Privacy Policy

Effective Date: 01/01/2026
Website: thcvapecloud.co.uk
Business Name: THC Vape Cloud
Email: sales@thcvapecloud.co.uk
Address: London, UK

1. Introduction

THC Vape Cloud respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit thcvapecloud.co.uk, create an account, place an order, contact us, subscribe to marketing, or otherwise interact with our website.

This Privacy Policy should be read together with our Terms and Conditions and Cookie Policy.

2. Who We Are

For the purposes of UK data protection law, THC Vape Cloud is the data controller of your personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

THC Vape Cloud
London, UK
sales@thcvapecloud.co.uk

3. The Personal Data We Collect

We may collect, use, store, and transfer the following types of personal data:

Identity Data

Your name, billing name, shipping name, username, and date of birth or age verification information where needed.

Contact Data

Your email address, billing address, delivery address, and telephone number.

Account Data

Your login details, account preferences, saved addresses, and order history.

Transaction Data

Details about payments, purchases, refunds, returns, and delivery arrangements.

Technical Data

Your IP address, browser type, device information, time zone, operating system, and website usage data.

Profile and Usage Data

Your purchase history, product interests, saved items, site interactions, and responses to promotions or surveys.

Marketing and Communications Data

Your preferences for receiving marketing from us and your communication preferences.

We do not intentionally collect more personal data than we need for the purposes described in this Privacy Policy.

4. How We Collect Your Data

We collect personal data in several ways, including:

• when you place an order

• when you create an account

• when you contact us by email or through our website

• when you sign up for newsletters or promotions

• when you browse our website

• when you enter competitions, surveys, or promotions

• from cookies and similar technologies

• from third parties such as payment processors, delivery partners, analytics providers, fraud prevention providers, and age verification providers where relevant

5. How We Use Your Personal Data

We use your personal data for the following purposes:

To Process and Deliver Orders

We use your data to take payment, confirm orders, dispatch goods, manage deliveries, and handle returns or refunds.

To Manage Your Account

We use your data to create and manage your account, authenticate logins, and provide customer support.

To Communicate With You

We use your data to respond to questions, send service emails, provide order updates, and notify you of important changes.

To Improve Our Website and Services

We use technical and usage data to understand how visitors use our website, troubleshoot issues, improve performance, and optimise user experience.

To Prevent Fraud and Keep the Site Secure

We may use your data for fraud screening, payment verification, security monitoring, and legal compliance.

To Send Marketing

Where permitted by law, we may send you marketing emails or promotions about our products, offers, or updates. You can opt out at any time by using the unsubscribe link in our emails or by contacting us directly. Electronic marketing and cookies are subject to UK data protection rules and PECR.

To Comply With Legal Obligations

We may process your data where necessary to comply with legal, regulatory, tax, accounting, consumer protection, or age-restriction obligations.

6. Our Lawful Bases for Processing

Under UK data protection law, we rely on one or more of the following lawful bases:

• Contract — where processing is necessary to perform our contract with you, such as fulfilling an order

• Legal obligation — where we must comply with a legal or regulatory requirement

• Legitimate interests — where we have a legitimate business reason to use your data, provided your rights do not override those interests

• Consent — where we ask for your consent, such as for certain marketing communications or non-essential cookies

UK privacy notices are expected to explain the purposes of processing and the lawful basis relied on.

7. Age Verification and Age-Restricted Products

If you attempt to purchase age-restricted products, we may collect and process personal data needed to verify that you are legally old enough to buy them. This may include your date of birth, a confirmation of age, or information provided through a third-party age verification service.

We may refuse or cancel an order if age verification cannot be completed satisfactorily.

Nicotine vaping products are age-restricted in the UK, and retailers are expected to operate suitable age verification measures to prevent sales to anyone under 18.

8. Sharing Your Personal Data

We may share your personal data with trusted third parties where necessary to run our business and provide our services, including:

• payment processors

• delivery and courier companies

• website hosting and ecommerce platform providers

• IT and security service providers

• analytics providers

• age verification providers

• professional advisers, insurers, and accountants

• regulators, law enforcement agencies, courts, or public authorities where required by law

We require third-party service providers to process your personal data only on our instructions where applicable and to take appropriate security measures.

We do not sell your personal data to third parties.

9. International Transfers

Some of our service providers may process personal data outside the UK. Where this happens, we will take reasonable steps to ensure that your data remains protected through appropriate safeguards required by applicable law.

10. Data Retention

We keep your personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

• fulfil orders and provide customer service

• maintain business and financial records

• comply with legal, tax, accounting, and regulatory obligations

• resolve disputes

• enforce our legal rights

Where we no longer need your personal data, we will delete it or anonymise it, unless we are legally required to keep it for longer.

The ICO expects privacy notices to explain retention periods or the criteria used to decide them.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, disclosure, or alteration.

These measures may include secure hosting, access controls, password protection, encryption, and limiting access to those who need it for legitimate business purposes.

No website or online system can ever be completely secure, but we work to reduce risks and protect the information we hold.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies to make the site work, remember preferences, understand traffic, improve performance, and support analytics and marketing.

Some cookies are necessary for the website to function. Others are optional and may be used only with your consent where required by law.

You can manage cookie preferences through your browser settings and, where available, through our cookie banner or preference tool. The use of cookies and similar technologies is governed in the UK by PECR, and non-essential cookies generally require consent.

13. Marketing Communications

If you choose to receive marketing from us, we may send you updates about products, promotions, offers, and news.

You can stop receiving marketing communications at any time by:

• clicking the unsubscribe link in any marketing email

• contacting us at sales@thcvapecloud.co.uk

• updating your account preferences where available

We will continue to send non-marketing service messages where necessary, such as order confirmations, delivery updates, and policy changes.

14. Your Rights

Under UK data protection law, you may have the right to:

• request access to your personal data

• request correction of inaccurate or incomplete data

• request erasure of your personal data in certain circumstances

• request restriction of processing in certain circumstances

• object to processing based on legitimate interests or for direct marketing

• request transfer of your personal data where applicable

• withdraw consent at any time where we rely on consent

These rights are not absolute and may be subject to legal exceptions, but we will review and respond to requests in line with applicable law. UK privacy notices are expected to tell people about these rights.

To exercise any of your rights, please contact us at sales@thcvapecloud.co.uk.

15. Complaints

If you have a concern about how we handle your personal data, please contact us first at sales@thcvapecloud.co.uk so we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO). The ICO advises people to raise the issue with the organisation first and then complain to the ICO if the matter is not resolved.

16. Children’s Privacy

This website is not intended for children. We do not knowingly collect personal data from anyone under the age of 18 in connection with age-restricted products or services.

If you believe a child has provided us with personal data, please contact us and we will review the matter.

17. Third-Party Links

Our website may contain links to third-party websites. If you follow a link to another website, that website will have its own privacy policy and practices. We are not responsible for the privacy practices or content of third-party sites.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date.

You should check this page periodically to stay informed about how we handle your personal data.

19. Contact Us

If you have any questions about this Privacy Policy or about your personal data, please contact:

THC Vape Cloud
London, UK
sales@thcvapecloud.co.uk