Privacy Policy

VapeUK Limited ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

We are the data controller for the personal data we process. Our registered office is at 123 Vape Street, London, SW1A 1AA, United Kingdom.

Personal Information

• Name, email address, phone number
• Billing and delivery addresses
• Date of birth (for age verification)
• Payment information (processed securely by third parties)
• Account credentials and preferences

Technical Information

• IP address and browser information
• Device type and operating system
• Website usage data and analytics
• Cookies and similar technologies

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Age verification as required by UK law
• Customer service and support
• Marketing communications (with your consent)
• Website improvement and analytics
• Fraud prevention and security
• Legal compliance and regulatory requirements

We process your personal data based on:

• Contract: To fulfill our contractual obligations when you make a purchase
• Legal obligation: To comply with age verification and other legal requirements
• Legitimate interests: For fraud prevention, analytics, and business operations
• Consent: For marketing communications and non-essential cookies

We may share your data with:

• Payment processors (Stripe, PayPal) for secure payment processing
• Delivery companies for order fulfillment
• Age verification services as required by law
• Analytics providers (Google Analytics) for website improvement
• Legal authorities when required by law

We do not sell your personal data to third parties for marketing purposes.

We retain your personal data for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Typically, we retain customer data for 7 years after the last transaction for tax and legal compliance purposes.

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: For processing based on consent

To exercise these rights, contact us at privacy@vapeuk.com

We use cookies and similar technologies to:

• Remember your preferences and login status
• Analyze website traffic and user behavior
• Provide personalized content and advertisements
• Ensure website security and prevent fraud

You can manage cookie preferences through your browser settings or our cookie consent tool.

We implement appropriate technical and organizational measures to protect your data:

• SSL encryption for data transmission
• Secure servers and regular security updates
• Access controls and staff training
• Regular security assessments and monitoring
• Incident response procedures

Some of our service providers may be located outside the UK. When we transfer data internationally, we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Certification schemes and codes of conduct

For any privacy-related questions or to exercise your rights, contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk