Privacy Policy

Last updated: March 2025

Vape7Store ("we", "us", "our") operates vape7store.co.uk. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Vape7Store is the data controller for personal data collected via this Site. For data protection queries, contact us at: support@vape7store.co.uk

2. What Data We Collect

We may collect the following categories of personal data:

  • Identity data: name, date of birth (for age verification)
  • Contact data: email address, delivery address, phone number
  • Transaction data: details of purchases made, payment method type (we do not store full card details)
  • Age verification data: confirmation that you have self-declared as 18+ (no government ID is stored on our servers)
  • Technical data: IP address, browser type, device type, pages visited, referral source
  • Marketing data: your preferences for receiving marketing from us (opt-in only)

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders (contractual necessity)
  • Verify your age in compliance with UK legislation (legal obligation)
  • Send order confirmations and delivery updates (contractual)
  • Respond to customer service enquiries (legitimate interest)
  • Send marketing emails if you have opted in (consent — you may withdraw at any time)
  • Prevent fraud and ensure site security (legitimate interest)
  • Comply with legal and regulatory obligations (legal obligation)

4. Third-Party Sharing

We share your data only where necessary with trusted third parties:

  • Payment processors (e.g. Shopify Payments, Stripe) — to process payments securely
  • Delivery partners (e.g. Royal Mail, DPD) — to dispatch and deliver your order
  • Shopify Inc. — our e-commerce platform provider, acting as a data processor on our behalf
  • Age verification providers — where applicable, to verify customer age

We do not sell your personal data to third parties. All processors are contractually bound to process data only on our instructions and in accordance with UK GDPR.

5. Cookie Policy

We use cookies and similar technologies to operate the Site and improve your experience. These include:

  • Strictly necessary cookies: session management, cart, age verification state
  • Analytics cookies: to understand how visitors use the Site (e.g. Google Analytics — anonymised)
  • Marketing cookies: only if you have consented

You can manage cookie preferences in your browser settings at any time.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law:

  • Order records: 7 years (HMRC record-keeping requirements)
  • Age verification records: 12 months from date of purchase
  • Marketing opt-in records: until you withdraw consent
  • Technical/analytics data: up to 26 months (anonymised)

7. Your Rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention obligations
  • Portability — receive your data in a structured, machine-readable format
  • Restriction — ask us to restrict processing in certain circumstances
  • Object — object to processing based on legitimate interests
  • Withdraw consent — withdraw marketing consent at any time

To exercise any of these rights, email support@vape7store.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "last updated" date.

9. Contact

Email: support@vape7store.co.uk
Website: vape7store.co.uk

← Back to Home