Privacy Policy
Last updated: 08 February 2026
1. Introduction
Vapes2You ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our delivery service.
We operate exclusively within Bristol, UK, providing local vape device delivery services to verified adults aged 18 and over.
2. Information We Collect
2.1 Personal Information
We collect the following information when you place an order:
- Full name
- Phone number (for delivery coordination and SMS updates)
- Delivery address (Bristol postcodes only)
- Date of birth (for age verification)
- ID document type and number (for age verification - not stored after verification)
- Payment information (processed securely via Stripe)
2.2 Age Verification Data
UK law requires us to verify that all customers are aged 18 or over before selling nicotine products. We collect date of birth and ID information solely for this purpose. We do not store your ID number after verification is complete.
2.3 Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Process and fulfil your orders
- Verify your age as required by UK law
- Coordinate delivery via SMS updates
- Contact you regarding your order
- Process payments securely
- Comply with legal obligations
- Improve our website and services
- Prevent fraud and ensure security
4. Data Sharing
We may share your information with:
- Payment processors: Stripe processes your payment information securely
- Age verification services: To verify you are 18+
- SMS service providers: To send delivery updates
- Delivery drivers: Your name, phone, and address for delivery coordination
- Law enforcement: When required by law
We do not sell your personal information to third parties.
5. Data Security
We implement appropriate security measures including:
- SSL/TLS encryption for all data transmission
- Secure payment processing via Stripe (PCI-DSS compliant)
- Limited access to personal data on a need-to-know basis
- Regular security assessments
6. Data Retention
We retain your data as follows:
- Order records: 7 years (for tax and legal compliance)
- Age verification records: Outcome stored, ID numbers not retained
- Payment data: Stored by Stripe according to their retention policy
- Marketing preferences: Until you opt out
7. Your Rights (GDPR)
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise these rights, contact us at privacy@vapes2you.co.uk
8. Cookies
We use essential cookies for website functionality including:
- Session management
- Age verification status
- Cart contents
- Security tokens
9. Contact Us
For privacy-related enquiries:
Email: privacy@vapes2you.co.uk
Address: Bristol, United Kingdom
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with a new "Last updated" date.