Skip to content
Sign in0

Privacy policy

This policy explains what we do with your personal data when you buy from this shop, and what you can require of us. We need enough to get a parcel to you and to take payment for it, and we do not want more than that.

Who is responsible

The controller of your personal data is VAPERLOOP SL. Our full details are on the legal notice page.

For anything in this policy, write to [email protected].

What we collect

  • Your order: name, delivery address, phone number and email address, together with what you bought, the total and the payment method you chose.
  • Refunds: if a refund is due by bank transfer, the account details you give us for it.
  • Your account, if you choose to open one: your email address and a cryptographic hash of your password. We never hold the password itself.
  • Order look-ups: the order number and email address you type into the tracking page.
  • Messages you send us, and our replies.
  • Technical records kept by the server: your IP address, your browser identification and the pages requested. These are what let us keep the shop up and spot abuse.

This site has no card payment form, so we never see card details. We ask for bank account details only to pay you a refund. We do not collect health data, and we do not profile you.

Why we use it

  • To take, dispatch and deliver your order, and to keep you informed about it. This is processing necessary to perform our contract with you.
  • To meet legal obligations, in particular invoicing and the keeping of commercial and tax records.
  • To confirm that we are selling only to adults, which is a legal restriction on these products.
  • To prevent fraud and abuse, and to keep the shop secure and working. This is our legitimate interest, and it is limited to what that purpose needs.

Who else sees it

The carrier that delivers your parcel receives your name, delivery address and phone number, and for cash on delivery the amount to collect. It cannot deliver without them.

If you pay with cryptocurrency, NOWPayments processes the payment. We send it the order number and the amount due; we do not send it your name, address or contact details.

We use Google to check delivery addresses. When you type an address, the street line, town, province, postcode and country code are sent to Google's Address Validation service, and to Google Places for the suggestions that appear as you type, so that we can confirm the address exists and can be delivered to. Your name, email address, telephone number, order contents, totals and payment method are never sent, and neither is the apartment, floor or door line.

Google may process this outside the European Economic Area. We do it to reduce failed deliveries: a parcel that cannot be handed over is paid for twice in carriage and reaches nobody, and confirming the address before dispatch is the cheapest way to avoid that.

Our hosting and email providers handle data only on our instructions and for no purpose of their own. Write to us if you want to know which providers hold data about you, and we will tell you.

We disclose data to public authorities only where the law requires it. We never sell your data and we do not share it with advertising networks. We count page views with a privacy-friendly analytics tool that sets no cookies, stores nothing in your browser and builds no profile of you, and we run no advertising trackers at all.

How long we keep it

Order records are kept for as long as commercial and tax law requires us to keep them, and are deleted once that period has run. Account data is kept until you close your account. Ask us about a particular record and we will tell you how long it will be held and why.

Your rights

You may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and ask for it in a portable form. Write to us and we will answer within one month.

Where we rely on legitimate interests you may object, and we will stop unless we have grounds that override yours. Deleting order data we are legally required to keep is the one request we may have to refuse, and we will say so if that happens.

You may also complain to a data protection supervisory authority — the one in the country you live in, the one in the country you work in, or the one in the country where you think the problem happened. You do not have to come to us first, though we would rather you did.

Cookies

What this site stores in your browser, and why, is on the cookie policy page. There is nothing to consent to: our page-view counting sets no cookies, and the shop sets no advertising cookies at all.

Under-18s

This shop is not for children and we do not knowingly hold data about anyone under 18. If you believe we have, tell us and we will delete it.