Welcome to Sir Vapealot Ltd This Privacy Notice explains what we do with your personal information when you are visiting our website or making a purchase on the Website, over the phone, or in store.
describes how we collect, use and process your personal information, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your rights.
This Privacy Notice applies to the personal information of our consumers. If you are not a consumer, please contact us and we will advise you of the applicable Privacy Notice for your situation.
For the purpose of applicable data protection legislation, Sir Vapealot Limited whose registered address is at 10 Christchurch road New Milton Hampshire (“we”, “our” or “us”) is the ‘controller’ of your
personal information. This means we decide why and how your personal information is used and are responsible for protecting it. Please refer to the end of this notice for our contact and company information.
We may amend this Privacy Notice from time to time. Please visit this page regularly as we will post any changes here. Where appropriate, we may also notify you of the changes by email.
If you are dissatisfied with any aspect of this Privacy Notice, you may have legal rights which we have described below where relevant.
Information we collect about you
How we use your information
Our legal basis for using your information
Sharing your information with third parties
Where we store your information
How we safeguard your information
How long we keep your information
How to contact us
1. INFORMATION WE COLLECT ABOUT YOU
When you use the Website or interact with us offline we collect and use information about you in the course of providing you with our products and services and with customer support. We may collect some or
all of the information listed below to help us with this:
information that you submit online via the Website or give to us by phone, including your name, contact details and login credentials we also store information on all past orders, We categorically do not
store any banking information on this website, this is all dealt with by either Paypal or Sage Pay UK and we have no access to view or store this information.
We also automatically collect information about how visitors use our Website by using cookies and similar technologies. It is possible to switch off cookies by setting your browser preferences.
Some of the personal information we collect from you are required to enable us to fulfil our contractual duties to you or to others. For example, when buying products from us, we need to collect your address and contact details in order to be able to process your delivery and we may need to verify your age to comply with laws that apply to us. Other items may simply be needed to ensure that our relationship can run smoothly.
Depending on the type of personal information in question and the grounds on which we may be processing it, should you decline to provide us with such data, we may not be able to fulfil our contractual requirements or, in extreme cases, may not be able to continue with our relationship with you.
For details of the legal bases that we rely on to be able to use and process your personal information, please see Our legal basis for using your information.
2. HOW WE USE YOUR INFORMATION
We use your information in the following ways:
to carry out our obligations arising from any contracts with you when you make a purchase on the Website, instore or by phone and for billing and delivery purposes;
to ensure that the Website’s content is presented as effectively as possible for you;
for our internal purposes, such as quality control, Website performance, system administration and to evaluate use of the Website, so that we can provide you with enhanced services;
to notify you about changes to our services;
to provide you with information about products or services that you request from us, or which we feel may interest you (where necessary, after obtaining your consent) – see details below;
to tailor and personalise the marketing communications we send you. For example, we may send you marketing information at times such as your birthday;
to create reports to assist with future marketing;
to verify your age (please see below for further details);
to authenticate you when logging into your account (if you have created one)
in the rare event that we stop providing the Website, to move and combine your personal information held within our databases relating to the Website with those of another similar or related online service (whether a Website or App) that we operate. If we do so we will always email you to inform you of these changes in advance;
to provide you with customer support, respond to your queries and resolve your complaints; and
to enable you to participate in the features of the Website, when you choose to do so.
Verifying your age
As this Website relates to vaping and vaping products, we must make sure that users paying by debit card only are verified on the Website and are aged 18 years or over. Failing age verification will mean you cannot complete a purchase.
In order to enable us to do this we will require you to provide us with your date of birth. This will then be used by us to confirm that you are aged 18 years or over.
In some cases, we may need to ask for further information in order to verify your age. If this is necessary, we will contact you to explain why.
We may collect your preferences to receive marketing information directly from us by email
if you register for an account on the Website, we will ask you if you would like to opt in to receive marketing information directly from us;
if you click on the link on our Website to sign up to our newsletter.
