Definition of Terms
Personal Data - This means information data about a living individual in our possession or may come into our possession, that can be used to identify an individual.
Usage Data – This means data that our service infrastructure collects automatically and generates, as a living individual uses or interacts with our website (for example, the dura-tion of a page visit). Cookies – This are small pieces of data stored on a User’s device as you interact with our website.
Data Controller - This means a person who is responsible for determining how the per-sonal data collected through direct interaction with us or indirect interaction through our website infrastructures are processed, used as well as the purpose for which they are processed.
Data Processor – This means data service processor, which is any person who processes the data on behalf of the Data Controller. The data processor is not an employee of the Data Controller.
We may use the services of various Service Providers in order to process your data more effectively.
Data Subject – This means any living individual that is the subject of Personal Data.
User – This means an individual who uses or is using our Service. A User is the same as a Data Subject.
Purpose of This Privacy Statement
1) This privacy statement is to provide all the information you need to know about how we collect and processes your personal data when you use our website, including any data you may provide when you register on our website, sign up to our newsletter or purchase a product on our website.
2) We do not sell products to persons under the age of 18. If you are under the age of 18, you are not permitted to use our website, or access our products through any other available channel.
3) It is of great importance that you read this privacy statement along-side any other privacy notice or fair processing notice we may provide from time to time when we collect or process your personal data so that you have a full awareness of how and why we are using your data. This privacy statement is to serve as an addition to other notices and not intended to override them.
4) Controller Wholesome Vape Limited Trading As Variety E-Vape Online is the controller and responsible for your personal data, and for the purpose of this policy statement is (referred to as "Variety E-Vape", "we", "us" or "our").
6) Full Legal Name: Wholesome Vape Limited Trading Name: Variety E-Vape Name or title of data privacy manager: Data Privacy Manager Email address: firstname.lastname@example.org Postal address: 547 Oxford Road, Reading, RG30 1HJ Telephone number: 01189967352
7) You can make a complaint to the Information Commissioner’s Office (ICO) at any time. The ICO is the UK supervisory authority responsible for data protection issues (www.ico.org.uk). However, we would appreciate the opportunity to deal with your concerns and attempt to resolve the complaint before you approach the ICO. So please contact us, in the first instance.
8) Changes to your Personal Information and your duty to inform us of change Please notify us if your personal data changes during the period you have a contract relationship with us as it is important that the personal data we hold about you is accurate.
What Type of Personal Information Do We Collect?
Personal Information data, or personal information, means information about a person that is unique to the person and can be used for the purpose of identifying a person. It does not include anonymous data, which means data that the identity has been removed.
We may collect, different types of personal information or data about you at different stages of your interaction with us, for the purpose of providing you the product you want to purchase as well as improve our service.
When you use our website or sign up for an account, whether making a purchase or not, the system will store the details you have provided. Where an account is created by one of our employees on behalf of the customer, the minimum amount of data this will contain is your name, email address and password( which is encrypted), the date you regis-tered and the date you last visited. If the account is created by you directly, then it will also contain the IP address and Host name you used the last time you logged in. If you enter further information such as your address and telephone number, this will also be stored on the account.
When you place an order on our website, the information you enter, such as your name, email address, billing address, delivery address, telephone number, company name and VAT number (if applicable) will be stored within the order. Other information that is stored are as follows:
A) Your IP Address, its host name and country location
B) The type of device you used, such as mobile or desktop
C) The date and time you ordered
D) Your payment method
E) How much you paid
F) The shipping method
G) The number of loyalty point you earned, where applicable
H) Any activity on the order, such as the date and time we completed your order
I) Whether you are a new customer or returning customer
J) The product you ordered
K) Please Note: Payment information, such as credit card number, is never stored on this site or Bluepark’s servers. This information is always stored separately by the payment service provider.
What Types of Cookies Do We Use?
The two cookies that apply to this website are provided by the Bluepark’s Software and they are as follows:
Session ID – This cookie enables the site to recognise the same user clicking from page to page. Without it, every page would be treated as the first visit to the site, and anything added to the shopping basket would be instantly forgotten. Online shopping would, therefore, be impossible.
Session - This is for the visitor's convenience, Bluepark created this with a copy of the ini-tial session ID so that they can be classed as "returning" and the contents of their shop-ping basket will still be available. If the user signs in with an email address and password, these login details are also saved so that they can remain logged in when returning (the password is encrypted). If the user signs out, their login details are removed from the cookie.
Any other cookies are created by 3rd party scripts, such as Google Analytics, and any in-formation about the cookies they use can be obtained through them.
How We Collect Your Personal Data?
We collect your personal data in the following ways:
1) By Direct Interaction with us when you place an order on our website, create an account on our website, subscribe to newsletter or give us feedback about our products and services. At this point you may provide us with your personal data such as identity information and contact information when filling forms, corre-sponding with us by email, phone or post.
2) By Indirect Interaction through automated technologies which can occur when you use our website. Our cookies, server log system and other technologies may collect Technical Data about your equipment and browsing actions when you use our website.
3) We may receive your personal data from third parties or publicly available sources for technical purposes. These Personal data about you may be made available to us by:
• Providers of analytic services such as Google based outside the EU; Search information providers like Google or Bing based outside the EU
• Public sources like the Electoral Register and Companies House based within the EU.
