Effective Date: 16 October 2025
Last Updated: 16 October 2025
1. Introduction
Welcome to Vape Wholesale Store Ltd, trading as Shop Vapour (“we”, “our”, or “us”). We are committed to safeguarding your privacy and protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit or make a purchase from www.shopvapour.co.uk (the “Website” or “Service”). By using our website, you consent to the practices described below.
2. Who We Are
Company Name: Vape Wholesale Store Ltd
Trading Name: Shop Vapour
Business Activity: Retail and wholesale distribution of vaping products and accessories
Website: www.shopvapour.co.uk
Telephone: 07954 099 215
Email: support@shopvapour.co.uk
Registered in England and Wales.
Vape Wholesale Store Ltd is the data controller, meaning we determine how and why your personal data is processed.
3. Information We Collect
We collect and process the following types of information:
a) Information you provide directly:
- Name, billing and shipping address
- Email address and phone number
- Date of birth (for age verification)
- Order and payment details (processed securely by Worldpay)
- Customer service communications (e.g. WhatsApp, email, or phone)
b) Information collected automatically:
- IP address, browser type, device information, and operating system
- Website usage data (pages visited, time on site, referral source)
- Shopping cart data, including abandoned baskets
- Cookies and tracking technologies (see Section 10 below)
c) Information from third parties:
- Age Verification: Provided by 1account (One Account Mobile Ltd)
- Payment Authorisation: Provided by Worldpay
- Analytics: Provided by Google Analytics
4. Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contractual necessity: To fulfil your order and deliver goods.
- Legal obligation: To comply with age verification and financial recordkeeping requirements.
- Legitimate interest: To improve our website, prevent fraud, and offer customer support.
- Consent: For marketing communications and newsletters (which you may withdraw at any time).
5. How We Use Your Data
Your personal data is used for:
- Processing and fulfilling orders
- Managing deliveries, returns, and customer service
- Verifying age and identity for restricted products
- Sending order confirmations and updates
- Providing customer support through WhatsApp or email
- Conducting website analytics and improving service quality
- Complying with UK laws and regulations
6. Service Providers
We work with trusted third parties who perform essential business functions on our behalf, including:
- Worldpay – secure payment processing
- 1account (One Account Mobile Ltd) – age verification services
- Google Analytics – website analytics and traffic monitoring
These third parties process your personal data only as required to deliver their services and are bound by strict confidentiality and data protection agreements.
7. Analytics and Age Verification
1account (Age Verification)
To comply with UK law on age-restricted sales, we use 1account to verify that customers are aged 18 or over. If you successfully verify your age, this will be recorded to avoid repeating the process on future orders.
Privacy Policy: https://1account.net/privacy-policy
Google Analytics
We use Google Analytics to collect anonymous data about website use, such as page visits and session duration. You can opt out by installing the Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Google Privacy Policy: https://policies.google.com/privacy
8. SMS & WhatsApp Communications
If you provide your phone number and consent to receive communications, we may contact you via SMS or WhatsApp for:
- Order and delivery updates
- Abandoned cart reminders
- Promotional offers and updates
- Product feedback or review requests
You can opt out at any time by replying STOP or contacting us directly.
9. Payments (Worldpay)
We use Worldpay as our secure third-party payment processor. All payment data is processed directly by Worldpay and not stored on our servers.
Worldpay complies with PCI-DSS (Payment Card Industry Data Security Standard), ensuring your payment details are handled safely.
Worldpay Privacy Policy: https://www.worldpay.com/uk/privacy-policy
10. Cookies and Tracking
Our website uses cookies to:
- Enable essential site functionality (e.g. cart, checkout, login)
- Improve user experience and navigation
- Track website performance and usage trends
- Deliver relevant offers and promotions
You can manage or disable cookies through your browser settings. For more information, see our Cookie Policy (to be published separately).
11. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy or to comply with UK law:
- Order and payment data: 7 years (for accounting and legal compliance)
- Marketing data: until you withdraw consent
- Age verification data: retained as required by UK legislation
12. Data Security
We implement appropriate technical and organisational measures, including SSL encryption and restricted data access, to protect your information from unauthorised access, alteration, or loss.
13. International Data Transfers
Some of our service providers (e.g. Google) may store data outside the UK. In such cases, your information is protected under adequacy regulations or Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO).
14. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Access – request a copy of the data we hold about you.
- Rectification – correct inaccurate or incomplete information.
- Erasure – request deletion of your personal data (“right to be forgotten”).
- Restriction – request limited use of your data.
- Data portability – receive your data in a portable format.
- Objection – object to processing based on legitimate interests.
- Withdraw consent – stop receiving marketing messages at any time.
You can exercise these rights by contacting us directly. We may request proof of identity before fulfilling your request.
15. Children’s Privacy
Our website is intended for customers aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with information, please contact us immediately, and we will delete it.
16. Links to Other Websites
Our website may contain links to external websites not operated by us. We are not responsible for the content or privacy practices of third-party websites. We encourage you to review their policies before providing any personal information.
17. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business or legal obligations. The updated version will be posted on this page with a revised “Effective Date.” For significant changes, we may notify you by email or display a notice on our website.
18. Contact Us
For questions, privacy concerns, or data requests, please contact us:
Vape Wholesale Store Ltd t/a Shop Vapour
📞 07954 099 215
📧 support@shopvapour.co.uk
🌐 www.shopvapour.co.uk
