Who is responsible for your data
Vapeuro is the data controller for the personal data described here. For any privacy question or request, write to support@vapeuro.com with "Privacy" in the subject line.
What we collect
- Order data: name, delivery and billing address, email, phone, order contents and payment status.
- Account data: email, password hash, and the orders linked to your account.
- Age verification data: a date of birth or a one-off ID check result. We do not keep copies of ID documents longer than the check requires.
- Technical data: IP address, device and browser type, pages visited, and the cart identifier stored in a cookie.
- Marketing data: your email address and subscription status, if you opt in.
Why we use it, and on what legal basis
- To fulfil your order (contract): taking payment, shipping, handling returns and warranty claims.
- To prove you are 18+ (legal obligation and public health rules on nicotine sales).
- To run and secure the store (legitimate interest): fraud prevention, rate limiting, error diagnosis.
- To send marketing email (consent): only if you subscribe, and every message has an unsubscribe link.
Cookies
We use strictly necessary cookies to keep your cart and your session working. Analytics and marketing cookies are only set with your consent, and you can withdraw consent at any time in the cookie banner.
Who we share it with
Only where needed to run your order: the payment provider, the courier, our email delivery provider, and our hosting and storage providers. We do not sell your personal data, and we do not share it with advertisers.
International transfers
Our infrastructure providers may process data outside the EEA. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep it
Order and invoice records are kept for the period required by tax and accounting law. Age verification results are kept only as long as needed to demonstrate compliance. Marketing data is kept until you unsubscribe. Everything else is deleted or anonymised when it is no longer needed.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Write to support@vapeuro.com and we will respond within one month. You also have the right to complain to your national data protection authority.
Security
Traffic is encrypted in transit, card data never touches our servers, and access to order data is limited to the people who need it to fulfil your order.