Last Updated: July 21 2026

Who We Are

Vapevend Limited (“we”, “us”, “our”) operates vapevend.ie. This policy explains what personal data we collect, why, and how we protect it.

What Data We Collect

1. Order & account data: name, billing/shipping address, email, phone, order history — collected via WooCommerce when you place an order or create an account.
2. Payment data: handled directly by our payment processor. We do not store full card details on our servers.
3. Technical & security data: IP address, browser type, and login/firewall activity, collected by our security plugin to protect the Site from attacks and abuse.
4. Cookies: used for cart functionality, analytics, and (if enabled).

Why We Use Your Data (Lawful Basis)

1. To fulfil and deliver your orders (contract)
2. To keep the Site secure and prevent fraud (legitimate interest)
3. To send order updates and, where you’ve opted in, marketing emails (consent / legitimate interest)
4. To comply with tax and accounting laws (legal obligation)

Who We Share Data With

1. Payment processors (to take payment)
2. Delivery/courier companies (to ship your order)
3. Wordfence (security monitoring, may process IP addresses)
4. Any other tools listed in our cookie/plugin list

We do not sell your personal data.

International Transfers

Some providers above may process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards (e.g. Standard Contractual Clauses).

How Long We Keep Data

We keep order and account data for as long as needed to fulfil legal, tax, and accounting requirements, then delete or anonymise it.

Your Rights

Under EU GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these, contact us.

Contact

Questions about this policy? contact us.