Privacy Policy

Information We Collect

When you visit Vape Outlet, we collect information you provide directly to us — such as your name, email address, postal address, phone number, and payment details when you place an order. We also automatically collect certain technical information including your IP address, browser type, device information, and browsing behaviour on our site.

• Personal details (name, email, address, phone)
• Order history and account information
• Payment information (processed securely via our payment provider)
• Browsing behaviour and site interactions
• Communications you send us

How We Use Your Information

We use the information we collect to operate, maintain, and improve our services. Specifically, we use your data to:

• Process and fulfil your orders, including sending confirmation and shipping updates
• Manage your customer account
• Respond to your enquiries and provide customer support
• Send marketing emails and offers (only with your consent)
• Analyse site usage to improve your shopping experience
• Comply with our legal obligations and prevent fraud

Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content. Cookies are small files stored on your device. You can control cookies through your browser settings, though disabling certain cookies may affect site functionality.

We use the following types of cookies: essential cookies required for the site to function, analytics cookies to understand how visitors use our site, and marketing cookies to deliver relevant advertising.

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted third parties only in these circumstances:

• Service providers — payment processors, shipping carriers, email platforms — who assist in operating our business
• Legal compliance — when required by law or to protect our rights
• Business transfers — in the event of a merger, acquisition, or sale of assets

All third parties we work with are required to keep your information confidential and use it only for the purpose it was shared.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request deletion of your data (subject to legal obligations)
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — opt out of marketing communications at any time

To exercise any of these rights, please contact us at the details below.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order data is typically retained for 7 years to comply with UK tax regulations. You may request deletion of your account data at any time by contacting us.

Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. All payment information is processed through PCI-DSS compliant providers and is never stored on our servers.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by updating the 'last updated' date at the top of this page. We encourage you to review this policy periodically.