Privacy Policy
This policy explains what personal data Vapkicks collects when you use vapkicks.com, why we collect it, how long we keep it and what rights you have over it. It is written to be read, not to be skimmed past.
Who we are
Vapkicks is an online shop for disposable vapes and related products. We ship from two warehouses, one inside the European Union and one in China. We are the controller of the personal data described here.
For anything in this policy — a question, a request, a complaint — write to support@vapkicks.com.
What we collect
Order data.
When you place an order we collect what is needed to fulfil it: your name, email address, billing and delivery address, telephone number where you give one, the items you ordered and the amount paid.
Account data.
If you create an account we store your email address, a password stored only as a hash, and any addresses you save. Your order history is attached to that account.
Technical data.
Our servers log the requests they receive. That includes your IP address, the page requested, the time of the request and your browser's user-agent string. We keep these logs to run the site, diagnose faults and detect abuse.
Cart data.
While you shop we store a session identifier so that your basket survives a page reload. It is not linked to your identity unless you go on to check out.
Correspondence.
If you write to us on WhatsApp or by email, we hold that exchange so that we can answer it and refer back to it.
What we do not do
We do not run advertising or analytics trackers. This site loads no Google Analytics, no advertising pixels and no third-party marketing tags, and we do not build advertising profiles.
We do not sell your personal data, and we do not pass it to anyone for their own marketing.
The newsletter box in the footer is not connected to a mailing service, so an address entered there is not transmitted or stored anywhere. If we connect it later, we will update this policy first.
Cookies
We set the following cookies. Every one of them is necessary for the site to work — there are no advertising or analytics cookies, and so nothing to consent to before you browse.
- _medusa_cart_id — identifies your shopping basket.
- _medusa_jwt — keeps you signed in to your account.
- _medusa_pending_customer — carries a registration through email verification.
- _medusa_locale — remembers the language you chose.
- _medusa_country — remembers the delivery country you chose.
- _medusa_cache_id — scopes cached pages to your own session.
- vk-age-verified — records that you confirmed you are old enough to view the site.
You can delete or block cookies in your browser at any time. Blocking the cart or session cookies will stop checkout and sign-in from working, because the site has nowhere else to keep that state.
Why we use it, and on what basis
- To take, fulfil and deliver your order, and to handle returns — necessary to perform our contract with you.
- To keep your account and your order history — necessary to perform our contract with you.
- To keep the site running, secure and free of abuse — our legitimate interest in operating the shop.
- To answer your questions and resolve complaints — our legitimate interest in supporting customers.
- To keep invoices and meet tax, accounting and consumer-law duties — our legal obligation.
Who we share it with
We share personal data only with the service providers that run the shop, and only as far as each of them needs it:
- our hosting and content-delivery provider, which serves the pages to your browser;
- our store platform, which holds the order and customer records;
- the carrier that delivers your parcel, which receives the name, address and telephone number printed on the label;
- our email provider, which sends order confirmations and password resets.
We do not sell your personal data. We do not share it with anyone for their own marketing.
Transfers outside the EEA
Some of those providers process data outside the European Economic Area, including in the United States and in China, where our second warehouse is. Where that happens we rely on the provider's standard contractual clauses or an equivalent safeguard, and we limit the transfer to what the service actually needs.
How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires, which is normally seven years. Account data is kept while the account is open and deleted when you close it or ask us to. Server logs are kept for a short period and then discarded. Correspondence is kept while it is useful and then deleted.
Your rights
If you are in the European Economic Area you have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to have its processing restricted, to object to processing we base on our legitimate interests, and to receive the data you gave us in a portable format.
Write to support@vapkicks.com and we will answer within one month. If you are not satisfied with our answer you can complain to the data protection authority in the country where you live.
Age
This site is not intended for anyone below the minimum legal age for buying vaping products in their country of residence, which is 18 in most EU member states. We do not knowingly hold data about anyone below that age. If you believe we do, tell us and we will delete it.
Changes
If we change how we handle personal data we will update this page and move the date below it. Material changes will be announced on the site before they take effect.
Contact
Vapkicks — support@vapkicks.com