Privacy Policy

Effective from 1st August 2020. This is the Privacy Policy for EPC Rugby Store.

As an essential part of our business, we collect and manage personal data. We collect personal data and other information from and about you through this website and its associated mobile sites, applications and widgets (collectively, the “Site”). The Site and all of our services on the Site are the “EPC Rugby Store”. Event Merchandising Ltd (or “we”) operates the EPC Rugby Store Website. We are a controller of the personal data collected from and about you through the EPC Rugby Store. In doing so, we observe UK and EU data protection legislation, and are committed to protecting and respecting your privacy and rights.

In order that you are reliably informed about how we operate, we have developed this Privacy Policy. This policy describes the ways in which we collect, manage, process, store and share information about you as a result of you visiting this site. This Privacy Policy also provides you with information about how you can have control over our use of your data.

Please note that we will be updating this Privacy Statement on a regular basis in order to keep you fully up-to-date with our approach to General Data Protection Regulations.

If you have any comments or queries regarding our use of your data, or you wish to unsubscribe from receiving marketing communications from us, please contact us by email at:


What types of data do we collect?

There are three types of personal data we collect in connection with the EPC Rugby Store - information you give us, information collected automatically and information from other sources.


Information you give us

Registration data. Registration data is the information you submit to register to receive marketing communications and newsletters from us. Registration data may include, for example, first name, surname, email address, gender, country, postcode and birthdate.

Public data and posts. Public data and posts consist of reviews that you post on EPC Rugby Store and the personal data about you that accompanies those posts or content, which may include a name, user name, comments, likes, status, profile information and image. Public data and posts are always public, which means they are available to everyone and may be displayed in search results on external search engines. Please review the “User Content” section of the Terms and Conditions of Use, which addresses how we may use your public data and posts.

Correspondence data. In the course of corresponding with us by telephone or email, you may provide us with personal data.


Information collected automatically

Activity data. When you access and interact with EPC Rugby Store, we may collect certain information about those visits. For example, when you seek to access

EPC Rugby Store, our servers receive and record information about your computer, device, and browser, including potentially your IP address, browser type, and other software and hardware information. We also may receive information about how you landed on this site, such as the website you visited prior to arrival or the search term you entered into the search engine that led you to EPC Rugby Store. We also may receive information about the website or application you visit when you leave this site. If you access EPC Rugby Store from a mobile or other device, we may collect a unique device identifier assigned to that device, advertising ID, geolocation data, or other transactional information for that device. Cookies and other tracking technologies (such as browser cookies, pixels, and beacons) and Adobe Flash technology (commonly called “Flash cookies”) may also be collected. These technologies may also be used to collect and store information about your usage of EPC Rugby Store or access to other content served by or on behalf of us, such as pages you have visited, content you have viewed, search queries you have run and advertisements you have seen. For more information, please visit our Cookie Policy.

Information from other sources. We may supplement the information we collect through EPC Rugby Store with information from other sources, such as commercially available sources and publicly available information from social media services. For example, data from social media. If you access EPC Rugby Store through a social media service, the data we collect may also include your user ID and/or user name associated with that social media service, any information or content you have permitted the social media service to share with us, such as your profile picture, email address or friends lists, and any information you have made public in connection with that social media service. When you access this site through social media services or when you connect the site to social media services, you are authorising us to collect, store, and use such data and content in accordance with this Privacy Policy.

Associating non-personal data with personal data. If we associate non-personal data with personal data, we will treat that combined information as personal data.

Sensitive data. We ask that you do not send us, and you do not disclose, any sensitive personal data (such as social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, genetic or health status or sexual orientation, criminal background or trade union membership) on or through EPC Rugby Store or otherwise.

