Last updated: 17 October 2026
This Privacy Policy explains how Vapes Direct Wholesale (“we”, “us”) collects and uses your personal data when you visit vapesdirectwholesale.co.uk, create an account, place an order or contact us. We are the data controller for this information and we handle it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
- Contact and order details – your name, email address, phone number, billing and delivery address, and the items you order.
- Age verification details – your date of birth and the result of any age check, because we are legally required to sell nicotine products only to adults aged 18 and over.
- Payment information – payments are handled by our payment provider. We do not store your full card details.
- Account details – your login details and order history if you create an account, and business details (company name, registration number, shop address) if you apply for a trade account.
- Communications – emails and messages you send us.
- Technical data – IP address, browser and device type, and pages viewed, collected through cookies and similar technologies.
How and why we use it
- To process, deliver and support your orders (performance of a contract).
- To confirm you are aged 18 or over before we dispatch nicotine products, and to keep records we must keep for tax and trading standards purposes (legal obligation).
- To review trade account applications and manage trade accounts (contract / legitimate interests).
- To prevent fraud and keep our website secure (legitimate interests).
- To send you service emails about your order or account. We only send marketing emails if you have opted in, and you can unsubscribe at any time (consent).
Who we share it with
We share only what is needed with trusted service providers who act on our behalf, including our website hosting provider, payment provider, age verification provider, order fulfilment partners and delivery couriers, and email service provider. We may also share data where the law requires it, for example with HMRC or trading standards. We never sell your personal data.
How long we keep it
We keep order and transaction records for 6 years to meet UK tax and accounting rules. Account data is kept while your account is open. Other data is kept only for as long as we need it for the purposes above.
Cookies
We use essential cookies to make the shop work (for example your basket, login and age confirmation). Where we use optional analytics cookies, we ask for your consent first. You can also control cookies in your browser settings.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email support@vapesdirectwholesale.co.uk. We will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Security
Our website uses an encrypted (HTTPS) connection, and access to personal data is limited to the people who need it.
Contact us
Questions about this policy? Email support@vapesdirectwholesale.co.uk.