Privacy and Cookie Policy

This privacy and cookie policy sets out how Vapour Freaks Ltd uses and protects any information that you give Vapour Freaks Ltd when you use this website.

Vapour Freaks Ltd is committed to ensuring that your privacy is protected. Should we ask you to provide certain information then you can be assured that it will only be used in accordance with this privacy statement.

Vapour Freaks Ltd may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25th June 2021.

We respect your right to privacy. None of the information we collect is passed on to other parties, except when required as part of the business services we provide for you, or as required under UK law.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Data Collection

We collect information about you during the checkout process on our store.

What we collect and store

While you visit our site, we’ll track:

  • Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
  • Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
  • Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!
  • We’ll also use cookies to keep track of basket contents while you’re browsing our site.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

  • Send you information about your account and order
  • Respond to your requests, including refunds and complaints
  • Process payments and prevent fraud
  • Set up your account for our store
  • Comply with any legal obligations we have, such as calculating taxes
  • Improve our store offerings
  • Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Who on our team has access

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

  • Order information like what was purchased, when it was purchased and where it should be sent, and
  • Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfill orders, process refunds and support you.

Payments

We accept payments through Viva Wallet. When processing payments, some of your data will be passed to Viva Wallet, including information required to process or support the payment, such as the purchase total and billing information.

Please see Viva Wallet Security Info for more details.

Controlling your personal information

You may choose to restrict the use of your personal information in the following ways:

If you have previously given us your contact details by filling out a web form, you may request that we refrain from using it for marketing purposes by emailing. We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law. You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy and cookie policy. You should exercise caution and look at the privacy statement applicable to the website in question. We are in now way liable for any problems you may have when on another website that is not ours or under our control.

Marketing emails

If you have SUBSCRIBED to our marketing emails you can easily UNSUBSCRIBE from them by following the link at the bottom of our marketing emails.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law. You may request details of personal information which we hold about you under the Data Protection Act 1998. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.

We contact MailChimp in order to subscribe users and retrieve information about email lists and groups. When processing subscriptions, some of your data will be passed to MailChimp, including information required to target your account, such as the billing information and the product(s) you’re purchasing.

Please see the MailChimp Privacy Policy for more details.

Cookie Policy

What is a cookie?

Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device. Cookies do lots of different jobs, like remembering the items you put in your cart, your preferences, and generally improve the user experience. Also to help us understand visitor habits and to enable us to market our website.

Cookies can be deleted by clearing your browser cache/deleting web history.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Analytics

Performance cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works. We use cookies for Google Analytics so that it can track visitor quantities, locations and browsing habits and thus they help us to improve our website and services.

Google Analytics uses the following cookies on this website:

Cookie Name Expiration Time Description
_ga 2 years Used to distinguish users.
_gid 24 hours Used to distinguish users.
_gat 1 minute Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_property-id.

If you follow this Google link you can opt out of Google Analytics performance cookies

By using our website, you agree that we can place these types of cookies on your device.

Security

How we protect your data

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Our website is HTTPS secure and has been validated to have a secure SSL certificate which provides industry standard data encryption of information transferred from your computer to the website.

All our website pages are secured with SSL 256 bit encryption. Our SSL Digital Certificate is provided by Let's Encrypt and has the SHA-256 Hash Signature Algorithm with Asymmetric RSA Encryption.

Our Payment Gateway Provider is fully PCI DSS/CISP certified, meaning it exceeds industry standards in solidifying hardware and hosting facilities. We do not see or retain any card numbers on our website because you are directly providing payment details to the Payment Gateway Provider.

The only staff that have access to customer data are Order Processors, and they have been trained in Data Protection.

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 14 days.

This site is scanned for potential malware and vulnerabilities by Sucuri's SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in reviews) during their scan. For more details, please see Sucuri's privacy policy.

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy and cookie policy. You should exercise caution and look at the privacy statement applicable to the website in question. We are in no way liable for any problems you may have when on another website that is not ours or under our control.

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our plugin. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. If your browser does not support web fonts, a standard font is used by your computer.

Login

Lost your password?

Create an account?

Basket

Your basket is currently empty.