Welcome to We Vape Project Ltd. This Privacy Notice explains what we do with your personal information when you are visiting www.we-vape.org (“Website”). It describes how we collect, use and process your personal information, and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your rights.
For the purpose of applicable data protection legislation We Vape Project Ltd, whose registered office is at 14 Shortcroft Mead Court, 55 Cooper Road, London, NW10 1BF(“we”, “our” or “us”) is the ‘controller’ of your personal information. This means we decide why and how your personal information is used and are responsible for protecting it. Please refer to the end of this notice for our contact and company information.
We may amend this Privacy Notice from time to time. Please visit this page regularly as we will post any changes here. Where appropriate, we may also notify you of the changes by email. Please see further the section Changes blow.
If you are dissatisfied with any aspect of this Privacy Notice, you may have legal rights which we have described below where relevant.
Information we collect about you
Use of device and software usage information
Sharing your information with third parties
Where we store your information
How we safeguard your information
How long we keep your information
When you use the Website or interact with us offline we collect and use information about you in the course of providing you with information about petitions, newsletters, events and campaigns (together “Campaign Marketing”), and to contact you about surveys related to vaping. We may collect some or all of the information listed below to help us with this:
We may receive personal information about you from third party data providers including your contact details and your status as a smoker or vaper. Where possible, we will contact you with details of the personal information we have received from such providers, together with that provider’s details.
For details of the lawful bases that we rely on to be able to use and process your personal information, please see How we use your information.
2. HOW WE USE YOUR INFORMATION
The purposes for which we use your personal information and the lawful basis under data protection laws on which we rely to do this are explained below:
Where you have provided CONSENT
We will rely on your consent, in certain cases, to send you the following where we invite you to opt-in on the Website:
You may withdraw your consent at any time. Please see the Marketing section below for further details.
Where it is required to complete or, at your request, take steps to enter into, a CONTRACT
The use of your personal information may be necessary to perform a contract that you have with us or perform steps you request to enter into a contract. We also need to use your personal information to enable you to use some parts of the Website, and to notify you about changes to our services.
Where there is a LEGAL REQUIREMENT
We will use your personal information to comply with our legal obligations, including where the law requires us:
Where it is in your VITAL INTERESTS
We will use your personal information to notify you of any product safety or product recall issues.
Where there is a LEGITIMATE INTEREST
We may use and process your personal information where it is necessary for us to pursue the following legitimate interests (whether ours, in connection with our business, or that of a third party), for the following purposes:
3. VERIFYING YOUR AGE
As this Website relates to vaping and vaping products, we are legally obliged to make sure that users are verified on the Website and are aged 18 years or over. Failing age verification will mean you cannot access the Website.
On entry to the website you will be asked to confirm that you are over the legal age to purchase vaping products in your region.
In some cases, we may need to ask for further information in order to verify your age. If this is necessary, we will contact you to explain why.
We may collect your preferences to receive information about petitions, newsletters and campaigns directly from us by email in the following ways:
You have the right to opt-out of our use of your personal information to provide marketing to you in any of the ways mentioned above at any time. Please see Your rights below for further details on how you can do this.
5. USE OF DEVICE AND SOFTWARE USAGE INFORMATION
We may monitor your use of the Website and record your IP address, operating system and browser type for system administration purposes.
We collect aggregated statistics data about visitors to the Website and sales and traffic patterns. This information does not identify users in any personal capacity and we do not use this information to build profiles on individual users: it just contains generalised information about the users of the Website.
A cookie (and other technologies like pixels and beacons) is a small data file that is placed on your browser or the hardware of your computer or other device to allow a website to recognise you as a user when you return to the website.
We use non-strictly necessary cookies when you consent for us to do so and strictly necessary cookies on the Website. Please see our Cookies Notice for more information about the type of cookies and tracking technologies that we use on the Website and why, and how to accept and reject them.
7. AUTOMATED DECISION MAKING
We may make automated decisions about you based on your personal information to verify your age when you visit our Website (see the explanation above for further information about this).
We do not make any other automated decisions about you which have a legal or other significant effect on you.
8. SHARING YOUR INFORMATION WITH THIRD PARTIES
We will share your information primarily to ensure that we provide you with the most exciting and up to date products. We may share your information with any of the following groups:
We may share the non-personal aggregated statistics data about visitors to the Website with third parties for analytics and statistical purposes.
9. WHERE WE STORE YOUR INFORMATION
Your personal information may be transferred outside of the UK and the European Economic Area (EEA) to the third parties described in Sharing your information with third parties.
We want to make sure that your personal information is stored and transferred in a way which is secure. We will therefore only transfer data outside of the UK and EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data, for example:
Where we transfer your personal information outside the UK and EEA and where the country or territory in question does not maintain adequate data protection standards, we will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Notice. You can ask to see these by contacting us using the contact details below.
10. HOW WE SAFEGUARD YOUR INFORMATION
We care about protecting your information. That’s why we put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your personal information.
We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures.
