Contact information such as name, email address, and phone number: To process orders, send updates, and provide support.

Delivery and billing information: To deliver products, process orders, and help prevent fraud.

Account information and order history: To manage customer accounts and simplify future purchases.

Payment status and transaction information: To process payments securely. Full card details are not stored on our own systems.

Age verification and identity verification information where required: To confirm eligibility for nicotine product purchases.

Customer support communications: To respond to enquiries and resolve issues.

Website usage information such as browser, device, session, and cookie data: To operate, secure, and improve our website.

Marketing preferences and email engagement: To manage newsletter subscriptions and marketing communications.

Processing orders: To process payments, confirm orders, arrange delivery, and manage refunds or support requests.

Age verification: To verify that customers purchasing nicotine products are at least 18 years old before fulfilment and payment capture.

Customer support: To respond to enquiries, resolve issues, and provide assistance relating to orders or accounts.

Website improvement: To improve website functionality, navigation, product selection, and customer experience.

Marketing communications: To send newsletters, product updates, offers, and educational content where permitted.

Fraud prevention and security: To detect fraud, prevent misuse, protect customer accounts, and secure our website.

Legal and regulatory obligations: To comply with tax, accounting, consumer protection, regulatory, and legal obligations.

Processing and fulfilling orders: Contract performance

Managing customer accounts: Contract performance

Age verification for nicotine products: Legal obligation and/or legitimate interests

Payment processing and fraud prevention: Contract performance, legal obligation, and legitimate interests

Customer support: Contract performance and legitimate interests

Website analytics and improvement: Legitimate interests and/or consent where required

Marketing communications: Consent or legitimate interests where permitted by law

Tax, accounting, and legal record keeping: Legal obligation

Date of birth check: You may be asked to provide your date of birth during checkout.

Additional verification: If required, you may be asked to complete identity verification after placing your order.

Order hold: Your order may be temporarily placed on hold while verification is pending.

Failed or incomplete verification: If verification cannot be completed successfully, your order may be cancelled and payment authorisation released without capture.

Payment providers: To process payments securely and help prevent fraud.

Delivery and logistics partners: To deliver orders and provide delivery updates.

Age verification providers: To verify eligibility for nicotine product purchases.

Website and hosting providers: To operate, maintain, and secure our website and systems.

Email and communication providers: To send order updates, support messages, and marketing communications where permitted.

Analytics and functionality providers: To understand website performance and improve customer experience.

Professional advisers: To obtain legal, accounting, tax, insurance, or business advice.

Authorities or regulators: Where disclosure is required by law or necessary to protect legal rights.

Order and transaction records: Kept as required for tax, accounting, customer service, and legal purposes.

Account information: Kept while your account remains active or as otherwise reasonably necessary.

Age verification records: Limited records may be retained to demonstrate compliance with age-restriction obligations.

Customer support communications: Retained for as long as reasonably necessary to resolve enquiries, disputes, or service issues.

Marketing preferences: Retained until you unsubscribe or withdraw consent.

Website analytics data: Retained for a limited period to help improve website functionality and performance.

Access: You can request a copy of the personal information we hold about you.

Correction: You can ask us to correct inaccurate or incomplete information.

Deletion: You can request deletion of information where we no longer need it or where deletion is legally required.

Restriction: You can ask us to restrict certain processing in specific circumstances.

Objection: You can object to certain processing based on legitimate interests or direct marketing.

Withdraw consent: You can withdraw consent where processing is based on consent.

Data portability: You can request certain information in a structured, machine-readable format.

Complaint: You can lodge a complaint with a relevant data protection authority.