Data & Privacy Policy

Our Data and Privacy Policy explains the way in which EP Marketing Limited collect, use, maintain, protect and disclose the personal information of the users of our website and all the products and services offered by EP Marketing Limited.


    1. About us
    2. Your information and how we use it
    3. Description of processing
    4. Reasons/purposes for processing information
    5. Who the information is processed about
    6. Who the information may be processed about
    7. Where necessary or required, we share information with
    8. Transfer of data
    9. Visitors to our website
    10. Personal data via third party services
    11. People who use our services
    12. Job applicants and our current and former employees
    13. Your information and how we collect and use it
    14. Grounds for processing
    15. Your rights
    16. Rights related to automated decision-making, including processing
    17. Protecting your information
    18. Complaints or queries
    19. Links to other websites
    20. Changes to this privacy notice
    21. How to contact us

Company Name: EP Marketing Limited

Registered office address: The Garden Office | Harkstead Hall Estate Barns | Harkstead | IP9 1DB

Company number: 08446331

ICO Data protection registration reference: ZA 150914

Date of registration: 10 November 2015

Registration Expiries: 09 November 2018

Nature of work: Marketing/Advertising Agency

The following is a comprehensive description of the way EP Marketing Limited, as a data controller processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received from us, check any privacy notices we have provided or contact us directly to ask about your personal circumstances and how this Data and Privacy Policy applies to you.

This Data and Privacy Policy tells you what to expect when EP Marketing Limited collects personal information about you when you engage with us. It also explains how we’ll process that data, and keep it safe.
We only collect personal and financial information such as your name, address, telephone number, bank details and email address when you provide it to us, or when you have given a third party permission to share your information with us.

We will only use the data captured for specific purposes in relation to the provision of services from EP Marketing Limited, whether that’s as part of the follow up process originally instigated by you (Consent) or as part of the provision of a service (under provision of a contract). We may also use your information to keep you up to date with relevant services and useful updates from EP Marketing Limited (legitimate interest). At all times recipients will be given the option to opt-out of communications and or have their personal data removed if requested and so long as this removal is not against business practices under law (legal obligation). In rare cases we may have need to process information under (Vital interests) or in the where information is in the publics interest or to perform official functions (Public task).

The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these will apply whenever we process personal data:

(a) Consent: you have given clear consent for us to process your personal data for a specific purpose.

(b) Contract: the processing is necessary for a contract we have with the you, or because you have asked us to take specific steps before entering into a contract with you.

(c) Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).

(d) Vital interests: the processing is necessary to protect someone’s life.

(e) Public task: the processing is necessary for us to perform a task in the public interest or for EP Marketing Limited’s official functions, and the task or function has a clear basis in law.

(f) Legitimate interests: the processing is necessary for EP Marketing Limited’s legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

We process personal information to enable us to:

  • Provide marketing, advertising and public relation services to our clients
  • Maintain our accounts and records
  • Promote our services
  • Undertake research
  • Support and manage our employees

Type/classes of information processed

  • We process information relating to the above reasons/purposes. This information may include:
    • Personal details such as name, address, place of work, telephone and email addresses
    • Membership details
    • Goods and services
    • Family details
    • Lifestyle and social circumstances
    • Financial details
    • Education and employment details

In some but not all instances we may process sensitive classes of information that may include:

  • Physical or mental health details
  • Racial or ethnic origin
  • Religious or other beliefs of a similar nature
  • Offences and alleged offences
  • Trade union membership

We process personal information about our:

  • Client
  • Employees
  • Suppliers
  • Enquirers and complainants
  • Survey respondents
  • Professional advisers and consultants
  • Visitors to our website
  • Visitors to our social media platforms

We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA) soon to be GDPR (25th May 2018). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.

  • Current, past or prospective employers
  • Suppliers and service providers
  • Financial organisations
  • Family, associates and representatives of the person whose personal data we are processing
  • Trade associations and bodies
  • Professional advisers and consultants
  • Central government
  • Employment and recruitment agencies
  • Business associates
  • Survey and research organisations
  • Credit reference agencies
  • Debt collection agencies

GDPR imposes restrictions on the transfer of personal data outside the European Union, to third countries or international organisations. These restrictions are in place to ensure that the level of protection of individuals afforded by the GDPR is not undermined.

