4L Private Limited (trading as Vape 4L)

Introduction

At Vape4L, we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, create an account, place an order, or interact with us in any way. It also outlines your rights under UK data protection laws and how those rights are protected.

Please Note: Our website is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.

1. Important Information and Who We Are

This Privacy Policy applies to 4L Private Limited, trading as Vape4L (“we”, “us”, “our”).

We are the data controller responsible for your personal data. If you have any questions about this Privacy Policy or wish to exercise your legal rights, you can contact us using the details provided on our website.

You have the right to raise concerns with the Information Commissioner’s Office (ICO), the UK authority for data protection matters. We encourage you to contact us first so we can resolve any issues promptly.

2. The Data We Collect About You

We may collect, use, store, and process the following categories of personal data:

• Identity Data: Name, title, date of birth, and age-verification results.

• Contact Data: Billing address, delivery address, email address, phone number.

• Transaction Data: Order history, payments, returns, refunds.

• Technical Data: IP address, browser type and version, device information, operating system.

• Usage Data: Information about how you use our website.

• Marketing & Communications Data: Your marketing preferences and communication choices.

We may also use aggregated or anonymised data for analytical or statistical purposes. This data does not identify you. We do not collect special category personal data or data relating to criminal convictions.

3. How We Collect Your Personal Data

We collect personal data through:

• Direct interactions: Such as when you place an order, create an account, contact customer support, or subscribe to marketing.

• Automated technologies: Including cookies and similar tools when you browse our website.

• Third-party services: Such as payment processors, delivery partners, analytics providers, and age or identity verification services.

4. How We Use Your Personal Data

We only use your personal data where permitted by law. Most commonly, we use it to:

• Process and fulfil your orders.

• Verify your age and identity.

• Manage your account and customer relationship.

• Communicate with you about orders, updates, or support requests.

• Improve our website, services, and customer experience.

• Send marketing communications where you have not opted out.

• Prevent fraud and maintain site security.

You may opt out of marketing communications at any time by using the unsubscribe links or contacting us directly.

5. Cookies

We use cookies to improve website functionality and performance. Cookies help us understand how visitors use our site and allow certain features to work correctly. You can control or disable cookies through your browser settings. Please note that disabling cookies may affect site functionality.

6. Disclosures of Your Personal Data

We may share your personal data with trusted third parties, including:

• Payment service providers.

• Delivery and logistics partners.

• IT and website service providers.

• Professional advisers and regulators where legally required.

All third parties are required to protect your data and use it only for authorised purposes.

7. International Transfers

We do not routinely transfer personal data outside the UK or European Economic Area. Where such transfers are required, appropriate safeguards are in place to protect your data.

8. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. Access to personal data is restricted to individuals who need it for legitimate business purposes.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements.

• Transaction records: Typically retained for up to six years in line with UK tax and legal obligations.

• Anonymised data: In some cases, data may be retained for analytical purposes.

10. Your Legal Rights

Under UK data protection laws, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete data.

• Request deletion of your personal data.

• Object to or restrict processing.

• Request transfer of your data.

• Withdraw consent at any time.

To exercise any of these rights, please contact us using the details on our website. We aim to respond within one month.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.