Who We Are

This Privacy Policy explains how Zhd Vape Store (“we”, “us”, “our”) collects, uses and shares personal information when you visit our website, create an account or place an order. For data-protection purposes, Zhd Vape Store is the data controller. You can contact us at info@zhdvapestore.co.uk.

Age Restrictions

We do not sell to, market to, or knowingly collect information from anyone under 18. By using our site, you confirm that you are 18 or over.

Information We Collect

• Information you provide: name, email, phone (optional), billing and delivery addresses, account details, date of birth (where age verification is required), order details, support messages, review/feedback content, marketing preferences.
• Information collected automatically: device and browser information, IP address, site usage and analytics data, cookies and similar technologies (see “Cookies” below).
• Information from third parties: age-verification providers (e.g. AgeChecked), payment processors, fraud-prevention partners, and couriers receiving delivery details for your order.

How We Use Your Information (Legal Bases)

• To perform a contract: process and fulfill orders, take payment, provide customer support, arrange delivery, manage returns and warranties, verify age where required.
• For our legitimate interests: operate and improve our website and services, keep records, prevent fraud/abuse, personalize your experience, measure marketing performance, and send service or product updates similar to past purchases (you can opt out at any time).
• With your consent: send promotional emails/SMS where required by law; use non-essential cookies/analytics; you can withdraw consent at any time.
• To comply with legal obligations: tax/VAT reporting, consumer protection, product safety/recall, responding to lawful requests from authorities, and maintaining appropriate business records.

How We Share Information

We do not sell your personal information. We share it only as needed to run our business and fulfill your order, including with:

• Shopify (store platform/hosting). Learn how Shopify processes data at privacy.shopify.com.
• Payment providers (e.g., card processors, PayPal) to take and manage payments.
• Couriers (e.g., Royal Mail, DPD, DHL, Yodel, Evri) for delivery and tracking.
• Age-verification provider (e.g., AgeChecked) to confirm you are 18+; this is an ID check, not a credit check.
• Analytics and communications tools (e.g., email service providers, error-logging) to operate our site and communicate with you.
• Professional advisers (legal/accounting) and authorities where required by law, and in connection with business transfers or reorganisation.

Cookies

We use cookies and similar technologies to operate our site, remember your preferences, analyse traffic and, where you consent, to deliver and measure marketing. You can manage cookies in your browser settings and (where available) via our on-site cookie banner. For more detail, please see our Cookie Policy.

Security and Retention

We use administrative, technical and organisational safeguards to protect personal information. However, no security measures are perfect or impenetrable, and information sent over the Internet may not be secure in transit.

We keep personal information only as long as necessary for the purposes described in this policy, including to provide services, comply with legal obligations and resolve disputes. For example, we generally retain basic order records for up to six years for tax and accounting requirements. Marketing preferences are kept until you unsubscribe or we no longer need the data.

International Transfers

We may transfer, store and process information outside the UK/EEA (for example, because Shopify or our service providers use global infrastructure). Where we do, we rely on recognised safeguards such as the UK/EU Standard Contractual Clauses or an adequacy decision.

Your Rights

Depending on your location and subject to legal limits, you may have the right to: access the personal information we hold about you; correct inaccuracies; delete your information; restrict or object to processing; data portability; and, where processing is based on consent, to withdraw consent at any time.

You can manage marketing emails by using the unsubscribe link in our messages. To exercise other rights, contact us at info@zhdvapestore.co.uk. We may need to verify your identity before acting on a request. You may also authorise an agent to act on your behalf as permitted by law.

Complaints

If you have concerns about how we handle your data, please contact us first at info@zhdvapestore.co.uk and we will try to resolve them. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or with your local data-protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal or regulatory changes. We will post the revised version here with an updated “Last updated” date.

Contact Us

Questions about this Privacy Policy or your personal information? Email us at info@zhdvapestore.co.uk.