1. Introduction

Vapes2You ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our delivery service.

We operate exclusively within Bristol, UK, providing local vape device delivery services to verified adults aged 18 and over.

2. Information We Collect

2.1 Personal Information

We collect the following information when you place an order:

Full name
Phone number (for delivery coordination and SMS updates)
Delivery address (Bristol postcodes only)
Date of birth (for age verification)
ID document type and number (for age verification - not stored after verification)
Payment information (processed securely via Stripe)

2.2 Age Verification Data

UK law requires us to verify that all customers are aged 18 or over before selling nicotine products. We collect date of birth and ID information solely for this purpose. We do not store your ID number after verification is complete.

2.3 Automatically Collected Information

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device information
Pages visited and time spent
Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

Process and fulfil your orders
Verify your age as required by UK law
Coordinate delivery via SMS updates
Contact you regarding your order
Process payments securely
Comply with legal obligations
Improve our website and services
Prevent fraud and ensure security

4. Data Sharing

We may share your information with:

Payment processors: Stripe processes your payment information securely
Age verification services: To verify you are 18+
SMS service providers: To send delivery updates
Delivery drivers: Your name, phone, and address for delivery coordination
Law enforcement: When required by law

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate security measures including:

SSL/TLS encryption for all data transmission
Secure payment processing via Stripe (PCI-DSS compliant)
Limited access to personal data on a need-to-know basis
Regular security assessments

6. Data Retention

We retain your data as follows:

Order records: 7 years (for tax and legal compliance)
Age verification records: Outcome stored, ID numbers not retained
Payment data: Stored by Stripe according to their retention policy
Marketing preferences: Until you opt out

7. Your Rights (GDPR)

Under UK GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request erasure of your data
Restrict processing
Data portability
Object to processing
Withdraw consent at any time

To exercise these rights, contact us at privacy@vapes2you.co.uk

8. Cookies

We use essential cookies for website functionality including:

Session management
Age verification status
Cart contents
Security tokens

9. Contact Us

For privacy-related enquiries:
Email: privacy@vapes2you.co.uk
Address: Bristol, United Kingdom

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with a new "Last updated" date.