Privacy Policy

1. Who We Are

Euro Vapour is a trading name of Ashbe Ltd, registered in England and Wales. We are the data controller for the personal data collected through this website and our business operations.

• Address: 135 North Street, Romford, RM1 1ED, United Kingdom
• Email: info@eurovapour.com
• Phone: +44 1708 380260

This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity data: first name, surname, job title
• Contact data: email address, telephone number, business address
• Business data: company name, VAT number, trading history
• Transaction data: order history, payment records
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology on the devices you use to access this website
• Usage data: information about how you use our website
• Communications data: your preferences in receiving marketing from us and your communication preferences

We do not collect any Special Category data (such as health or biometric data).

3. How We Collect Your Data

We collect data through:

• Direct interactions — when you complete our contact or enquiry form, register a trade account, place an order, or correspond with us by email or phone.
• Automated technologies — as you interact with our website, we may automatically collect technical data using cookies and similar technologies. See our Cookie Policy for details.
• Third parties — analytics providers (such as Google Analytics) and payment processors.

4. How We Use Your Data

We use your personal data for the following purposes and on the following lawful bases:

5. Marketing

We will only send you marketing communications if you have opted in to receive them. You may opt out at any time by clicking the unsubscribe link in any email we send, or by contacting us at info@eurovapour.com. Opting out of marketing will not affect service communications related to your orders or account.

6. Data Sharing

We do not sell your personal data. We may share it with:

• Service providers acting as data processors who provide IT, system administration, payment processing, and delivery services
• Regulatory bodies where required by law (e.g. HMRC, MHRA)
• Professional advisers such as lawyers, accountants, and insurers

All third-party processors are required to process your data securely and only for the purposes we specify.

7. Data Retention

We retain personal data only for as long as necessary for the purposes it was collected. In general:

• Customer and order records: 7 years (to comply with HMRC requirements)
• Enquiry and contact form data: 2 years from last contact
• Website analytics data: 26 months

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate data
• Erase your data in certain circumstances
• Restrict processing in certain circumstances
• Data portability in certain circumstances
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at info@eurovapour.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those with a genuine business need to process it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.