Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you   visit or make a purchase from https://www.vape40k.com (the “Site”).

COLLECTION OF PERSONAL DATA

When you visit the website  www.vape40k.com  , we,  vape40k.com , automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. In addition, we collect information about the individual web pages or products you view, which websites or search terms brought you to the Site, and how you interact with the Site. We refer to this automatically collected information as “Device Information.”

We collect device information using the following technologies:

  • “Cookies”  are small pieces of data placed on your device, often containing an anonymous unique identifier. For more information about cookies and how to disable them, please visit  www.allaboutcookies.org .
  • “Log files”  track actions on the website and collect data such as your IP address, browser type, Internet service provider, entry and exit pages, and date/time stamps.
  • “Web beacons,” “tags,” and “pixels”  are electronic files used to store information about how you browse the website.

LEGALITY OF PROCESSING

Your personal data is processed on the basis of the following legal bases in accordance with the General Data Protection Regulation (GDPR):

  • Consent  (Art. 6 (1) (a) GDPR) if you have given us your consent to process your personal data.
  • Performance of a contract  (Article 6 (1) (b) GDPR), if processing is necessary to perform a contract.
  • Legal obligations  (Article 6 (1) (c) GDPR), if processing is necessary to fulfill a legal obligation.
  • Legitimate interests  (Art. 6 (1) (f) GDPR), if processing is necessary to protect our legitimate interests, e.g. to improve the user experience or to analyze website traffic.

RETENTION PERIOD

We only store your personal data for as long as necessary to fulfill the purposes stated above or as required by law. After that, your data will be securely deleted or anonymized.

SHARING YOUR INFORMATION

Where you have asked us to provide a restricted product or service, we may share your information with One Account Mobile Limited (1account) and third parties for identity verification purposes. This is necessary to ensure you meet the minimum age and identity requirements under relevant UK regulations. You can view 1account’s privacy policy on their website:  1account.net .

DATA TRANSFER OUTSIDE THE EU

If your personal data is transferred to countries outside the European Union, we will ensure that appropriate protective measures are taken in accordance with the GDPR to ensure the security of your data.

AUTOMATED DECISION-MAKING

We do not use any automated decision-making or profiling techniques that could have legal effects concerning you or similarly significantly affect you.

YOUR RIGHTS

If you are based in the EU, you have the right:

  • to obtain access  to your personal data;
  • to request rectification  of your personal data if it is inaccurate or incomplete;
  • to request erasure  of your personal data when it is no longer required or when you withdraw your consent;
  • Object  to the processing of your data if it is based on legitimate interests.

To exercise these rights, please contact us using the contact address below:  [email protected]