1. Data controller
The data controller is EPIC WORLD GROUP - FZCO, registered at DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates, trade license no. 55256 issued by IFZA, Dubai Integrated Economic Zones Authority. For any request about personal data, write to epicworldgroupfzco@gmail.com.
2. Data we process
- Website visitors: technical data logged by our server, such as IP address, browser, pages visited, date and time.
- Contact requests: name, email address and the content of your message.
- Partner websites: contact person details, company and tax details, billing details and information about the business.
- Customers of partner websites: name, email address, country, subscription details, payment and refund history and non-sensitive card details such as card brand and last four digits. Full card numbers and security codes are processed only by Stripe.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to contact requests | Pre-contractual steps and legitimate interest (GDPR art. 6.1 b and f) |
| Providing the service to partner websites and support | Performance of a contract (GDPR art. 6.1 b) |
| Verifying websites, preventing fraud and keeping the platform secure | Legitimate interest and legal obligations (GDPR art. 6.1 c and f) |
| Accounting and tax obligations | Legal obligation (GDPR art. 6.1 c) |
| Managing subscriptions on behalf of partner websites | Processing as a processor on behalf of the website (GDPR art. 28) |
We do not use personal data for advertising profiles and we never sell it to third parties.
4. Roles of websites, Stripe and EpicWorldPay
When you buy a subscription from a partner website, that website is the controller of your data and EpicWorldPay processes it on the website's behalf. Stripe processes payment data as an independent controller, including to prevent fraud and meet anti money laundering obligations, as described in the Stripe Privacy Policy.
5. Recipients
Personal data is processed by authorised staff and may be shared with Stripe, with our hosting and email providers acting as processors, with our accounting and legal advisers, with the partner website you bought from and with public authorities when required by law.
6. International transfers
EpicWorldPay is based in the United Arab Emirates and some providers, including Stripe, may process data in other countries. For data of users in the European Union, transfers take place with the safeguards required by the GDPR, such as the Standard Contractual Clauses approved by the European Commission or an adequacy decision.
7. Retention
- Server logs: up to 90 days, unless needed to investigate abuse.
- Contact requests: up to 24 months after the last communication.
- Contract and billing data: for the duration of the contract and then for the period required by applicable tax and accounting rules.
- Data of partner websites' customers: for the duration of the relationship with the website, then deleted or returned to the website, unless the law requires otherwise.
8. Security
We use encrypted connections, restricted and monitored access, backups and trusted providers. Full card details never pass through or are stored on our systems.
9. Your rights
You can ask at any time to access, correct or delete your data, to restrict or object to its processing and to receive it in a portable format. Write to epicworldgroupfzco@gmail.com and we will reply within 30 days. If you live in the European Union you can also lodge a complaint with the data protection authority of your country.
10. Cookies
This website does not set any cookies, neither technical nor profiling, and does not use third party analytics or advertising tools. Fonts, animations and scripts are served from our own servers without contacting external services, so no consent banner is needed. During payment on the Stripe checkout, Stripe may use cookies that are strictly necessary for the security of the transaction, as described in the Stripe Cookie Policy.
11. Children
Our service is not intended for anyone under 18 and we do not knowingly collect data about them.
12. Changes
We may update this policy. The date of the latest change is shown at the top of this page and, for significant changes, we notify partner websites by email.