Privacy & cookies policy

Last updated: 31 October 2026

This policy explains how [company legal name] (trading as Emerald Vapes) uses your personal information when you visit https://emeraldvapes.co.uk, buy from us or contact us. We are the "controller" of your information under UK data protection law (UK GDPR and the Data Protection Act 2018). Our ICO registration number is [ico registration number].

1. Information we collect

When you order: your name, email, phone number, delivery address, what you bought, and confirmation that you are 18 or over.
When you create an account: the above, plus your date of birth (to check you are 18 or over), a password (stored scrambled; we can't see it) and your saved address.
Payments: handled by Worldpay. We receive the result of the payment and the card type and last four digits, never your full card number.
When you browse: technical information such as your IP address and browser type, used to keep the site secure and working. If you allow analytics cookies, we also collect how you use the site (see Cookies below).
When you contact us: your message and contact details.

2. Why we use it and our legal basis

To process and deliver your order and handle returns (to perform our contract with you).
To check you are old enough to buy nicotine products and keep a record of that check (legal obligation and our legitimate interest in selling responsibly).
To keep accounting and tax records (legal obligation).
To prevent fraud and keep the website secure (legitimate interests).
To send you offers and news, only if you have opted in. You can unsubscribe at any time (consent).
To understand how the site is used with analytics cookies, only if you accept them (consent).

3. Who we share it with

We never sell your personal information. We share only what is needed with companies that help us run the shop:

Worldpay, to take card payments.
Royal Mail, to deliver your parcel (name, address, phone and email for delivery updates).
Our website hosting and email providers, to run the site and send order emails.
postcodes.io, to check whether your postcode is within our local delivery area (only the postcode is sent).
Google Analytics, only if you accept analytics cookies.
The police, Trading Standards or other authorities where the law requires it.

4. How long we keep it

Order records, including the age check, are kept for 6 years to meet tax and legal requirements.
Your account stays open until you ask us to close it.
Marketing preferences are kept until you unsubscribe.

5. Cookies

Cookies are small files stored by your browser. We use:

Essential cookies that the site needs to work: your basket, your login, remembering that you confirmed you are 18 or over, and your cookie choices. These don't need consent.
Analytics cookies (Google Analytics) to understand which pages are used, so we can improve the site. These are only set if you click "Accept" in the cookie banner.

You can change your choice at any time using "Cookie settings" at the bottom of every page.

6. Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict how we use it, to move it to another provider, and to withdraw consent at any time. Email support@emeraldvapes.co.uk and we will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).

7. Children

Our website and products are only for adults aged 18 or over. We do not knowingly collect information about anyone under 18; if we find we have, we will delete it.

8. Security

The site uses encrypted connections (HTTPS). Card details are entered on Worldpay's secure payment page, not on our site. Access to customer information is limited to staff who need it.

9. Changes

We may update this policy. The date at the top shows when it last changed.