Privacy Policy

Privacy and Cookies

This Privacy & Cookies policy only applies to this website; we have included links to our third party partnersí privacy policies for ease.

What information do we collect about you?
We collect information about you when you register with us or place an order for products. Website usage information is collected using cookies. Information is also collected when you voluntarily sign up to our email marketing list.

We hold the following customer information:

Name
Billing Address
Delivery Address
Email address
Contact telephone number
IP Address
Order History
Account Specific Notes
This information is stored on a secure encrypted server. We do not hold any card or payment details, we use the third party tool Paypal to process and take payments from their secure server, for information on PayPalís privacy policy please visit: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full . The only data collected that is not visible in your account is IP address & account specific notes, these show to our orders department to aid in fraud prevention & customer service. This however does not print on to the invoice but shows on the order programme and is kept in our encrypted system. This also does not show on the online order history for customers.

How will we use the information about you?
We collect information about you to process your order, manage your account and, if you agree, to email you about other products and discounts we think may be of interest to you. Vapable Ltd will not share your information for marketing purposes with companies. In processing your order, we may send your details to our couriers:

Royal mail ñ https://www.royalmail.com/privacy-policy
DPD ñ http://www.dpd.co.uk/privacy_policy.jsp
UPS ñ https://www.ups.com/gb/en/help-center/legal-terms-conditions/privacy-notice.page
We share this information with these third party partners to again aid with delivery of goods. We do not supply more than is necessary to aid in delivery. Please follow the links provided above to our courierís privacy policies.

Access to your information and correction
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us at the address at the bottom of this page. Please be aware the majority of this information is accessible via your online account. We will provide full details free of charge within 3 weeks.

Right to Erasure ñ you reserve the right to cancel and delete your account at any time; deletion can be done remotely by cancelling the account, however for Inland Revenue reasons we must keep any data from purchases for 6 years. This information is kept on an encrypted server. If you open an account and never places an order, when the account is deleted, all data is removed as there is no need to hold it.

Right of Refusal ñ Refusal of data deletion will only occur if orders are still within the 6 year timeframe for Inland Revenue; this will only apply to data required for business purposes. Complaints regarding this can be referred to the ICO.

Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org . You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However in a few cases some of our website features may not function as a result. Vapable Ltd only collects this data via Google Analytics for traffic reports; please visit https://policies.google.com/privacy for the full terms of their privacy policy.

Changes to our privacy policy
We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 10th of May 2018.

Automated abuse prevention

We use Cloudflare Turnstile to protect checkout, account and contact features from automated abuse. Turnstile processes limited technical signals to distinguish people from bots. Learn more in Cloudflare's Turnstile Privacy Addendum.

Optional storefront analytics

With your analytics consent, we record page and product views, search result counts, basket actions and checkout activity to understand how the shop is used. A random browser identifier links recent activity; it is not your account ID. This history does not contain IP addresses, account IDs, search text or full referring URLs. Device and browser categories, broad referral sources and, where available, country codes support grouped reports.

The storefront_analytics cookie lasts 90 days. Linked activity is retained for 90 days, after which only unlinked daily totals remain for up to 36 months for seasonal and year-on-year comparisons.

You can refuse analytics and still shop. Turning analytics off in Cookie settings stops this collection and requests deletion of the first-party activity linked to this browser. Already unlinked daily totals cannot be matched back to you. Other browsers have separate identifiers. When analytics or marketing consent is granted, an order may retain the consent choice, a broad referral-source label and whether a provider identifier was available so we can diagnose advertising measurement. Raw analytics and advertising identifiers are not copied into this order diagnostic, which is removed after 90 days.

Where Google Analytics is enabled, it is a separate analytics service with its own processing and retention settings; the first-party retention periods above do not describe Google's retention. See Google's Privacy Policy.

Where enabled, the first-order offer test uses a separate browser identifier and links its assigned offer to a basket or signup so we can compare outcomes. These experiment records and links are removed on withdrawal or after 90 days. Removing analytics links does not remove your orders or cancel an issued offer.

Cookie details

We use the following cookies and similar technologies. You can change optional choices at any time in Cookie settings.

• Necessary: users_cookie_preferences remembers your choice for 180 days. basket, session, and security cookies keep the basket, checkout, sign-in, and fraud protections working.
• Functional: recently_viewed_products and wishlist remember products you viewed or saved. They last up to one year.
• Analytics: _ga, _gid, _gat, storefront_analytics, storefront_search_intent (a 30-minute search-to-basket marker containing no search text), and, where enabled, cosy_first_order_offer_visitor help us understand visits, searches, and the shopping journey.
• Marketing: _gcl_* measure advertising only when you allow marketing cookies.