If you do not complete a purchase on the Website and have not indicated that you would prefer otherwise, we may send a reminder to you about your incomplete purchase or ask why you did not complete the
purchase so that we may better refine the service we offer.
From time to time, we may ask you to refresh your marketing preferences by asking you to confirm that you consent to continue receiving marketing information from us.
You have the right to opt-out of our use of your personal information to provide marketing to you in any of the ways mentioned above at any time. Please see Your rights below for further details on how you can do this.
Use of non-personal information
We may monitor your use of the Website and record your email address and/or IP address, operating system and browser type for system administration and to report aggregate information to our advertising partners. The information we report to our partners is statistical information about our users’ browsing actions and patterns which does not identify any individual.
We collect non-personal aggregated statistics data about visitors to the Website and sales and traffic patterns. This information does not identify users in any personal capacity and we do not use this information to build profiles on individual users: it just contains generalised information about the users of the Website.
3. OUR LEGAL BASIS FOR USING YOUR INFORMATION
There are different legal bases that we rely on to use your personal information, namely:
Performance of a contract – the use of your personal information may be necessary to perform a contract that you have with us. For example, when you buy a product from us, we need to use your personal information to process your order, send you your product, and respond to any requests you may have. We also need to use your personal information to enable you to use some parts of the Website, and to notify you about changes to our services.
Consent – we will rely on your consent, in certain cases, to send you marketing communications. You may withdraw your consent at any time.
Legal obligation – as explained above, we have a legal obligation to ensure that we do not sell our vaping products to people under 18 years old. We need to carry out age verification checks in order to comply with this obligation. We also may need to use your information to comply with other legal obligations that apply to us.
Legitimate interests – we have a legitimate interest in using your information in the other ways described in this Privacy Notice, for example to improve and personalise our products, services, and the Website, and to conduct certain marketing and market research activities.
4. SHARING YOUR INFORMATION WITH THIRD PARTIES
tax, audit, or other authorities, when we believe that the law or other regulation requires us to share this data (for example, because of a request by a tax authority or in connection with any anticipated litigation);
Third party service providers who perform functions on our behalf (including external consultants and professional advisers such as lawyers, auditors and accountants, technical support functions, analytics and IT consultants carrying out testing and development work on our business technology systems);
third parties for the purposes of credit card clearance, credit reference, order fulfilment, delivery, customer support services and storage services;
if we have to share your information to comply with legal or regulatory requirements (for example, for age verification purposes), or if we have to enforce or apply our Terms and Conditions or any other
agreements or to protect our rights, property or our customers, etc.This may involve exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We may share the non-personal aggregated statistics data about visitors to the Website with third parties for analytics and statistical purposes.
We do not send any personal information that we collect about you on the Website to any social media sites that you link to your account, e.g. Facebook, nor do we share that information with such sites. We do not collect any personal information about you from those sites.
5. WHERE WE STORE YOUR INFORMATION
Your information is stored in a high security database.
6. HOW WE SAFEGUARD YOUR INFORMATION
We care about protecting your information. That's why we put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your personal information.
We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures, including encryption measures and disaster recovery plans.
If you suspect any misuse or loss of or unauthorised access to your personal information please let us know immediately by contacting our Data Protection Officer on the details provided at the end of this notice.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will apply our normal procedures and comply with legal requirements to protect your information, we cannot guarantee the security of your information transmitted to the Website and any transmission is at your own risk.
The Website may from time to time contain links to and from other websites. If you follow a link to any of those sites, please note that those sites ought to have their own privacy policies and that we do
not accept any responsibility or liability for those sites or for their privacy policies. Please check those privacy policies before you submit your information to those sites.
7. HOW LONG WE KEEP YOUR INFORMATION
We will keep your information relating to orders you have placed with us as required by law or other regulation (for example, because of a request by a tax authority or in connection with any anticipated litigation).
