Privacy Policy

1. Who Controls Your Personal Data?

Vape Nexus is the trading name used for this website. The business operating vapenexus.co.uk is responsible for the personal data it handles as controller, unless a particular service clearly identifies another controller. To request the operator's full legal identity and postal correspondence details or to exercise a privacy right, email Vapenexusuk@gmail.com. You can also request a postal contact for formal correspondence using the email address above.

2. Information we Collect

We may collect account and contact details (name, email and contact number); delivery and billing information; order contents and transaction records; customer-support communications; payment-related transaction identifiers; age-verification details or outcomes; and technical records such as browser type, approximate location, IP address, security logs, device information and cookie choices. We do not need customers to send full payment-card numbers to our support team. Payment details are generally processed by our authorised payment provider.

3. Why we Use Personal Information

We process personal data to operate the website, manage accounts, fulfil orders, arrange delivery, handle cancellations and returns, respond to enquiries, verify ages, prevent fraud, keep appropriate financial records, protect the website and meet legal duties. Where permitted, we may also use limited information to understand service performance or send customer communications that comply with applicable electronic-marketing law.

4. Lawful Bases

Depending on the activity, processing may be necessary to perform a contract; comply with a legal obligation; pursue legitimate interests such as security and fraud prevention where balanced against individual rights; or rely on consent where that is legally required. The exact basis for age verification and any marketing must be validated against the provider's implementation. We do not rely on a general statement of consent to justify all data processing.

5. Age Verification

Vape Nexus must restrict relevant sales to people aged 18 or over. An appointed provider may process details necessary to verify a customer's age. Details of any appointed age-verification provider, the data it receives and its own privacy notice should be presented in the relevant secure verification flow. Verification outcomes and relevant audit records may be kept for lawful compliance purposes.

6. Payments, Delivery and Service Providers

We may share the minimum required information with payment processors, the e-commerce platform and hosting provider, delivery partners, age-verification services, technical-support services and relevant legal or professional advisers. The specific service providers used for your transaction may be identified in the applicable checkout, payment and verification notices. The data shared depends on which service is used to handle your order or enquiry. Providers must have suitable contractual and technical safeguards.

7. Analytics, Cookies and Similar Technologies

Some cookies are required to operate the shopping basket, authentication and security. Optional analytics or other tracking technologies are managed according to applicable rules and the choices presented in our consent interface. More information appears in the Cookie Policy. You can manage optional technologies through the consent settings presented on the site where those technologies are used.

8. Direct Marketing and Communications

We will not assume that placing an order creates unrestricted permission to send promotional vaping communications. Any customer emails must comply with the UK rules governing electronic marketing and advertising of regulated vaping products. Service communications about orders or safety notices are treated separately from marketing messages.

9. International Data Transfers

Some technology providers may process personal data outside the UK. Where applicable, we use a valid transfer mechanism and safeguards required by UK data protection law. Information about relevant third-country transfers may be requested from the privacy contact listed below.

10. Retention and Security

We retain personal data only for as long as reasonably required for the relevant purpose, including applicable tax, accounting, fraud-prevention, consumer-dispute or regulatory obligations. We use appropriate access controls, service-provider arrangements and security measures. No online system can be guaranteed to be completely secure. If you need information about the retention period for a particular category of data, you can request it by email.

11. Your Rights

Subject to the conditions and exceptions under UK data protection law, you may have rights to access your personal information, correct inaccurate data, request erasure, restrict or object to certain processing, receive portable data and withdraw consent where processing relies on consent. You may also complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk/. To exercise rights, use Vapenexusuk@gmail.com; we may need to verify your identity before responding.

12. Children's Information

Vape Nexus does not knowingly sell restricted vaping and nicotine products to people under 18. If we discover that a minor has attempted to order, we may process limited information to handle the matter lawfully, prevent misuse and meet relevant duties.

13. Changes to this Policy

We may update this notice when our services, suppliers or legal obligations change. The current version and its effective date will appear on this page. Significant changes will be communicated where required by law.

14. Contact Us

Privacy contact: Vapenexusuk@gmail.com
Website: https://vapenexus.co.uk/
Formal postal requests: Email the privacy contact to request the current verified correspondence address. Use the email address above to request details of the correct postal correspondence address.