Privacy Policy
Last updated: [to be set at publication]
All Callao Group Ltd. ("EPIK Drinks", "we", "us") respects your privacy. This policy explains what we collect, why, and what you can do about it. It's written to comply with Canada'sPersonal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
What we collect
When you place an order: name, email address, shipping address, phone number if you provide one, and order contents.
We never see your card details. Payments are processed by Stripe, Inc. Your card number goes directly to Stripe and is never transmitted to or stored on our systems. Stripe's privacy policy is at stripe.com/privacy.
When you subscribe to our newsletter: your email address, plus the date and source of your consent.
When you join the Washington waitlist: your email address and postal code. We use the postal code only in aggregate, to understand where demand is concentrated.
When you contact us or submit a wholesale enquiry: whatever you choose to tell us.
When you browse: we use Cloudflare Web Analytics, which is privacy-first — no cookies, no fingerprinting, and no personal data collected. We see aggregate page views and referrers. We can't identify you.
Why we collect it
- To process, pack and deliver your order
- To send order confirmations and shipping updates
- To respond when you contact us
- To send marketing email only if you've expressly opted in
- To meet our legal, tax and accounting obligations
We do not sell your personal information. We do not share it with third parties for their own marketing.
Who we share it with
Only the service providers we need to run the business:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | US |
| Cloudflare | Hosting and site delivery | Global |
| [SHIPPING CARRIER] | Delivery | Canada |
| Resend | Transactional and marketing email | US |
Some of these process data outside Canada, which means it may be subject to the laws of those jurisdictions. We choose providers with appropriate safeguards.
Marketing email
We'll only send you marketing email if you've expressly opted in — a separate, unticked box you chose to tick. Every message includes an unsubscribe link that works, and we'll honour it promptly. Order confirmations and shipping notices aren't marketing and will still be sent.
How long we keep it
Order records are retained for 7 years to meet Canadian tax and accounting requirements. Newsletter subscriptions are kept until you unsubscribe. Waitlist entries are deleted once we've launched in that region or on request.
Your rights
You can ask us to:
- Tell you what personal information we hold about you
- Correct anything inaccurate
- Delete your information, subject to records we're legally required to keep
- Withdraw consent for marketing at any time
Email hello@epikdrinks.com and we'll respond within 30 days.
Security
We use HTTPS across the site, restrict access to personal information to those who need it, and rely on Stripe's PCI-compliant infrastructure for payments. No system is perfectly secure, but we take this seriously.
Children
Our site isn't directed at children and we don't knowingly collect their information.
Changes
If we change this policy we'll update the date above and, for material changes, notify newsletter subscribers.
Contact
[PRIVACY CONTACT NAME], Privacy Officer
All Callao Group Ltd.
7700 Hurontario St, #503 #2465, Brampton, ON L6Y 4M3
hello@epikdrinks.com
If you're unsatisfied with our response you may contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.