and provide customer support related to your purchases.

Legitimate Interest: To improve our website and services, prevent fraud, ensure security, analyse website usage patterns, and personalise your experience. We always balance our interests against your rights.

Consent: To send marketing emails and newsletters. You can withdraw consent at any time by clicking the unsubscribe link in any email or contacting us directly.

Legal Obligation: To comply with tax, accounting, and regulatory requirements, including maintaining transaction records as required by HMRC.

1. HOW WE USE YOUR DATA

We use your personal data for the following purposes: processing and fulfilling orders, sending order confirmations and dispatch notifications with tracking information, managing returns, exchanges, and refunds, responding to customer enquiries and support requests, sending marketing communications where you have opted in, improving our website functionality and user experience, preventing fraud and maintaining website security, and complying with legal and regulatory obligations.

We will never sell, rent, or trade your personal data to third parties for their marketing purposes.

1. MARKETING COMMUNICATIONS

We may send you marketing communications about our products and services if you have consented to receive them or if you have previously purchased from us and have not opted out (soft opt-in under the Privacy and Electronic Communications Regulations 2003).

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, contacting us at support@epickick.co.uk, or updating your account preferences.

Even if you opt out of marketing, we may still send you non-promotional communications such as order confirmations, dispatch notifications, and delivery updates.

1. THIRD-PARTY SERVICE PROVIDERS

We share your personal data with trusted third-party service providers who process data on our behalf to operate our business. These providers are contractually obligated to handle your data securely and only for the purposes we specify.

Shopify — E-commerce platform, hosting, order management, and payment processing. Privacy policy: https://www.shopify.com/legal/privacy

Shopify Payments (powered by Stripe) — Credit/debit card payment processing. Privacy policy: https://www.shopify.com/legal/privacy

PayPal — Alternative payment processing. Privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

Klarna — Buy Now, Pay Later payment services. Privacy policy: https://www.klarna.com/uk/privacy/

Royal Mail / Courier Partners — Order delivery and shipment tracking. Privacy policy: https://www.royalmail.com/privacy-notice

Google Analytics — Website analytics and usage tracking. Privacy policy: https://policies.google.com/privacy

Google Ads — Advertising, remarketing, and conversion tracking. Privacy policy: https://policies.google.com/privacy

Meta (Facebook / Instagram) — Advertising, remarketing, and social media tracking. Privacy policy: https://www.facebook.com/privacy/policy/

Some of these providers may transfer data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the ICO, to protect your data in accordance with UK GDPR.

We do not sell your personal information to third parties.

1. COOKIES

Our website uses cookies — small text files stored on your device — to provide and improve our services. We use the following types of cookies:

Essential Cookies: Required for the website to function, including shopping cart, checkout, and session management. Duration: Session / up to 2 weeks.

Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics). Data is anonymised where possible. Duration: Up to 2 years.

Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (e.g., Google Ads, Meta Pixel). Duration: Up to 2 years.

Functional Cookies: Remember your preferences such as language, currency, and recently viewed products. Duration: Up to 1 year.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of our website, including the ability to add items to your cart and complete checkout.

1. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Order and transaction data: 6 years from the date of the transaction, as required by HMRC for tax and accounting purposes.

Account data: Retained for as long as your account is active. You can request account deletion at any time.

Marketing and newsletter data: Retained until you unsubscribe or request deletion.

Customer support correspondence: 2 years from the date of the last communication, unless related to an ongoing dispute or legal matter.

Cookie and analytics data: See Section 7 (Cookies) for retention periods specific to each cookie type.

1. DATA SECURITY

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

These measures include SSL/TLS encryption across our entire website, PCI-compliant payment processing through Shopify Payments, access controls limiting data access to authorised personnel only, and regular reviews of our data handling practices.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We encourage you to keep your account credentials confidential and contact us immediately if you suspect unauthorised access to your account.

1. YOUR RIGHTS UNDER UK GDPR

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).

Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.

Right to Erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions (e.g., data required for tax records).

Right to Restrict Processing: You have the right to request that we limit how we use your data in certain circumstances.

Right to Data Portability: You have the right to request your personal data in a structured, commonly used, machine-readable format for transfer to another service.

Right to Object: You have the right to object to processing based on legitimate interest or for direct marketing purposes. Where you object to marketing, we will stop processing immediately.

Right to Withdraw Consent: Where we rely on your consent to process data (e.g., marketing emails), you can withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@epickick.co.uk. We will respond to your request within one calendar month, as required by UK GDPR. There is no charge for most requests, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

1. CHILDREN'S PRIVACY

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@epickick.co.uk and we will take steps to delete that information.

1. INTERNATIONAL DATA TRANSFERS

Some of our third-party service providers (such as Shopify, Google, and Meta) operate outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR.

These safeguards include transfers to countries recognised by the UK government as providing an adequate level of data protection, or the use of Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO).

1. THIRD-PARTY LINKS

Our website may contain links to third-party websites, services, or applications (such as Klarna, PayPal, or social media platforms). These links are provided for your convenience only. We do not control and are not responsible for the content, privacy policies, or practices of any third-party sites.

Your use of third-party services is subject to their own terms and conditions. We encourage you to review the terms and privacy policies of any third-party service before providing personal information or completing a transaction.

1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Where changes are significant, we may notify you by email or through a notice on our website.

1. COMPLAINTS

If you are unhappy with how we have handled your personal data, we encourage you to contact us first so we can try to resolve your concern:

Email: support@epickick.co.uk 

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection:

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: https://ico.org.uk

INDEPENDENT RETAILER DISCLOSURE

EPIC-KICK LTD is an independent retailer. We are not affiliated with, authorised by, endorsed by, or officially connected to any of the brands listed on this website. All brand names and trademarks are the property of their respective owners and are used solely for product identification purposes.

CONTACT US

Email: support@epickick.co.uk  Hours: Monday–Friday, 9am–5pm GMT

EPIC-KICK LTD Company Number: 16259824 VAT Number: 509 0257 08 Suite 407 Park House, 10 Park Street, Bristol, BS1 5HX, United Kingdom Companies House: https://find-and-update.company-information.service.gov.uk/company/16259824