Privacy Policy

Eco Vape Ltd t/a Vape Manufacturing

Eco Vape Ltd is the data controller of the personal data we may collect as part of your use of this site and connected services.

We understand that looking after the personal data you share with us is hugely important. We want you to be confident that your data is safe and secure with us and you understand how we use it, this privacy and cookies policy (Policy) sets out this key information.

What personal data we collect and why we collect it

Personal data we collect about you

This section tells you what personal data we collect about you.

We may collect and process information about you, including without limitation:

• Information that you give us. You may give us information about you by filling in forms on our Website, creating orders or by corresponding with us by phone, e-mail or otherwise. The information you give us may include your name, address, e-mail address and phone number, personal description and photograph.
• Information that we collect about you. With regard to each of your visits to our Website we may automatically collect technical information and information about your visit; and
• Information we receive from other sources. We may receive information about you if you use any of the other websites we operate or the other services we provide. We are also working closely with third parties and may receive information about you from them.

We may supplement the information we collect about you with information we receive from other public sources (eg public registers such as the electoral roll). This allows us to assess the accuracy of the information we hold about you in order to send you relevant offers and information.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics Data

How and why we use your personal data

This section explains in detail how and why we use your personal data. Collecting your personal information helps us to better understand what you need from us and to improve our services to you. Without limitation, we may use your information to:

• manage and improve our Website, including to ensure that content is presented in the most effective manner for you and for your computer;
• administer our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• personalise our services to you;
• tell you about important changes to the Website and our services;
• manage promotions, competitions, customer surveys and questionnaires, and to allow you to participate in interactive features of our service, when you choose to do so; and
• Assess and evaluate any content you submit to us and to contact you to decide on next steps;
• enhance our efforts to keep our site safe and secure.
• You have the right to ask us not to process your personal data for marketing purposes.

How we protect personal data

We know how important it is to protect and manage your personal data. This section sets out some of the measures we have in place:

• We apply physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data;
• We protect the security of your information while it is being transmitted by encrypting it and using password protection.
• We use computer safeguards such as firewalls and data encryption to keep this data safe;
• We only authorise access to employees and trusted partners who need it to carry out their responsibilities;
• We regularly monitor our systems for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security; and
• We will ask for proof of identity before we share your personal data with you.

Whilst we take appropriate technical and organisational measures to safeguard your personal data, it is important that you keep your login details and devices protected from unauthorised access.

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. If we do this we ensure that your privacy rights are respected in line with this Policy. The most common way we do this is to put in place a specific type of contract called “Standard Contractual Clauses” or through an approved scheme such as the “Privacy Shield”.

Who we share your data with

We may share personal data with other organisations in the following circumstances:

• With our service providers (such as our website or event hosts) in order to run the service and administer your account;
• If you are a shareholder, with our share registrar service provider;
• If you are a shareholder, with our tracing agents in order to locate “missing” shareholders;
• If the law or a public or regulatory authority says we must share the personal data;
• If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud);
• Where we restructure, sell or transfer our business (or a part of it). For example in connection with a takeover or merger.
• With third parties who help us assess and evaluate any content or ideas you share with us.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

The legal basis of processing customer data

In relation to personal data we process to send you any marketing communications that you have agreed to receive, we do so based on your consent. You can withdraw your consent at any time to receiving these communications. In relation to the other personal data processed, we process this based on what is called our “legitimate interests”, these are:

• to help you understand our business, its performance and changes;
• to keep you informed about news and events, including regulatory news connected with Tesco;
• to assess and evaluate any content you submit to us and to decide on next steps in relation to your submission;
• to administer and keep up to date your account, resolve problems and respond to complaints;
• to prevent and detect fraud;
• to invite you to attend events connected with the above.

Where we send your data

Visitor comments may be checked through an automated, third-party spam detection service.

Data protection officer

Our Data Protection Team can be contacted by email: dpo@vape-manufacturing.co.uk

Subject access right

You have the right to see the personal data we hold about you. This is called a “Subject Access Request”.

If you would like a copy of the personal data we hold about you, please write to:

• The Data Controller, Vape Manufacturing Ltd., Cotes Park Estate, Cotes Park Lane, Alfreton, Derbyshire, DE55 4NJ.

You can also email us at: dpo@vape-manufacturing.co.uk

Complaining to the data privacy regulator

We’d like the chance to resolve any complaints you have, however you also have the right to complain to the UK data protection regulator (the ICO) about how we have used your personal data. Their website is https://ico.org.uk.

Other privacy rights

If you believe we hold incorrect or inaccurate personal data about you please let us know and we will correct it.

In some circumstances you may also have the right to object to our use of your personal data, restrict our use of it, have us delete it or have us port a copy of it to you or a third party.

You can find out more about these rights by visiting the ICO’s website: ico.org.uk, or alternatively contacting us (per the “Contact Us” section on our website).