Privacy Policy

Vape Superstore (operated by Easytek LTD) is committed to protecting your privacy and personal data. This policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is Easytek LTD, Unit 19 Lockwood Industrial Park, Mill Mead Road, London N17 9QP. For data protection queries, contact us at privacy@vapesuperstore.co.uk.

2. Information We Collect

We collect the following types of personal data:

• Identity data: Name, date of birth (for age verification)
• Contact data: Email address, phone number, delivery address
• Transaction data: Order history, payment details (processed securely by third-party providers)
• Technical data: IP address, browser type, device information
• Usage data: Pages visited, products viewed, search queries
• Marketing data: Communication preferences

3. How We Use Your Data

• Processing and fulfilling your orders
• Age verification as legally required for nicotine products
• Communicating about your orders (dispatch, delivery, customer service)
• Operating our rewards programme
• Sending marketing communications (with your consent)
• Improving our website and personalising your experience
• Fraud prevention and security
• Complying with legal and regulatory obligations

4. Legal Basis for Processing

We process your data on the following legal bases:

• Contract: To fulfil our contractual obligations when you place an order
• Legal obligation: Age verification, tax records, regulatory compliance
• Legitimate interests: Fraud prevention, service improvement, business analytics
• Consent: Marketing communications, non-essential cookies

5. Data Sharing

We share your data only with trusted third parties essential to our service:

• Delivery partners (Royal Mail, DPD, Evri) for order fulfilment
• Payment processors (Stripe, PayPal, Klarna) for secure transactions
• Age verification providers for regulatory compliance
• Email service providers for order and marketing communications

We never sell your personal data to third parties.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy. Order data is kept for 7 years for tax and compliance purposes. Marketing data is retained until you unsubscribe or request deletion.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@vapesuperstore.co.uk.

8. Cookies

We use cookies and similar technologies to improve your browsing experience. For full details, see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your data, including SSL encryption, secure payment processing, access controls, and regular security audits.

10. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.