Financial information. In some cases, we may use an unaffiliated payment service to allow you to purchase a product or make payments (“Payment Service”). If you wish to purchase a product or make a payment using a Payment Service, you will be directed to a Payment Service webpage. Any information that you provide to a Payment Service will be subject to the applicable Payment Service’s privacy policy, rather than this Privacy Policy. However, if we receive contact information from the Payment Service (to fulfil your order, for example), we will handle that information in accordance with this Privacy Policy. We have no access to any financial information that you provide to the Payment Service.

Please note that if you are making a financial transaction through EPC Rugby Store, then all your information - including financial and credit card information - that is obtained as part of that transaction will be managed according to our Terms & Conditions and Privacy Policy.

Data about other people. If you provide us with any personal data about another person, company or organisation (for example, in connection with a referral), you represent that you have the right to give us that information to use for the purpose described on EPC Rugby Store.

Use of EPC Rugby Store website by children. EPC Rugby Store is not intended for persons under age 16.


How do we use your data?

We use your data for the following purposes:

  • To assist in the processing of your order / to carry out our obligations arising from any contracts entered into between you and us. For example, this could include packing and delivering orders, forwarding order details, order fulfilment, the processing of credit/debit card transactions, fraud prevention, registering warranties and the provision of corresponding customer services. In certain circumstances, it may be necessary for us to provide your information to external companies with which we contract to assist us in providing these critical services to you including payment providers and couriers. We assure you that these companies are not permitted to use your information for any other purpose. For more information please see the section on how we share data below.
  • Where you have given us your specific consent, we and our licensing partners within EPC Rugby Store will use your data to provide you with marketing services. EPC Rugby Store use us to tell you about new products, news or services that may be of interest to you. Again, we and EPC Rugby Store do use a number of external companies to help us provide such marketing services. However, these companies are prohibited from sharing your data with any other company. This means that by consenting to receive marketing from EPC Rugby Store, you will not receive marketing communications from anyone else.


Our use of your personal data

Collection and use for purposes of our legitimate interests and legal obligations. We collect and use your data mainly to operate and improve our services. For example, we use your personal data to analyse your use of the site. We also use your personal data to personalise your use of the site, for example to identify your preferences. We also use your personal data to communicate with you regarding the EPC Rugby Store website, for example to reply to an inquiry you make through the site. We rely on our legitimate interests as the legal basis for processing this information. We also collect and use your personal data as necessary to comply with our legal or contractual obligations or to protect our legitimate interests, such as to detect and prevent fraud, abuse or security threats. Your failure to provide such personal data will make it impossible for us to provide you with some of our services.

Collection and use for marketing and other purposes with your consent. We and EPC Rugby Store collect and use your personal data for purposes for which we have your express consent. For example, where you have given us your consent, we will use your personal data to market to you. Where we are asking for your consent, you do not have to provide your consent. If you have provided your consent in response to our request, we will use that consent as the legal basis for collecting and using the data for the purposes disclosed to you. You may withdraw your consent at any time by contacting us at Also, where we are EPC Rugby Store are collecting personal data for marketing purposes, you have the option not to provide us with your personal data. We (EPC Rugby Storeuse a number of external companies to help us market our products and services, both on the site and elsewhere. However, these companies are prohibited from using or sharing the personal data that we or EPC Rugby Store provide to them, except as necessary to provide their services to us.

Our retention of your personal data. We and EPC Rugby Store keep your personal data for as long as needed for the purposes for which it was collected or for which you subsequently authorise it and additionally for as long as we and EPC Rugby Store are required to keep it because of legal obligations, professional accounting or audit standards, legal or insurance claims or regulatory proceedings.

