Privacy notice

1. Who is responsible for your data

The controller of your personal data is Spectrum Vaping. If you have any questions about this notice or how we use your data, email hello@spectrumvaping.co.uk.

2. Data we collect

• Identity and contact data: your name, email address, phone number and delivery address.
• Order data: the products you buy, order value, delivery choice and order history.
• Age verification data: your confirmation that you are 18 or over, the result of the age check and, if we need it, a copy of photo ID.
• Payment data: confirmation from our payment provider that a payment succeeded. We never receive or store your full card number.
• Technical data: your IP address, browser and device type, recorded to keep the site secure and prevent fraud.
• Usage data: with your consent, how you use the website, collected by analytics cookies.
• Marketing preferences: whether you have opted in to receive emails from us.

3. How we use your data and our lawful basis

4. Who we share your data with

We share your data only as far as needed with:

• our payment provider, to take payment securely;
• our age verification provider, to confirm you are 18 or over;
• Royal Mail and DPD, to deliver your order;
• our website hosting, email and IT suppliers, who process data on our instructions;
• professional advisers, auditors and authorities such as HMRC or Trading Standards, where the law requires it.

We never sell your personal data.

5. International transfers

Some of our suppliers may process data outside the UK. Where they do, we make sure your data is protected by a UK adequacy decision or the International Data Transfer Agreement approved by the Information Commissioner.

6. How long we keep your data

Order, payment and age verification records are kept for six years after the end of the financial year in which you ordered, to meet tax and legal obligations. Copies of photo ID are deleted once your age is confirmed. Marketing preferences are kept until you unsubscribe. Analytics data is kept for 14 months.

7. How we protect your data

Our website is served over an encrypted connection. Access to customer data is restricted to staff who need it, protected by strong passwords, and logged. Card payments are handled entirely by our payment provider.

8. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data, where we no longer have a reason to keep it;
• object to or restrict how we use your data;
• ask us to transfer your data to another organisation;
• withdraw your consent at any time, for example to marketing or analytics.

To use any of these rights, email hello@spectrumvaping.co.uk. We will reply within one month. There is no charge.

9. Marketing

We only send marketing emails if you opt in at checkout. Every email includes an unsubscribe link, and you can opt out at any time by emailing us. We never send marketing to anyone we know to be under 18.

10. Cookies

We use cookies and similar technologies as described in our cookie policy. Analytics and advertising cookies are only set with your consent.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Changes to this notice

We may update this notice from time to time. The latest version is always on this page, with the date it was last updated.