Privacy policy

PRIVACY POLICY

Last updated: September 12, 2026

This Privacy Policy explains how Vape & Toys Store (“we”, “us” or “our”) collects, uses, shares and protects your personal information when you visit, use our services or make a purchase from https://vapetoysstore.co.uk (the “Website”).

It also explains your privacy rights under applicable UK data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. WHO WE ARE

Vape & Toys Store is the controller of the personal information described in this Privacy Policy.

Our contact details are:

Vape & Toys Store
25 County Road
Liverpool
L4 3QA
United Kingdom

Email: contact@vapetoysstore.co.uk
Telephone: +44 7473 996139
Website: https://vapetoysstore.co.uk

2. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our Website, we may collect the following categories of personal information:

Information You Provide

  • Your name

  • Billing and delivery addresses

  • Email address

  • Telephone number

  • Account login and profile information

  • Order and transaction information

  • Product preferences

  • Customer-service messages and enquiries

  • Reviews, feedback and other information you choose to provide

  • Age-verification information, where required by law

Payment Information

Payments are processed by our authorised payment providers.

We may receive limited payment information, such as the payment method used, payment status and transaction reference. We do not normally receive or store your complete debit or credit card number.

Information Collected Automatically

When you use our Website, we may automatically collect:

  • Internet Protocol address

  • Browser type and version

  • Device type and operating system

  • Pages viewed

  • Links clicked

  • Date and time of visits

  • Referring website

  • Shopping and browsing activity

  • Cookie identifiers

  • Diagnostic and security information

Information From Third Parties

We may receive information from:

  • Shopify, which provides our ecommerce platform

  • Payment providers

  • Delivery and fulfilment companies

  • Analytics and advertising providers

  • Fraud-prevention and age-verification providers

  • Social media platforms when you interact with our accounts or advertisements

  • Publicly available sources, where permitted by law

3. HOW WE USE YOUR INFORMATION

We may use your personal information to:

  • Process and fulfil your orders

  • Take and verify payments

  • Deliver products to you

  • Create and manage your customer account

  • Communicate with you about your orders

  • Respond to questions, complaints and return requests

  • Verify age where required for restricted products

  • Detect and prevent fraud, misuse and security incidents

  • Maintain and improve our Website and services

  • Personalise your shopping experience

  • Analyse Website performance and customer behaviour

  • Send marketing communications where permitted

  • Comply with legal, tax, accounting and regulatory obligations

  • Establish, exercise or defend legal claims

  • Protect our rights, customers, staff and business

4. OUR LAWFUL BASES

Under UK data protection law, we must have a lawful basis for processing your personal information.

We may rely on the following lawful bases:

Performance of a Contract

We process information when necessary to accept payment, fulfil an order, deliver products, process returns or provide requested customer support.

Legal Obligation

We process information when necessary to comply with tax, accounting, consumer-protection, age-restriction and other legal requirements.

Legitimate Interests

We may process information for our legitimate business interests, including:

  • Preventing fraud and misuse

  • Securing our Website

  • Improving our services

  • Managing customer relationships

  • Understanding business performance

  • Establishing or defending legal claims

We only rely on legitimate interests where those interests are not overridden by your rights and freedoms.

Consent

We may rely on your consent for certain marketing communications, non-essential cookies and similar technologies.

You may withdraw your consent at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

5. COOKIES AND TRACKING TECHNOLOGIES

Our Website uses cookies, pixels and similar technologies.

Cookies are small files stored on your device. They may be session cookies, which expire when you close your browser, or persistent cookies, which remain until they expire or are deleted.

We may use the following categories of cookies:

Essential Cookies

These cookies are required for the Website to operate. They support functions such as shopping baskets, checkout, account login, security and fraud prevention.

Functionality Cookies

These cookies remember choices such as your location, language and account preferences.

Analytics Cookies

These cookies help us understand how visitors use our Website so that we can measure performance and improve our services.

Advertising Cookies

These cookies may be used to measure advertising performance and show you more relevant advertisements.

Where required by law, we will obtain your consent before placing non-essential cookies on your device.

You can manage your choices through our cookie banner or browser settings. Disabling certain cookies may affect how the Website operates.

6. MARKETING COMMUNICATIONS

We may send you marketing communications where you have consented or where otherwise permitted by law.

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in a marketing email

  • Adjusting your communication preferences, where available

  • Contacting us at contact@vapetoysstore.co.uk

We may still send non-marketing messages relating to orders, payments, deliveries, returns, security or changes to our services.

7. HOW WE SHARE YOUR INFORMATION

We may share personal information with trusted service providers when necessary to operate our business.

These may include:

  • Shopify and ecommerce service providers

  • Payment processors

  • Banks and payment networks

  • Delivery, courier and fulfilment companies

  • IT, hosting and security providers

  • Analytics and advertising providers

  • Customer-support providers

  • Fraud-prevention and age-verification providers

  • Accountants, insurers, lawyers and professional advisers

  • Government authorities, regulators, courts and law-enforcement agencies

Service providers may only use personal information for the services they provide to us and in accordance with applicable data protection requirements.

We may also disclose personal information in connection with a merger, acquisition, restructuring or sale of all or part of our business.

We do not sell your personal information for money.

8. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is used. This may include:

  • Transferring information to a country recognised as providing adequate protection

  • Using approved contractual safeguards

  • Relying on another valid transfer mechanism permitted by UK law

You may contact us for further information about the safeguards that apply to international transfers of your personal information.

9. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period may depend on:

  • The nature and sensitivity of the information

  • The reason it was collected

  • Legal, tax and accounting requirements

  • Fraud-prevention and security needs

  • The need to resolve disputes

  • The need to establish or defend legal claims

When personal information is no longer required, we will delete or anonymise it where reasonably possible.

10. DATA SECURITY

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access

  • Accidental loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

However, no method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential. Please contact us immediately if you believe your account or personal information has been compromised.

11. YOUR PRIVACY RIGHTS

Depending on the circumstances, you may have the right to:

  • Be informed about how we use your personal information

  • Request access to your personal information

  • Request correction of inaccurate or incomplete information

  • Request deletion of your personal information

  • Request restriction of processing

  • Object to certain processing

  • Request transfer of your information in a portable format

  • Withdraw consent at any time

  • Object to direct marketing

  • Challenge certain decisions made solely through automated processing

These rights are not absolute and may be subject to legal exceptions.

To exercise a privacy right, contact us at contact@vapetoysstore.co.uk. We may need to verify your identity before completing your request.

You will not normally be required to pay a fee. However, we may charge a reasonable fee or refuse a request if it is clearly unfounded, repetitive or excessive, where permitted by law.

12. YOUR RIGHT T