Our sharing of personal data. We will never sell your personal data to any external organisation. However, we may share your personal data as follows:

  1. With EPC Rugby Store or the museum partners that own and distribute the EPC Rugby Store range of related products. 
  2. With our service providers to operate and improve our services
  3. With national authorities, unless prohibited by applicable laws
  4. With our affiliates, unless prohibited by applicable laws
  5. When we have your express consent to do so
  6. When it is necessary in order to honour a contract between you and us
  7. When we have a legal obligation to share the information
  8. When it is in the public interest
  9. When it is necessary for the establishment, exercise or defence of legal claims
  10. When it is necessary to protect the vital interests of you or another person

Transfers out of the European Economic Area. Whenever we transfer personal data to countries outside of the European Economic Area in the course of sharing information as set out above, we will ensure that the information is transferred in accordance with this Privacy Policy and as permitted by the applicable laws on data protection.

Third-party advertisers and links to third-party websites and applications. This site may also be linked to or from sites, including social media sites, operated by unaffiliated companies, and may carry advertisements or offer content, functionality, games, newsletters, contests or sweepstakes, or applications developed and maintained by companies unaffiliated with EPC Rugby Store. For example, if you click on a social media company’s “Like” or Share” button, your action may be visible, and you are sharing that action and, in some cases, personal data with companies unaffiliated with EPC Rugby Store. Note that removal of content (or a similar action) on an unaffiliated company’s website or application may not affect the data we have about you or our right to process that data. We are not responsible for the privacy practices of unaffiliated companies, and once you leave the EPC Rugby Store or click an advertisement you should check the applicable privacy policy of the other service.


How do I access my data?

You have the right to ask us, in writing, for a copy of all the personal data we hold about you. This is known as a "Subject Access Request". You can obtain this information at no cost. We will send you a copy of the information within 30 days of your request. To make a Subject Access Request, please send an email to A list of your legal rights may be accessed here

Remember that even after you unsubscribe or ask us to delete your personal data, copies of some information may remain viewable in some circumstances where, for example, you have shared information with social media or other services or, for example, when retention of such copies is necessary to comply with legal obligation or legal defence. Because of the nature of caching technology, your personal data may not be instantly inaccessible to others. We may also retain backup information related to your account on our servers for some time after cancellation or your request for deletion to comply with applicable law.

In addition, please note that you have the choice not to provide us with personal data. Also, if we have requested your consent to process personal data for a particular purpose, you have the option not to provide that consent. If you provided your consent, you may withdraw your consent at any time by contacting us at However, your choices may affect our ability to provide you with certain services.

Data privacy and security. We recognise that the security of data and transactions on this website is of primary importance. We therefore ensure that all connections to the site are securely encrypted and authenticated using strong protocols, key exchanges and ciphers. Our servers are updated with the latest security patches and fixes on a regular basis.

EPC Rugby Store is committed to protecting the security of your data. We use a variety of security technologies and procedures to help protect your personal information from unauthorised access, use or disclosure. For example, we store the personal information you provide in computers with restricted access that are located in controlled facilities.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. For security purposes, your password should not be written down and should be regularly reset.

When we transmit sensitive information such as your credit card number and address details over the Internet, we protect it through the use of 128-bit encryption certificates and the Secure Sockets Layer (SSL) protocol - the industry-standard method for protecting web communications.

Disclaimers. Every effort is made to ensure that the information provided on this website, and in this Privacy Policy, is accurate and up-to-date, but no legal responsibility is accepted for any errors or omissions contained herein.

We cannot accept liability for the use made by you of the information on this website or in this Privacy Policy, neither do we warrant that the supply of the information will be uninterrupted. All material accessed or downloaded from this website is obtained at your own risk. It is your responsibility to use appropriate anti-virus software.

This Privacy Policy applies solely to the data collected by us, and therefore does not also apply to data collected by third party websites and services that are not under our control. Furthermore, we cannot be held responsible for the Privacy Policies on third party websites, and we advise users to read these carefully before registering any personal data.

Your right to contact a supervisory authority. If you reside in the United Kingdom, the European Economic Area or Switzerland, you have the right to lodge a complaint with the relevant supervisory authority. The UK supervisory authority for data protection issues is the Information Commissioner’s Office ( For more information about your rights under data protection laws in the European Union, see