Data Protection

SUMMARY OF INFORMATION WE PROCESS

To operate an online vaping shop, we process information tied to accounts, orders, payments, delivery, plus security and service improvement. We limit processing to the necessary and apply protections adapted to sensitive information.

ACCOUNT INFORMATION

Account information can include your name, email address, language and currency preferences, and security settings. Passwords are not stored in clear; they are protected by hashing mechanisms.

DELIVERY INFORMATION

Delivery information includes the address, recipient name and telephone number for handover of the parcel. It is used to ship the order, communicate tracking and manage incidents. It is shared with couriers only to the extent necessary.

PAYMENT INFORMATION

Payments are processed by payment providers. We do not store your complete card number. We use tokens and transaction identifiers to allow secure processing of payments and refunds, while limiting exposure of sensitive information.

BROWSING INFORMATION AND COOKIES

We use cookies and session identifiers to keep your basket, authenticate you, secure browsing and measure audience. You can manage these parameters via your browser, with a possible impact on certain essential features.

USE FOR ORDER FULFILMENT

Information is used to confirm the order, process payment, prepare dispatch, deliver products, handle returns, and provide purchase-related assistance. Certain information is essential to execute the sale.

USE FOR SECURITY

We use anti-fraud measures and security checks to protect accounts and transactions. This can include analysis of technical signals, anomaly detection and limiting login attempts.

INTERNAL ACCESS AND CONTROL

Access to information is restricted to authorised persons, based on the need-to-know principle. Controls and access logs are put in place to reduce the risk of unauthorised access and to facilitate investigation in the event of an incident.