It may sometimes be necessary to transfer personal information overseas. EP Marketing Limited will only transfer personal data where the organisation receiving the personal data has provided us with adequate safeguards and where your rights must be enforceable and effective legal remedies for individuals must be available following the transfer.

When someone visits we use the following third party services:

  • ​Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way- which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
  • Facebook pixels are used

Functionality on our website relies on the use of Cookies find out more through our Cookie Policy.

If we do collect personally identifiable information through our website, this will be clear to the visitor. We will make it clear when we collect personal information and will explain what we intend to do with it.

EP Marketing Limited will collect and store your personal data provided from third parties only when you have given permission for it to be supplied. For example at events and conferences. This data will only be used for the purposes of relevant follow-up activity (legitimate interest). If after 12months we have not engaged with you further then your data records will be stored and encypted so there are no personal identifies are associated with this record. This data will only be used for the purposes of EP Marketing Limited research and development. Your records will not be sold to third parties.

EP Marketing offers various services to businesses. Within those businesses we have to hold the details of people that have requested or are in some way associated with the provision of the service we provide. We only use these details to provide the service and for other closely related purposes. For example, we may use information about people who take services from us to carry out a survey to find out if they are happy with the level of service they received.

EP Marketing is the data controller for the information you provide during the application process unless otherwise stated. If you have any queries about the process or how we handle your information please contact

We collect information about you when you complete one of the forms on our website and is transmitted over HTTPS to our web server we also collect data and information about you in one to one meetings, via email and over the phone. This will include your name, place of work, contact information and where relevant financial information, along with any other information you choose to provide us at any of the above data collection points.

The information will be used to respond to your enquiry, or contact you about a service that you have shown to have an interest in.

The information will be used solely by EP Marketing Limited and will not be shared with any other third party.

Your personal Information will be stored on our project management platform TeamWork, our financial system Xero purely for the purpose of providing services you have engaged with us to provide and on Campaign Monitor for future marketing and industry related updates that will relevant to you. In this case your information may be processed outside of the European Economic Area (EEA).

We are processing the information you provide under the legal grounds of our legitimate interest, we will use the information provided for legitimate business purposes such as contacting you in response to an enquiry submitted through our website. We have carried out a legitimate interest assessment on the data we collect to support this decision.

You have rights over the information that EP Marketing Limited have collected from you, these include the following:

Right to be informed

We provide ‘fair processing information’ through our privacy notice.

Right of access

We will confirm to you that we process your data, and to provide access to any personal information we hold about you should you request this information in writing.

Right of rectification

If any data we hold about you is incomplete or inaccurate we will correct the information we hold and notify you by email or in writing of the corrections made.

Right to erasure (the right to be forgotten)

Where there is no compelling reason for the continued processing of your information we will erase this.

Right to restrict processing

We will stop processing or block your data on request. We may hold enough information to ensure that we can respect this restriction in the future. e.g. We may hold your email address on a list to prevent it being processed in the future.

Right to data portability

In certain circumstances you may request your data in a commonly used and machine readable format.

Right to object

You may object to us processing your data, unless the processing is for the establishment, exercise or defence of legal claims.

If you’d like to access or correct the data we hold, please contact us.

We know how much data security matters. We will treat your data with the utmost care and take all appropriate steps to protect it.

Your information is only accessed by people who need it to perform their role.

Your personal data is encrypted at rest and in transit as far as possible, we secure the information you submit through using ‘https’. However this does not account for personal errors and where there has been a breach of data we will comply with the GDPR regulations and report all activities of breach to the ICO.

Your data may, occasionally, be sent outside the European Economic Area (EEA), as described in this notice. In these cases your information will remain secure and confidential.

We will retain personal information only for so long as the information is necessary to fulfil your request, or until you exercise one of your rights.

EP Marketing Limited tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of EP Marketing Limited collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to You may also complain to the supervisory authority in the UK, the ICO. Various contact details are listed on the ICO Report a concern page.

We keep our privacy notice under regular review. This privacy notice was last updated on 17th May, 2018.

If you want to request information about our privacy policy you can email us on or write to:

Emma Pratt

Data Privacy Compliance Officer
EP Marketing Limited,

EP Marketing LimitedThe Garden Office, Harkstead Hall Estate Barns, Harkstead