Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how [Company Name] ("we", "us", "our") collects, uses, stores and protects your personal data when you visit our website, create an account or place an order. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.

1. Data Controller

The data controller responsible for your personal data is:

[Company Name]
[Address]
Email: [Email]
Company registration / VAT no.: [Registration Number]

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity & contact data: name, date of birth / age confirmation, email address, phone number, billing and shipping address.
Order data: products purchased, order value, order history, delivery details.
Payment data: payment method and transaction reference. Full card details are processed by our payment providers and are not stored by us.
Technical data: IP address, browser type and version, device information, time zone, and pages visited.
Usage data: how you use our website, products viewed, and preferences.
Marketing data: your preferences for receiving marketing communications.

3. How We Use Your Data and Our Legal Bases

We process your personal data on the following legal bases under Article 6 GDPR:

Performance of a contract: to process and deliver your orders, manage your account, and provide customer support.
Legal obligation: to verify age, maintain tax and accounting records, and comply with consumer-protection and product-safety laws.
Legitimate interests: to prevent fraud, secure our website, improve our products and services, and conduct analytics — balanced against your rights.
Consent: to send marketing communications where you have opted in, and to place non-essential cookies. You may withdraw consent at any time.

4. Age Verification

Our products are for adults only. We process age-related data to comply with legal obligations and to prevent sales to minors. Where age verification cannot be confirmed, we may refuse or cancel an order.

5. Sharing Your Data

We share personal data only where necessary, and with appropriate safeguards, with:

payment processors and fraud-prevention providers;
shipping carriers and logistics partners to deliver your order;
IT, hosting and email service providers acting as our processors;
professional advisers, and law-enforcement or regulatory authorities where required by law.

We do not sell your personal data.

6. International Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Data Retention

We retain personal data only as long as necessary for the purposes described above, or as required by law. Order and tax records are typically retained for the period required by applicable accounting and tax legislation. Marketing data is retained until you unsubscribe or withdraw consent.

8. Cookies and Tracking

We use cookies and similar technologies to operate the website, remember your preferences, and analyse traffic. Where required by law, we ask for your consent before setting non-essential cookies. You can manage or disable cookies through your browser settings; some features may not work properly without them.

9. Your Rights

Under the GDPR you have the right to:

access the personal data we hold about you;
request rectification of inaccurate or incomplete data;
request erasure of your data ("right to be forgotten");
restrict or object to our processing;
data portability — receive your data in a structured, machine-readable format;
withdraw consent at any time, where processing is based on consent;
lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at [Email]. We will respond within the timeframe required by law. You also have the right to complain to your local data-protection authority.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including encryption in transit, access controls and secure payment handling. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our website and products are not intended for anyone under the legal smoking/vaping age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date.

13. Contact

For any privacy-related question or request, contact:

[Company Name]
[Address]
Email: [Email]
Phone: [Phone]