Privacy Policy

This Privacy Policy explains how Vape Green Limited ("Vape Green", "we", "us") collects, uses, shares and protects your personal information when you use the vapegreen.co.uk website (the "Site") and buy our products. We are the data controller for the personal information described in this policy, and we handle it in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect personal information when you visit the Site, create an account, place an order, subscribe to our newsletter, contact customer service or otherwise interact with us. Depending on what you do, this can include your name, email address, delivery and billing address, phone number, date of birth (for age verification), your order history and the messages you send us. You can browse the Site without an account, and you only need to give us the information required for what you are asking us to do; without some of it (for example a delivery address) we cannot fulfil an order.

When you use the Site we also receive technical information such as your IP address, browser type, device and operating system details, and information about how you use the Site (pages viewed, links clicked). We use this to keep the Site secure, to diagnose problems and to understand how the Site performs, so we can improve it.

The Site uses cookies and similar technologies. Some are essential: they keep you logged in, remember your basket and keep checkout working. Others help us understand how the Site is used so we can improve it. You can set your browser to refuse cookies or to alert you when cookies are being sent; if you block essential cookies, parts of the Site (such as the basket and checkout) may not work properly.

We use your personal information to:

• Process and deliver your orders: taking payment, arranging delivery, and sending you service messages about your order by email (and occasionally by SMS if there is an urgent problem with a delivery). This is necessary to perform our contract with you.
• Verify your age: we are legally required to make sure we do not sell age-restricted products to anyone under 18. See the age verification section below.
• Provide customer service: responding to your questions and support requests, whether by email, contact form or chat.
• Run your account and loyalty rewards: managing your account, your order history and Green Points.
• Send marketing emails, only with your consent: if you opt in to our newsletter we will send you news and offers. Every marketing email includes an unsubscribe link, and you can also change your preference in your account settings at any time.
• Improve the Site and keep it secure: using technical and usage information to fix problems, prevent fraud and abuse, and make the Site better.

Vape Green only sells to adults aged 18 or over, and no part of the Site is aimed at anyone under 18. Orders containing age-restricted products require an age verification check, which is carried out by our specialist verification partner, VerifyMyAge. We share the details needed for the check (such as your name, address and date of birth) with them for that purpose only. Once you have been verified you will not normally be asked to verify again. If verification cannot be completed, we cannot dispatch the order and it will be refunded.

We keep personal information only for as long as we need it for the purposes described in this policy, including meeting our legal, accounting and tax obligations for order records. We protect your information with appropriate technical and organisational measures: the Site is served over encrypted (HTTPS) connections, access to personal data is restricted to those who need it, and we review our security practices regularly.

We never sell, trade or rent your personal information. We share it only with the service providers who help us run the store, and only what they need to do their job:

• Payment providers: payments are processed by our payment partners (currently PayPal and Viva.com). We do not store your full card details on our systems.
• Delivery carriers: we pass your name, delivery address and contact details to carriers such as Royal Mail, DPD and UPS so they can deliver your order.
• Age verification: as described above, with VerifyMyAge.
• Technology providers: providers who host, secure and support the Site and our warehouse and email systems, acting on our instructions.

We may also disclose information where the law requires it, for example to regulators or law enforcement.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you (access);
• ask us to correct information that is wrong or incomplete (rectification);
• ask us to delete your information in certain circumstances (erasure);
• ask us to limit how we use it in certain circumstances (restriction);
• receive the information you gave us in a portable format (portability);
• object to certain uses of your information, including direct marketing (objection); and
• withdraw consent at any time where we rely on it, for example by unsubscribing from marketing emails.

To exercise any of these rights, contact us. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We may update this privacy policy from time to time. When we do, we will revise the updated date at the bottom of this page, and if the changes are significant we will highlight them on the Site. We encourage you to check this page occasionally so you stay informed about how we protect your information.

If you have any questions about this Privacy Policy, how we handle your information, or your dealings with the Site, please contact us.

This policy was last updated on 25 July 2026.