How Do We use the data we collect?
We will only use the personal data we collect from you, when it is lawful to do so and that would include:
1. To carry-out a contract you have entered into or about to enter into with us, for the supply of a product or service that you have ordered
2. To carry-out a legal or regulatory obligation such as the prevention and detection of fraud, crime and money laundering
3. A situation where we need to fulfil a legitimate interest, whether ours or that of a third party and your personal interest and fundamental rights do not override the legitimate interest
4. In addition, we may use your personal data to develop and improve our products and services, through research and statistical analysis. For us to contact you by email, post or phone in relation to marketing communications, we will request your consent. Only when you consent to us contacting you, would we contact you about products and services we believe may be of interest to you.
How Do We Secure Your Personal Data?
Ensuring the personal data you provide us is well secured and protected is an utmost pri-ority to us. However, be aware that no method of transmission of data over the internet is 100% secured. Though we ensure we use necessary commercially acceptable means to keep your data safe and secured, we cannot guarantee an absolute security of your per-sonal data.
Which Third Party Service Providers Do We Share Your Data?
We may share your personal data with third party service providers for the purpose of performing a contract you have or will enter to with us, to improve our service and or to comply with a lawful request.
Our e-commerce website is powered by Blue Park Solutions limited, by virtue of the fact that they power the website, it means your personal data may be shared with Bluepark, you can read more about how Bluepark uses your personal information on https://www.bluepark.co.uk/privacy/
We make use of google analytics to give us an insight into how customers make use of our website and also help us improve our services. Please visit https://www.google.com/intl/en/policies/privacy/ to learn more about how Google man-ages and uses your personal data.
Payment processing services are provided and carried out by Paypal. Please visit https://www.paypal.com/uk/webapps/mpp/ua/privacy-full to learn more about how Pay-pal manages and uses your personal data.
The Social media share button and Facebook login that features on the website, and added to all product pages and blog pages, only transmit data once they have been clicked. Therefore, the button only becomes active once you have clicked on it and at this point you will be using the social media's website. The only data the social media's serv-ers receive from your site is referral information from the page, such as product title and image. No personal data is transmitted.
However, once you have clicked on the Facebook button, any data that is gathered from your Facebook account, such as name and Facebook ID, will be stored within their User Account. You can request for the information to be deleted.
Do We Disclose Your Personal Data?
In the event of a legal requirement to disclose your personal data by law enforcement agencies or in response to a valid public authority request, we will do so. We may also disclose your data in the following circumstances:
1. To fulfil a legal obligation
2. To Protect our rights and property
3. To prevent or investigate fraudulent or other criminal activities
4. To ensure the safety and protection of the public and other users of the service
5. To protect or prevent legal liability
How Long Do We Retain Your Personal Data?
We may also retain and use your Personal Data to the extent necessary to comply with our legal obligations.
We may also retain automatically generated data for the purpose of internal analysis, which may include to improve our services, strengthen and functionality of our website and service or where we are legally obligated to do so.
What Are Your Rights Under the GDPR?
Under the GDPR, you have the following rights:
1. You have the right to access your personal information we hold, you can get a copy of your personal data free of charge.
2. You have the right to restrict processing and request restriction of use of your da-ta, under certain circumstances.
3. You have the right to ensure any data held about you is accurate
4. You have the right to request that your data be removed, under certain circum-stances.
5. You have a right to data portability, which means you are entitled to request a copy of your personal data we hold in a common electronic format.
6. You have the right under certain circumstances, to request that your data is not used to make automated decisions about you that could have legal consequenc-es.
7. You have the right to lodge a complaint with the Information Commissioners Of-fice (ICO)
How Do We get your Consent?
When you create an account with us, place an order on our website, provide your infor-mation for the purpose of verifying your age or your credit card, arrange for a delivery or return of a product you purchased, we take it that you have consented to your personal data being collected and used for the purpose of performing that specific transaction or contract.
Where we seek to use your personal information for any other reason other than com-pleting a transaction or order you have placed or are about to place with us, for example marketing, we will directly request your consent, or provide you with the option to reject the use of your data for such a purpose.
How Can You Withdraw Your Consent?
If after you have consented to your data being used for any other purpose other than completing an order or transition, you then change your mind, you can at any time with-draw your consent for the use or disclosure or continued collection of your information. To do so, please contact us by email on email@example.com or call us on 01189967352. Where you prefer to contact us by post, you can write to us at the following address:
Variety E-Vape Online
547 Oxford Road
How Can You Access Your Personal Data?
In the event you wish to obtain information about your personal data we may hold, you can request that we provide you a copy of the personal data we hold about you. This is what is known as a subject access request. All Subject access request should be made in writing to our email address which is firstname.lastname@example.org or by post to Variety E Vape Online, 547 Oxford Road, Reading RG30 1HJ. We aim to respond to any subject access request within one month of receipt of the re-quest.
However, in situations where your request is a complex one, we may require more time but not more than three months from the date of the receipt of the request. We will keep you fully informed of our progress over the period. We aim to provide a complete response which will include copies of your personal data we may have in our possession.
If the changes are material in nature, we will notify you that it has been updated, so that you are aware of the changes and how they may affect you, what information we collect, how we use it, and un-der what circumstances, if any, we use and/or disclose it.