Privacy Policy
Last updated: 25 September 2026
This is a pre-launch privacy-policy draft. Data controller identity: [BUSINESS LEGAL NAME AND ADDRESS REQUIRED]. Privacy enquiries: info@premiumvapes.co.uk.
Information we may collect
We may collect account and contact information, billing and delivery details, order records, customer-service correspondence, technical/security logs, cookie choices and age-verification results or status information. We will avoid retaining identity documents unless necessary and justified.
How we use information
We use information to provide the website, administer accounts and orders, arrange delivery, prevent fraud, verify eligibility and age, respond to enquiries, meet legal obligations, keep records and protect the service. Marketing communications will be sent only where permitted, with an option to unsubscribe.
Legal bases
Depending on the purpose, processing may be necessary for a contract, compliance with a legal obligation, legitimate interests such as fraud prevention and service security, or consent where required. The final launch policy must identify the controller and confirm each operational processing activity.
Who may receive information
Where services are activated, information may be shared with hosting and ecommerce service providers, payment processors, an age-verification provider, delivery carriers including EVRi, professional advisers, fraud-prevention services and public authorities where legally required. A future provider will be named only after appointment.
Age verification
Before sales begin, we plan to use layered age assurance. This may involve an age-verification provider and delivery checks. The provider, data fields, retention and any automated decision-making will be documented before activation.
Cookies and analytics
Essential cookies may be used for security, sessions, baskets and preferences. Non-essential analytics or advertising technologies will be described and controlled through an appropriate consent mechanism before they are enabled.
Retention
Information will be kept only as long as needed for the relevant purpose, legal obligations, disputes, fraud prevention and financial records. A documented retention schedule is required before launch.
Security and international transfers
Reasonable technical and organisational measures will be used to protect information. If a provider processes information outside the UK, an appropriate transfer mechanism and supplier assessment will be required.
Your rights
Subject to applicable law, you may ask for access, correction, deletion, restriction, objection or portability, and may withdraw consent where processing relies on consent. You may also complain to the Information Commissioner’s Office.
Contact and changes
Contact info@premiumvapes.co.uk. We will update this policy when operational providers and final business details are confirmed.