If you suspect any misuse or loss of or unauthorised access to your personal information please let us know immediately by contacting Mark Oates using the details provided at the end of this notice.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will apply our normal procedures and comply with legal requirements to protect your information, we cannot guarantee the security of your information transmitted to the Website and any transmission is at your own risk.
The Website may from time to time contain links to and from other websites. If you follow a link to any of those websites, please note that those sites ought to have their own privacy policies and that we do not accept any responsibility or liability for those sites or for their privacy policies. Please check those privacy policies before you submit your information to those websites.
11. HOW LONG WE KEEP YOUR INFORMATION
We will keep your information relating to orders you have placed with us as required by law or other regulation.
If you have signed up to receive Campaign Marketing from us: we will store your personal information for as long as you are subscribed to our email marketing list (unless your account has been closed). If you unsubscribe or are otherwise removed from our marketing list, we will keep your email address on our suppression list to ensure that we do not send you marketing emails.
When it is no longer necessary to retain your data, we will delete the personal information that we hold about you from our systems (either by erasing or anonymising that data). After that time, we may retain aggregated data (from which you cannot be identified) and retain it for analytical and statistical purposes.
12. YOUR RIGHTS
You have a number of rights in relation to your information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within one month from either: (i) the date that we have confirmed your identity; or (ii) where we do not need to do this because we already have this information, from the date we received your request.
Right to object
This right enables you to object to us processing your personal information where we do so for one of the following reasons:
Except for the purposes for which we are sure we can continue to process your personal information, we will temporarily stop processing your personal information in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your personal information for those purposes. Otherwise we will provide you with our justification as to why we need to continue using your personal information.
Right to withdraw consent
Where we have obtained your consent to process your personal information for certain activities (for example, for marketing), you may withdraw this consent at any time and we will cease to use your personal information for that purpose unless we consider that there is an alternative legal basis to justify our continued processing of your data for this purpose, in which case we will inform you of this condition. If you withdraw your consent, our use of your personal information before you withdraw is still lawful.
To withdraw your consent to marketing communications, please use the unsubscribe tool in the relevant communication or update your preferences in the account section on the Website.
Right of access (‘Data Subject Access Requests’)
You may ask us for a copy of the information we hold about you at any time, and request us to modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this unless permitted by law. If you request further copies of this information from us, we may charge you a reasonable administrative cost. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so.
If you would like to request access to your information, it would assist us with dealing with your request if you could use the subject heading ‘Data Subject Access Request’ when contacting us. Please note that this is not mandatory and we will still deal with any requests without this reference.
Right to erasure
You have the right to request that we erase your personal information in certain circumstances. Normally, this right exists where:
We would only be entitled to refuse to comply with your request for erasure in limited circumstances and we will always tell you our reason for doing so.
When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
Right to restrict processing
You have the right to request that we restrict our processing of your personal information in certain circumstances, for example if you dispute the accuracy of the personal information that we hold about you, you object to our processing of your personal information for our legitimate interests or you require us to keep it in connection with legal proceedings. If we have shared your personal information with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal information.
We may only process your information whilst its processing is restricted if we have your consent or are legally permitted to do so, for example for storage purposes, to protect the rights of another individual or company or in connection with legal proceedings.
Right to rectification
You have the right to request that we rectify any inaccurate or incomplete personal information that we hold about you. If we have shared this personal information with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. You may also request details of the third parties to whom we have disclosed the inaccurate or incomplete personal information. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
You can access and update certain parts of your information by logging into your account on the Website.
Right of data portability
If you wish, you have the right to transfer your personal information between service providers where we rely on your consent or the performance of your contract as the lawful basis to use that information. In effect, this means that you are able to transfer the details we hold on you to another third party. To allow you to do so, we will provide you with your data in a commonly used machine-readable format so that you can transfer the data. Alternatively, we may directly transfer the data for you if technically possible.
Rights relating to automated decisions
In certain circumstances, you may contest a decision made about you based purely on automated processing and where the processing is not required by law. You may also ask us to stop making such decisions using automated processing alone.
Right to complain
You have the right to lodge a complaint with your local supervisory authority which is the Information Commissioner’s Office in the UK. You can contact them in the following ways:
How to exercise your rights
If you would like to exercise any of these rights, please contact us at firstname.lastname@example.org Please note that we may keep a record of your communications to help us resolve any issues that you raise.
We may make changes to this Privacy Notice at any time by posting a copy of the modified notice on the Website or, where appropriate, by sending you an email with that notice. Any changes will take effect 7 days after the date of our email or the date on which we post the modified terms on the Website, whichever is the earlier.
14. HOW TO CONTACT US
If you have any queries about this Privacy Notice, including your rights in relation to your personal information, please contact Mark Oates at: email@example.com
14 Shortcroft Mead Court, 55 Cooper Road, London, NW10 1BF
If you wish to contact us with any general queries or concerns, you can email us at firstname.lastname@example.org
When contacting us by email or post, please use the subject heading ‘Data protection query’ so that we can direct your query to the appropriate department and deal with it promptly.