Please also refer to the Terms & Conditions of sale before purchasing from OK Vape.
OK Vape Ltd
Unit 6 The Threshing Barn
OK Vape Ltd act as the controller of any data given by a User. Our web developers Blaze Concepts also act as controllers of this data as the managers of this Website.
Information That we May Collect & Why
In terms of a sale, we will collect the following information to fulfil your order and to provide us with contact details, should we need to contact you regarding the order.
- Full name
- Email address
- Phone number
- Billing & delivery address
- IP Address
- Date of birth
FOR INTERNAL BUSINESS ANALYSIS
We may collect the following information, in addition to the above, for our own internal business analysis:
- Order history
- Pages visited on this website
- IP Address
FOR MARKETING PURPOSES
We may collect the following information to send email marketing communications where consent has been given:
- Full Name
- Email Address
- Date of Birth
- Order History
How we use Your Information
We use various third parties for internal analysis, customer services and where marketing communications consent has been given, to tailor marketing materials to our customers' interests. You can find out more about marketing communications in the next section.
If you are placing an order or creating an account, we may use certain trusted third parties to process your data. This is so that we can analyse customer activity as a whole to make business, service and product improvements and to assist with customer service.
Please see below for a list of the third parties that we may use to process your data and the data that we share with them.
We will never sell your data and will only share your data with third parties that enable us to analyse our business data or deal with communications most effectively.
We do not collect or buy data about you from any outside sources.
Information Regarding Age Verification Checks
No information may be submitted to OK Vape Ltd by persons under the age of 18, nor may persons under the age of 18 make purchases or other legal acts on this Site.
We have an age verification system in place to ensure that purchases cannot be made by anyone under the age of 18. When you pass through the Site's checkout system your details will be checked by age verification provider, Age Checked (please see Processors section for more information) to verify your identity.
We must verify your age by law so if you are not happy for your details to be used in this way, we regret that you will be unable to place an order with us.
Data Processors For This Website
We may use the following third parties to process your data in order for us to provide our services and manage internal processes. These organisations have been audited to ensure compliance with the EU General Data Protection Regulations. Processors located in non-EU states have all been approved by the European Commission as having an adequate level of data protection.
How We Use Your Data
How We Store & Protect Your Information
Your data is stored securely with our hosting provider on a VPS server. All data transferred between your browser and the server is encrypted. If you hold an account on this Website, your account password is also encrypted.
Any data held by third parties cannot be accessed by anyone outside of the Company or the third parties themselves. Third party platforms are password protected and can only be accessed by internal staff or staff of the third party in question. These companies have been audited by ourselves for GDPR compliance.
Our Data Retention Policy
We will retain any data we hold about you whilst you are actively using our services, until the point that you request removal or after a period of 7 years from the last order placed.
User accounts and data records for users that have no associated orders will be removed after 2 years of inactivity.
Your Right To Access, Corrections & Data Erasure
We respect your privacy rights and provide reasonable access to the Personal Data that you have provided to us through the use of our services.
How to request access, amendments or erasure of your data
If you wish to receive a record of data we hold about you, or for us to amend or erase any of your data, please contact us. We will follow company procedure, responding in a timely manner and satisfying the request within 30 days as per the requirements of the GDPR.
We require confirmation of identity in order to process your request. This involves the completion of a data access/modification/erasure request form. An electronic copy of this form will be emailed to you in the first instance. If a reply is not received after 14 days we will send a copy of the form by post, provided we have an address for you.
If we do not receive a completed form, we will be unable to complete your request as this will be deemed insufficient evidence of identity.
Amending your own data
At any time, you may access and change your name, phone number, contact email and delivery and billing addresses yourself from within your Account. This will automatically update any records that we hold.
Unsubscribing From Marketing Emails
If you wish to unsubscribe from marketing emails you can do so at any time by clicking the link at the bottom of any of our marketing emails. You can also click here to update your email preferences here.
Unsubscribe From Receiving Direct Mail
We may, on rare occasions, send you a letter if we have a special offer just for you, or if we need to inform you about any product or service changes. You can opt out of receiving direct mail from us at any time here.