Loading...
Loading...
Last updated: February 2026
Vapers Pantry Ltd (Company No. 12684772, VAT No. 426 462 790) is the data controller responsible for your personal data. We operate the website vaperspantry.com and our retail premises at 39 Birmingham New Road, Wolverhampton, WV4 6BL. If you have questions about this policy or your data, contact us at sales@vaperspantry.com.
We collect the following personal data when you interact with us:
Account information: name, email address, phone number, delivery address, and password (encrypted) when you register an account. Order information: items purchased, payment details (processed securely by Trust Payments — we do not store card numbers), delivery address, and order history. Loyalty programme data: QR code identifier, points balance, tier status, and transaction history. Age verification: confirmation that you are 18 or over (we do not collect date of birth). Technical data: IP address, browser type, device information, and pages visited via cookies and analytics. Communications: any emails or messages you send us.
We use your data for the following purposes:
Fulfilling orders: processing payments, dispatching products, sending shipping notifications, and handling returns (legal basis: contract performance). Account management: maintaining your account, loyalty points, and order history (legal basis: contract performance). Legal compliance: age verification for restricted products and tax/VAT record-keeping (legal basis: legal obligation). Communication: sending order confirmations, shipping updates, and responding to enquiries (legal basis: contract performance and legitimate interest). Marketing: only if you opt in — promotional emails about products and offers (legal basis: consent). You can unsubscribe at any time. Improving our service: analysing website usage to improve the shopping experience (legal basis: legitimate interest).
We share your data only with trusted third parties necessary to operate our business:
Trust Payments: payment processing (PCI DSS compliant). Royal Mail: shipping and delivery services. Resend: transactional email delivery. Supabase: secure cloud database hosting (EU/UK data centres). Vercel: website hosting. We do not sell your personal data to any third party.
We use cookies and similar technologies on our website. Essential cookies are required for the site to function (e.g. shopping cart, age verification, authentication). Analytics cookies help us understand how visitors use the site. You can manage your cookie preferences using the cookie consent banner that appears on your first visit. For full details, see our cookie consent preferences.
We retain your personal data for as long as necessary: account data is kept while your account is active and for 6 years after closure for tax purposes; order records are kept for 6 years as required by HMRC; marketing consent records are kept until you withdraw consent; website analytics data is retained in anonymised form.
Under UK GDPR, you have the right to:
Access your personal data and request a copy. Rectify inaccurate or incomplete data. Erase your data ("right to be forgotten") where there is no compelling reason to keep it. Restrict processing of your data in certain circumstances. Data portability: receive your data in a structured, commonly used format. Object to processing based on legitimate interest or direct marketing. Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at sales@vaperspantry.com. We will respond within one month.
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure password hashing, PCI-compliant payment processing, and restricted access controls. While no system is 100% secure, we take reasonable steps to protect your information.
We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The "last updated" date at the top indicates when this policy was last revised.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concerns first, so please contact us at sales@vaperspantry.com.