Privacy Policy
Smoke Shop operates as an online retailer in the United Kingdom. This Privacy Policy explains how we collect, use and protect personal information when you visit our website, place an order or otherwise deal with us.
We take care to handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
For the purposes of UK data protection law, Smoke Shop is the controller of personal data described in this policy.
If you have questions about this policy or how we handle your information, contact us at sales@smoke-shop.co.uk.
2. Information we collect
Depending on how you use our services, we may collect:
- Identity and contact details - such as name, billing and delivery address, email address and telephone number.
- Order and transaction details - products purchased, payment status, delivery preferences and correspondence about your order.
- Account information - if you create an account, login details and saved preferences.
- Age assurance information - confirmation that you are 18 or over where required for nicotine and related products, and any verification steps we reasonably request.
- Technical data - IP address, browser type, device information and pages viewed, typically via cookies or similar technologies.
- Marketing preferences - whether you have opted in or out of email or other marketing.
We do not intentionally collect special category data. Please do not send us unnecessary health or other sensitive information unless we specifically ask for it to resolve a support request.
3. How we use your information
We use personal information to:
- process and fulfil orders, including payment, dispatch and delivery within the UK;
- provide customer service and respond to enquiries;
- verify that purchasers of age-restricted products are 18 or over;
- operate, secure and improve our website;
- send service messages about your order or account;
- send marketing communications where you have consented or where otherwise permitted by law;
- comply with legal obligations and defend our legal rights.
4. Legal bases for processing
Under UK GDPR we rely on one or more of the following bases:
- Contract - to take steps at your request and to perform a contract for goods you order.
- Legal obligation - for example tax, accounting, product safety notices and age-restriction laws.
- Legitimate interests - such as securing our site, preventing fraud and improving our services, balanced against your rights.
- Consent - where required, for example certain cookies or email marketing. You may withdraw consent at any time.
5. Sharing your information
We share personal data only where needed, including with:
- payment providers who process card or other payments securely;
- delivery and courier partners for UK fulfilment;
- IT, hosting, email and analytics providers who support our online store;
- professional advisers and authorities where required by law.
We do not sell your personal information. Where providers process data on our behalf, we require appropriate contractual safeguards.
Some tools we use may involve transfers outside the UK. Where that happens, we take steps to ensure an adequate level of protection as required by UK law.
6. How long we keep information
We keep personal data only as long as reasonably necessary for the purposes above. Order and invoice records are typically retained for legal and accounting periods. Marketing lists are reviewed regularly and removed when you unsubscribe or when records are no longer needed.
7. Your rights
Subject to UK law, you may have the right to:
- access your personal data;
- request correction of inaccurate data;
- request erasure in certain circumstances;
- restrict or object to certain processing;
- data portability for information you provided to us;
- withdraw consent where processing is based on consent;
- lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise your rights, email sales@smoke-shop.co.uk. We may need to verify your identity before responding.
8. Security
We use appropriate technical and organisational measures to protect personal data. No online transmission is completely secure, so please use a strong unique password for any account and keep login details confidential.
9. Contact
Smoke Shop operates as an online retailer in the United Kingdom.Privacy enquiries: sales@smoke-shop.co.uk.