Privacy Policy | Vape Superstore UK

This policy explains what personal data Vape Superstore UK collects when you visit or buy from vapesuperstoreuk.co.uk, why we collect it, and what rights you have over it. We are the data controller for that information.

Who we are and how to contact us

Vape Superstore UK operates the website vapesuperstoreuk.co.uk and trades from Unit 19 Lockwood Industrial Estate, London N17 9QP. For any question about your data, or to exercise any of the rights set out below, email Info@vapesuperstoreuk.co.uk.

You must be 18 or over

We sell age restricted products. Our site is not intended for anyone under 18 and we do not knowingly collect data from under 18s. If you believe a minor has given us personal data, contact us and we will delete it.

What we collect

Order information. Your name, billing and delivery address, email address and phone number. We need this to process and deliver your order.
Payment information. Card payments are handled by our payment providers. We do not see or store your full card number.
Account information. If you create an account, your login details and order history.
Age verification data. Confirmation that you have passed an age check, as required for age restricted sales.
Technical data. IP address, browser type, device information and pages viewed, collected through cookies and similar technologies.
Contact data. Anything you send us by email, contact form or WhatsApp.

Why we use it, and our lawful basis

To fulfil your order including delivery, refunds and customer service. Lawful basis: performance of a contract.
To verify your age. Lawful basis: compliance with a legal obligation.
To keep accounting and tax records. Lawful basis: compliance with a legal obligation.
To prevent fraud and secure the site. Lawful basis: our legitimate interests.
To send marketing emails, where you have asked us to. Lawful basis: consent. You can withdraw it at any time using the unsubscribe link in any email.

Who we share it with

We share only what is necessary, with: payment processors, delivery couriers, our website hosting and email providers, age verification providers, and analytics providers. We also disclose information where we are legally required to. We do not sell your personal data.

International transfers

Some of our providers process data outside the UK. Where that happens we rely on UK adequacy regulations or on standard contractual clauses with appropriate safeguards.

How long we keep it

Order and transaction records are kept for six years to meet UK tax and accounting requirements. Account data is kept while your account is open. Marketing consent records are kept until you withdraw consent. Technical logs are kept for a short period and then deleted.

Cookies

We use cookies that are strictly necessary for the site and basket to work, plus optional cookies for analytics and marketing. You can accept or decline optional cookies through the banner, and you can clear or block cookies in your browser settings at any time.

Your rights

Under UK data protection law you have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where consent is the basis we rely on. To exercise any of these, email Info@vapesuperstoreuk.co.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.