Privacy Statement – VapeGPT
Privacy Statement – VapeGPT
Transparency in Data Usage :Our Commitment to You At VapeGPT.co.uk, we are committed to full transparency about the data we collect, why we collect it, and how it is used. This Privacy Statement outlines your rights under the UK General Data Protection Regulation (UK GDPR) and explains how your personal information is handled across our website and services.
Data We Collect
Personal Information
- We collect the following personal data when you use our website:
- Name, email address, postal address and phone number
- Payment details (processed securely and never stored on our servers)
- Date of birth for legal age verification
For details on account-related data, visit: Login And Registration
Technical Data
- Collected automatically to ensure proper website functionality:
- IP address
- Browser type, operating system, and device identifiers
- Cookies and be havioural data (see Cookie Policy section below)
Order Data
- Collected when you place an order:
- Products purchased
- Payment method (not stored)
- Delivery address and preferences
How We Use Your Data
We use your data for the following purposes:
- Order Processing and Fulfillment:
- To process and deliver your order
- To update you on the status of your order or returns
- To comply with UK age verification laws?
(See our Terms & Conditions for statutory obligations)
Age Verification:
To ensure compliance with UK laws requiring age verification for the sale of vaping products.Customer Support:
To respond to your inquiries, complaints, or support requestsMarketing and Promotions:
To send you updates, promotions, and offers if you have opted in. You can opt out at any time.Website Optimization:
To analyze website usage and improve our services using cookies and analytics tools.Legal Basis for Processing (UK GDPR Article 6)
We process your data based on the following lawful grounds:
Contractual necessity
– to process your orders and deliver productsLegal obligation
– for tax records, age verification and regulated vaping complianceLegitimate interest
– analytics, website improvement, fraud preventionConsent
– to process your email marketing, cookies and promotional communications You may withdraw consent at any time.
Data Sharing
We NEVER sell your data to advertisers or third parties.
- We may share data only when necessary with:
- Service providers (payment processors, delivery couriers, age verification partners)
- Legal authorities (when required by law)
- Business successors(in the event of a merger, acquisition or transfer)
For returns-related information, see: Refunds & Returns
International Data Transfers
Some service providers may process data outside the UK (e.g., EU/US cloud services).
- In such cases, your data is protected using:
- UK-approved adequacy regulations
- Standard Contractual Clauses (SCCs)
- Encrypted transfers and restricted access
Data Retention
- . Order & account information: retained for up to 6 years (legal obligation for tax records)
- Marketing data: retained until you unsubscribe
- Cookie data: see full details in our Cookie Policy
- Customer support communications: retained as necessary for service quality
Your Data Rights (Under UK GDPR)
- You have the right to:
- Marketing data: retained until you unsubscribe
- Rectification – update inaccurate information
- Erasure – request deletion where legally applicable
- Restriction – limit processing of your data
- Data portability – receive your data in a structured format
- Object – opt out of marketing or certain processing
To exercise your rights, contact our Data Protection Officer at: [email protected] We may require identity verification.
Security Measures
- We implement strong security protocols, including:
- Encrypted payment processing
- Secure servers & firewalls
- Limited staff access
- Regular security audits
- HTTPS site-wide encryption
No online transmission is 100% secure, but we take all reasonable steps to protect your data.
Cookies and Tracking
We use cookies to personalize your browsing experience and analyze performance.
- Types include:
- Essential cookies
- Analytics cookies
- Functional cookies
- Personalization cookies
You may manage or disable cookies in your browser. For full details, see our Cookie Policy on this page.
Marketing Communications (PECR Compliant)
If you opt in to marketing, we may send updates via email or SMS.
You can unsubscribe at any time using the “unsubscribe” link or by adjusting preferences in your account. Unsubscribing does not affect essential service emails such as order confirmations.
Third-Party Links
Our website may link to external sites. Once you leave VapeGPT.co.uk , we are not responsible for their privacy policies.
We recommend reviewing the privacy statements of any third-party website before submitting personal information
Children’s Privacy
We do not knowingly collect or process data from individuals under 18. Age verification is required for all purchases of vaping products in the UK.
Updates to This Policy
We may update this Privacy Statement to reflect legal updates, business changes or improvements in our services.The latest version will always be available on this page with an updated “Last Updated” date. For related policies:
Contact Us
For any questions about our products, support enquiries, or collaboration opportunities, please feel free to get in touch:
• Email [email protected]
Our team at VapeGPT is always ready to assist you.
Contact Us