Privacy policy
VAPEZ UK · Clear information for our customers
Who we are
VAPEZ UK, Valley Gardens, TR16 4EE, Cornwall, United Kingdom. Contact: info@vapezuk.co.uk. The legal identity of the data controller must be verified and published before trading.
Information we collect
Depending on your use, we may process contact details, account identifiers, enquiries, customer-support correspondence, product requests, technical and security logs, cookie preferences and, when implemented, order and delivery information. Do not submit payment-card data through support forms.
Why we use it
We process information to respond to enquiries, administer accounts, provide requested services, protect the website, meet legal obligations and, where lawful consent or another valid basis exists, send requested communications.
Lawful bases
Potential UK GDPR bases include contract, legitimate interests, legal obligation and consent. The applicable basis must be mapped to each actual processing activity and confirmed before launch.
Who receives information
Relevant hosting, authentication, email, support and other service providers may process data on our behalf. The actual providers, international transfers and safeguards must be confirmed before final publication.
How long information is kept
We retain data only for as long as necessary for its purpose, applicable legal obligations or dispute resolution. A verified category-by-category retention schedule must be added before launch; no unsupported fixed retention periods are promised.
Your rights
Subject to UK data protection law, you may request access, correction, erasure, restriction, portability or objection, and withdraw consent where consent applies. Email info@vapezuk.co.uk. You may complain to the Information Commissioner's Office at ico.org.uk.
Children
This is an adult-restricted website. We do not knowingly seek information from children for nicotine-product purchases.
Cookies and security
See our Cookies policy for storage and consent information. We use reasonable security measures but cannot guarantee absolute security.
Review before launch
Confirm controller identity, processors, retention schedule, international transfers, age-verification handling, marketing flows and consent implementation before treating this notice as final.