Your Cart


EpicEnterprise Limited T/A EpicZen (“We”) is committed to protecting and respectingyour privacy and safeguarding your data and individual-level information in asecure, respectful and trustworthy manner.

Thisnotice sets out how we will process any personal data we collect from you, orthat you provide to us. Please read the following carefully to understand ourviews, practices and processes regarding your personal data and how we willtreat this information.

Forthe Data Protection Act, the data controller is Epic Enterprise Limited T/AEpicZen of 1a Camden Walk, London, N1 8DY.

EpicZenis committed to, and fully compliant with all our statutory and legislativeregulations (and our supporting in-house best practice guidelines) to ensurethe security and confidentiality of the data relating to that of our customers,our staff and all associated third parties. Our processes and systems, bothcomputer-based and paper-based, adhere to the standards set by the DataProtection Act.

Weensure that our company servers, personal computers (PCs), laptops and companymobile devices are suitably secure for our work with our customers andsuppliers.

Wehave rigorous systems and safeguards in place which we underpin with in-housetraining and regular auditing of our IT systems to ensure that all sensitivecommercial data and individual level information is shared only on aneed-to-know basis, and to ensure that cyber threats are managed, mitigated,and eliminated.

EpicZenhas proactively sought external guidance to ascertain how we as a business canimplement the stipulations of the General Data Protection Regulation (GDPR) toserve our customers best.

Weare further developing our GDPR policy that we will be seeking feedback on toinform users how we manage their data. We are also honing and refining ourcomprehensive set of internal policies and guidance for how we as a businesscan maximise the opportunities offered by GDPR legislation.


· Customer’s first and last name & email address for EpicZen’s pointreward system & EpicZen’s marketing purposes.

· Customer’s first, last name, email address, postal address, phone number for the Hair Analysis Service and online shop orders.

· Customer’s first name, last name, email address and telephonenumber, for out of stock product orders or/and requested products or services,by the customer.


We will use your personal and non-personal information only for thepurposes for which it was collected or agreed with you, for example:Tocarry out our obligations arising from any agreement entered into between youand us; To notify you about changes to our service; For the detection and prevention of fraud, crime, or other malpractice; To conduct market or customer satisfaction research or for statisticalanalysis; For audit and record keeping purposes; In connection with legal proceedings; We will also use your personal information to comply with legal and regulatoryrequirements or industry codes to which we subscribe or which apply to us, orwhen it is otherwise allowed by law; Collect information about the device you are using to view the EpicZen’swebsite, such as your IP address or the type of internet browser or operatingsystem you are using; To respond to your queries or comments. Depending on the nature of our relationship with you, we may collect differentinformation and these differences are outlined below.


We collect and process your personal information mainly toprovide you with access to our services and products, to help us improve ourofferings to you and for specific other purposes explained below. Wedo not knowingly set out to collect personal data, and it is only provided tous by you by contacting us via our website (“our website”) orby phone or by email. Once collected, this data is only used to deliver theservice and to respond to you, answer any questions you have. . Wedo not collect sensitive data – financial or information about children. Thisdoes, however, include name, phone number, email etc. . Wereceive and process the following information relating to our customers:. We will collect information relevant to our legalobligations as an employer or as a contracted party for drivers and may includeyour name, phone number and email, also, to address, bank account details, andinformation relating to criminal convictions and other information as part ofour screening and vetting processes.


We will collect information relevant to our status as a customer ofyours and may include your name, phone number and email, also, to address, andinformation relating to the services and products you provide us.


We need to know your data to reply to you and provide you with services.We will not collect any personal data from you which we do not need to produceand oversee this service to you. The lawful basis for processing dataidentified by EpicZen includes:

Legal obligations (forexample, as an employer or as part of commitments with regards to HMRC);

Performance of a contract (especially with regards to our customers and oursuppliers);

Legitimate interest (such as when we ask for your feedback or advice on how tocontinually improve);

Consent (only used when sensitive information is required to be processed byus).


The limited personal data we process is only processed in the UK. Ourhosting is exclusively done in the UK. Third parties will have access to yourpersonal data only when they are under contract and following the signature ofa non-disclosure agreement and just in line with the services these thirdparties are contracted to do so for EpicZen to function as a business.

Thesethird parties include: Data subject.



Datawill be disclosed to the designated driver on a fare by fare basis so as theycan complete the service requested;

Auditors, consultants and specialist service providers to ensure EpicZenoperate legally and safely. These include hosting, and IT services providers,critical to the infrastructure of our website;

EpicZen personnel so as they can assist with the delivery of the servicerequested or to respond to any contact from customers;

We may disclose your personal information to any member of our group, whichmeans our subsidiaries, our ultimate holding company and its subsidiaries, asdefined in section 1159 of the UK Companies Act 2006 (only where this relatesto the services purchased from EpicZen and on an exceptional basis);


Auditors,consultants and specialist service providers to ensure EpicZen operate legallyand safely. These include hosting, and IT services providers, critical to theinfrastructure of our website;

EpicZen personnel and drivers so as they can assist with the delivery of theservice requested or to respond to any contact with customers;

We may disclose your personal information to any member of our group, whichmeans our subsidiaries, our ultimate holding company and its subsidiaries, asdefined in section 1159 of the UK Companies Act 2006 (only where this relatesto the services provided to EpicZen and on an exceptional basis);

Police and other regulatory authorities (upon receipt of an appropriate andlegitimate request).

Ifthere is a duty to disclose or share your personal data in order to comply withany legal obligation, or to enforce or apply our terms and conditions of supplyand/or any other agreements; or to protect the rights, property, or safety ofEpic Enterprise Limited, EpicZen, our customers, or others. This includesexchanging information with other companies and organisations for fraudprotection and credit risk reduction.


Service user personal data will be retained for no more than three years following each use of our service unless you exercise your rights highlighted below.

Of course, we will look to retain records for no longer than is necessary.

What we would also like to do with it:

We do not collect personal data for marketing purposes.

Wepublish articles from time to time and only post these on our website and/or on social media sites to assist and generate interest in our business.

We will not record any personal data that may be used by cookies for this website to interact with you.


You have the right to the following:  

Right to access – you have the right to request a copy of all data we hold about you;

Right to rectification – where any data we hold is incorrect, you have the right to ensure it is correct;

Right to be forgotten – if you no longer wish for us to keep your data, we will delete it;

Right to portability – you can ask us to provide your data to a third party in machine-readable format;

Right to restrict processing – since we only use this to contact you, there is no processing to limit, we would delete the information wherever possible and in keeping with our obligations.

If at any point you believe the information we process on you is incorrect, you may request to see this information and even have it corrected or deleted. If you wish to raise a complaint about how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter.

If you are not satisfied with our response or believe we are processing your personal data not following the law you can complain to the Information Commissioner’s Office.

Our Data Protection Officer is Ivo Aulik, and you can contact himat, 02072269930 or by post by writing to 1a Camden Walk, London, N1 8DY.