Privacy policy
JBD Vapes Ltd is the data controller for personal data collected through this website. We are registered with the Information Commissioner's Office (ICO), reference [ICO reference]. This policy explains how we handle your data under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
What we collect
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, email, phone, password | Run your trade account | Contract |
| Business name and type, company number, postcode | Check you are a genuine business | Legitimate interests and legal obligation |
| Age confirmation and ID checks on delivery | Prevent sales to under-18s | Legal obligation |
| Delivery and billing addresses | Deliver orders and invoice you | Contract |
| Order history | Fulfil orders, reorders, tax and duty records | Contract and legal obligation |
| Payment details | Taking payment (processed by Shopify Payments or our payment provider; we never see full card numbers) | Contract |
| Marketing email address | Send our weekly trade offers | Consent (you can unsubscribe at any time) |
| Device, browser and site usage data | Keep the site secure and working; analytics if you allow cookies | Legitimate interests; consent for non-essential cookies |
Who we share it with. We share only what is needed with: Shopify (our e-commerce platform), our payment provider, delivery couriers, our accountants, and HMRC, Trading Standards or the police when the law requires. Some providers, including Shopify, may process data outside the UK; where they do, they use safeguards approved under UK law, such as the UK International Data Transfer Agreement or adequacy regulations.
How long we keep it. Order, invoice and duty records for 6 years after the end of the financial year, as required for tax. Account data while your account is open and for 2 years after it closes. Rejected applications for 12 months. Marketing data until you unsubscribe.
Cookies. We use essential cookies to run the cart, checkout and age check. With your consent, we also use analytics and marketing cookies. You can change your choice at any time using the cookie banner or your browser settings.
Your rights. You can ask to access, correct, delete or restrict your data, object to its use, or move it to another provider. You can withdraw consent at any time. Email contact@jbdvapes.co.uk and we will respond within one month. If you are unhappy, you can complain to the ICO at ico.org.uk or on 0303 123 1113.
Security. Your account is password-protected and payments are handled by PCI-compliant providers. Please keep your password private.
Last updated: 2 October 2026