Last updated: 9 April 2026
Vapourium LTD (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains how we collect, use, and protect your information when you use our website: www.vapourium.co.uk.
1. Information We Collect
Information You Provide
- Name
- Email address
- Billing and delivery address
- Payment details
- Account login details
- Purchase history
Automatically Collected Data
- IP address
- Device and browser information
- Cookies and tracking data
Age Verification Data
As we sell age-restricted products, we may collect data necessary to verify that you are 18 years or older. This may include date of birth or verification via third-party age verification services.
2. How We Use Your Information
We process your data under the following lawful bases:
- Contractual necessity
- Legal obligations
- Legitimate interests
- Consent
We use your data to:
- Process and fulfil orders
- Manage your account
- Verify your age (legal requirement)
- Communicate with you
- Send marketing (with consent)
- Improve our website and services
3. Sharing Your Information
We only share your data where necessary:
- Payment providers
- Delivery companies
- IT and hosting providers
- Legal authorities (if required)
We do not sell your personal data.
4. Cookies
We use cookies to:
- Operate our website
- Analyse traffic
- Personalise content
You can manage cookies via your browser settings.
See our Cookie Policy: Cookie Policy
5. Age Restrictions
Our products are strictly for individuals aged 18 or over.
We may:
- Verify your age before completing a purchase
- Refuse or cancel orders if age cannot be verified
6. Data Retention
We retain your personal data only as long as necessary:
- Order data: up to 6 years (legal requirement)
- Account data: until account deletion
- Marketing data: until consent withdrawn
7. Data Security
We use appropriate technical and organisational measures to protect your data.
However, no system is completely secure.
8. Your Rights
Under UK GDPR, you have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Data portability
To exercise your rights, contact us below.
You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk
9. Marketing
You can opt out of marketing at any time by:
- Clicking “unsubscribe” in emails
- Contacting us directly
We will still send essential service communications.
10. Data Breaches
In the event of a data breach, we will:
- Investigate immediately
- Notify the ICO within 72 hours (if required)
- Inform affected users where necessary
11. Third-Party Services
We may use third-party services such as:
- Payment processors
- Analytics providers
- Google Maps
- Age verification services
12. Updates to This Policy
We may update this policy periodically. Updates will be posted on this page.
13. Contact Us
Data Protection Officer: Sam Street
Email: sam@vapourium.co.uk
Address:
Vapourium LTD
153A West Street
Fareham
PO16 0DZ
United Kingdom
14. Your Data Requests
You may request to:
- Access your data
- Update your data
- Delete your data
We will respond within 30 days.
