Privacy policy
This privacy policy describes how the website www.vapepurchase.com (referred to below as the “Website” or “we”) collects, uses and shares personal data when you visit our website or place an order through it. We process your data strictly within the framework of the applicable legislation, in particular the General Data Protection Regulation (GDPR), and we limit ourselves to the data that is genuinely required for the purpose in question.
The controller responsible for data processing on this website is the operator of vapepurchase.com. Below we explain which data we process, for what purpose, where it comes from, on what legal basis the processing rests, how long we store your data, and what rights you have. Please read this policy carefully before using our website or placing an order.
Contact for privacy questions
If you have further questions after reading this policy, need additional information about our privacy practices, or wish to lodge a complaint, you can contact us at any time. The simplest route is an e-mail to vapepurchase7@gmail.com. We deal with privacy requests promptly and come back to you with a reply.
So that we can match your request quickly, please include your order number where possible if your question relates to a specific order. You will find other ways to reach our team on our Contact page. You can also write to us there if you are unsure whether your enquiry concerns data protection — we will pass it on internally to the right place.
What personal data do we collect?
When you visit the website we automatically collect certain data about you and your device. In addition, we process the data you give us yourself when you contact us or place an order. Processing is always purpose-bound; we do not collect data that we do not need for the purpose described.
1. Device information
Purpose: we use this information to display the website correctly on your device, to analyse how our offering is used and to keep improving the website. The analysis is carried out in aggregated form and serves to identify technical problems and to make content easier to follow.
Source: the data is collected automatically, among other things with the help of cookies, log files, web beacons, tags and pixels. These techniques do not store complete customer records, only technical characteristics of your visit.
Data: what is recorded includes browser type, IP address, time zone, cookie data, the pages or products you visited, your search terms, and information about how you use the website.
2. Order information
Purpose: we process your order data in order to handle the purchase, process payment details, arrange shipping and invoicing, send order confirmations, detect and prevent fraud attempts, and send you marketing communications in line with your preferences. Without this information we cannot fulfil an order.
Source: you provide this information yourself as part of the ordering process. We do not collect it from third parties.
Data: what is recorded includes your name, billing address, delivery address, payment details (for example card or bank account details), e-mail address and telephone number. If you pay cash on delivery, no online payment data arises; payment is then made directly on delivery.
3. Communication with customer service
Purpose: we process your details in order to provide support, handle your enquiry and answer follow-up questions about your order. This also includes documenting the case so that you do not have to repeat everything if you contact us again.
Source: the data comes from you and is provided by you when you get in touch — for example by e-mail, through our WhatsApp channel or through the contact form on the website.
Minors
This website is not intended for people under 18 years of age. We do not knowingly collect personal data from children. If, as a parent or guardian, you find that your child has given us personal data, please contact us using the contact details above. We will delete the data concerned at your request.
We also refer you to our Age policy, which describes how we make sure that orders for our products are placed exclusively by people aged 18 and over.
Sharing personal data
We may share your personal data with service providers acting on our behalf so that we can deliver our services and meet our contractual obligations. We only pass on the data that is required for the purpose in question, and we oblige recipients to treat it confidentially. Typical recipients are, for example, carriers, payment providers and IT service providers who operate our systems. Examples of sharing include:
- meeting legal obligations, for example in response to a subpoena or a court order,
- protecting our legal interests, for instance to assert or defend claims,
- passing statistical or marketing-related information to external advertising partners.
The rules that apply to orders, payments and cancellations are set out in our Terms & conditions. Information about how we handle returns can be found in our Returns & refunds policy.
Behavioural advertising
We also use your personal data for marketing purposes, to show you advertising that is likely to interest you. We are economical about this and use only the data required for targeting and for measuring success.
- Google Analytics: with Google Analytics we understand how our visitors use the website. Further information about data processing by Google is available in the Google privacy policy.
- Opting out: if you do not want Google Analytics to record your visit, you can install the Google Analytics opt-out browser add-on and disable recording permanently.
Targeted advertising: we may share information about your purchases or your use of the website with other platforms so that we can show you suitable advertising there. This is information that can be linked to you or your device.
Further information about how interest-based advertising works and how you can opt out is available on the Network Advertising Initiative (NAI) information page.
Use of the data
We use your personal data to provide our services. This includes in particular:
- selling our products,
- processing payments,
- processing and fulfilling orders,
- informing you about new products and offers.
We inform you about new products and offers within the communication you have opted into. If you no longer want to receive such information, a short message to our customer service is enough; we will then stop sending it. We have also collected answers to questions about orders, shipping and returns under FAQ.
Legal bases under the GDPR
If you are resident in the European Economic Area (EEA), we process your personal data on the basis of the following legal grounds:
- Your consent: you have expressly agreed to the processing of your data for a particular purpose. You can withdraw consent you have given at any time with effect for the future.
- Performance of a contract: processing is necessary to perform a contract with you or to carry out preparatory steps at your request.
- Compliance with a legal obligation: we are legally required to process certain data, for example for invoicing and accounting.
- Protection of vital interests: processing is necessary to protect your vital interests or those of another person.
- Task in the public interest: processing is necessary for the performance of a task carried out in the public interest.
- Legitimate interests: processing is necessary to safeguard our legitimate interests, provided your fundamental rights and freedoms do not override them.
Data retention
If you place an order through the website, we keep your data until you ask us to delete it. The options available to you are described in the “Your rights” section. Independently of that, statutory retention obligations may prevent immediate deletion; in that case we restrict processing to the extent required by law.
Automated decision-making
If you are resident in the EEA, you have the right to object to automated decision-making. This right also applies to profiling that has legal effects for you or affects you in a similarly significant way. If you wish to exercise this right, please contact our customer service; we will review your case and inform you about the next steps.
Your rights
Depending on where you live, different rights apply to you. We implement these rights as soon as you exercise them towards us. It can help us match your request if you give us your order number.
GDPR (citizens in the EEA)
- access to the personal data we have stored about you,
- portability of your data to another service,
- rectification, updating or deletion of your data.
CCPA (residents of California)
- the right to know what data we have stored about you,
- portability of your data to another service,
- the right to request rectification, updating or deletion of your data.
In addition, you have the right to complain to a data protection supervisory authority about the processing of your personal data. The competent authority is normally the one at your habitual residence, your place of work or the place of the alleged infringement. You are of course welcome to contact us first — we are happy to clarify your concern and will reply using the contact details given in the “Contact for privacy questions” section.
Cookies
Cookies are small units of data that are stored on your device when you visit the website. They make sure that basic functions of the website work reliably, and they help us analyse how our offering is used and show you relevant content and advertising. We use the following categories:
- functional cookies,
- analytical cookies,
- advertising cookies,
- social media cookies.
You can restrict, block or delete cookies at any time in your browser settings. Please note that individual functions of the website may then no longer be fully available, for example the basket or the login.
Changes to this privacy policy
We reserve the right to update this policy from time to time when our business activity, the legal situation or regulatory requirements change. We publish the current version on this page; earlier versions cease to apply when the new version is published. We recommend checking this page at regular intervals so that you know how we protect your data.
Complaints
Would you like to lodge a complaint? Then please use the contact details given in the “Contact for privacy questions” section of this policy. If you would rather contact us in writing, simply request the postal address by e-mail — we will give it to you and accept your letter. We take every complaint seriously, review the facts carefully and come back to you with a reply.