Privacy Policy
This policy explains what personal data PinkVape collects, why, on what legal basis, how long we keep it and who we share it with.
Who Is the Data Controller
The data controller is TREAT VERSE LTD (Company No. 16935581), registered office: 10 Parkfield Avenue, Manchester, England, M14 4HL. For any privacy question or request, email [email protected].
What We Collect and Why
- Order data (name, email, phone, delivery address, items ordered): to process, deliver and support your order. Lawful basis: performance of a contract.
- Age confirmation (your 18+ declaration at checkout): to comply with UK age-restriction law. Lawful basis: legal obligation.
- Account data (email, password stored as a salted hash, order history, loyalty points): to run your account. Lawful basis: performance of a contract.
- Marketing email address (newsletter or the marketing tick-box at checkout): to send offers and updates. Lawful basis: consent — withdraw any time via the unsubscribe link or by emailing us.
- Technical and analytics data (pages visited, device type, approximate location by town, and Google Analytics cookies where you accept them): to keep the store working and understand how it is used. Lawful basis: legitimate interests, and consent for analytics cookies.
Who We Share Data With
We share data only with the service providers needed to run the store: CostPlus (payment processing — we never see or store your card details), Cloudflare (website hosting), Resend (transactional and marketing email delivery), Google Analytics (usage statistics, only with cookie consent), and our delivery couriers (name and address, to deliver your parcel). We never sell your data.
How Long We Keep It
Order and invoice records are kept for 6 years, as required for UK tax and consumer-law purposes. Account data is kept until you delete your account. Marketing email addresses are kept until you unsubscribe. Anonymous page-view analytics are kept for 7 days on our own systems.
Your Rights
Under UK GDPR you can ask for access to, correction of, deletion of, or a portable copy of your personal data, object to or restrict processing, and withdraw consent at any time — email [email protected] and we will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
Essential cookies and local storage run the basket, checkout and account features. Optional analytics cookies (Google Analytics) are only set if you accept them in the cookie banner, and you can decline them with no loss of functionality.