If you have registered an account with us: we will store your personal information for as long as your account is open. If you no longer wish to hold an account with us, please email us or call us to delete your account (see How to contact us below). By doing so, we will delete your account and remove you from our mailing list if you are on there. However, as noted above, we may still retain details of orders you have placed with us for legal or regulatory reasons.
If you have signed up to receive email marketing from us: we will store your personal information for as long as you are subscribed to our email marketing list (unless your account has been closed). If you unsubscribe or are otherwise removed from our marketing list, we will keep your email address on our suppression list to ensure that we do not send you marketing emails.you can also be completely removed by request.
If you have contacted us with a complaint or query: we will store your personal information for as long as is reasonably required to resolve your complaint or query.
The exceptions to the above are where:
we have carefully considered whether we need to retain your personal information after the periods described above to potentially establish, bring or defend legal proceedings or to comply with a legal or regulatory requirement;
we actually bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible;
you exercise your right to require us to retain your personal information for a period longer than our stated retention period (see further Right to restrict processing below);
you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law (see further Right to erasure below); or
in limited cases, a court or regulator requires us to keep your personal information for a longer or shorter period.
When it is no longer necessary to retain your data, we will delete the personal information that we hold about you from our systems. After that time, we may aggregate the data (from which you cannot be identified) and retain it for analytical purposes.
8. YOUR RIGHTS
You have a number of rights in relation to your information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within one month from either (i) the date that we have confirmed your identity or (ii) where we do not need to do this because we already have this information, from the date we received your request.
Right to object
This right enables you to object to us processing your personal information where we do so for one of the following reasons:
where we rely on our legitimate interests to do process your information;
to enable us to perform a task in the public interest or exercise official authority;
in certain circumstances, to send you direct marketing materials; or
for scientific, historical, research, or statistical purposes.
Except for the purposes for which we are sure we can continue to process your personal information, we will temporarily stop processing your personal information in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise we will
provide you with our justification as to why we need to continue using your data.
Right to withdraw consent
Where we have obtained your consent to process your personal information for certain activities (for example, for marketing), you may withdraw this consent at any time and we will cease to use your data for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition. If you withdraw your consent, our use of your personal information before you withdraw is still lawful.
To withdraw your consent to marketing communications, please use the unsubscribe tool in the relevant communication or update your preferences in the account section on the Website.
Right of access (Data Subject Access Requests)
You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this unless permitted by law.
Right to erasure
You have the right to request that we "erase" your personal information in certain circumstances. Normally, this right exists where:
the data is no longer necessary;
you have withdrawn your consent to us using your data, and there is no other valid reason for us to continue;
the data has been processed unlawfully;
it is necessary for the data to be erased in order for us to comply with our obligations under law; or you object to the processing of your data and we are unable to demonstrate overriding legitimate grounds for our continued processing.
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
Right to restrict processing
You have the right to request that we restrict our processing of your personal information in certain circumstances, for example if you dispute the accuracy of the personal information that we hold about you, you object to our processing of your personal information for our legitimate interests or you require us to keep it in connection with legal proceedings. If we have shared your personal information with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal information.
We may only process your information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.
Right to rectification
You have the right to request that we rectify any inaccurate or incomplete personal information that we hold about you. If we have shared this personal information with third parties, we will notify them
about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties that we have disclosed the inaccurate or incomplete personal
information to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
You can access and update certain parts of your information by logging into your account on the Website.
Right of data portability
If you wish, you have the right to transfer your personal information between service providers where we rely on your consent or the performance of your contract as the legal basis to use that information.
In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you if technically possible.
We may make changes to this Privacy Notice at any time by posting a copy of the modified notice on the Website or, where appropriate, by sending you an email with that notice. Any changes will take effect 7
days after the date of our email or the date on which we post the modified terms on the Website, whichever is the earlier.
10. HOW TO CONTACT US
If you have any queries about this Privacy Notice, including your rights in relation to your personal information, please contact our Head of HR by email to Enquiries@sirvapealot.co.uk or by post at:
Sir Vapealot Ltd
10 Christchruch Road