Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how UK White Horse LTD (company number 11318566), trading as Vape Squard, collects and uses personal information when you visit vapesquard.co.uk, contact us, create an account or place an order. We are the data controller for the processing described here.

Contact: UK White Horse LTD, 3 The Mews, Park View Road, Manchester, M25 0PU, United Kingdom; support@vapesquard.co.uk; 0161 818 9935.

Information we use

Depending on how you use the store, we may process:

• Contact and account details, such as your name, email address, telephone number and account preferences.
• Order and delivery details, such as products purchased, billing and delivery addresses, order history, delivery status, returns and customer-service correspondence.
• Payment and transaction information needed to take payment, prevent fraud and manage refunds. Payment providers process payment details through their systems; the information returned to us can include payment status and transaction references.
• Age-verification information. Our checkout uses NA Age Verification by Northern Apps. The information and method depend on the check presented. The provider may process information you submit and return a verification result. See its privacy notice for its handling and retention of that information.
• Information you choose to provide in product reviews, newsletter forms, surveys or other messages.
• Technical and usage information, such as device, browser, approximate location, pages viewed and cookie or similar-technology identifiers, as permitted by your settings and applicable law.

Why we use information and our lawful bases

• Orders, accounts and customer service: to take and fulfil orders, provide account features, arrange delivery, handle returns and answer questions. Our lawful basis is usually taking steps at your request or performing our contract with you.
• Age checks, legal records and compliance: to apply age checks to age-restricted orders, keep required business records and meet legal obligations. Depending on the processing, our basis is legal obligation and/or steps needed to perform our contract or protect our legitimate interests in preventing underage sales.
• Site operation, security and fraud prevention: to keep the store working, protect accounts and transactions, diagnose problems and prevent misuse. We rely on our legitimate interests in running a secure online shop, where those interests are not overridden by your rights.
• Reviews, discounts and store features: to provide the feature you choose to use, such as submitting a review or applying a discount. The basis is generally our legitimate interests in operating the store or performing our contract, depending on the feature.
• Marketing: to send promotional email where you have consented or where an applicable existing-customer exception allows it. You can unsubscribe using the link in a marketing email or contact us. We do not use an order email address for unrelated marketing where we are not permitted to do so.
• Optional analytics or advertising: where these technologies are enabled, to understand visits or support advertising. We request consent where required and use the choices available in the store's cookie controls.

Cookies and similar technologies

Shopify and store features may use cookies or similar technologies to keep the site secure, remember your choices, maintain your basket and support checkout. Depending on the tools enabled and your choices, analytics or advertising technologies may also be used. The technologies and their purposes can change when the store's settings or apps change, so this page does not claim to be a complete cookie-by-cookie list. Use the cookie controls shown on the site, where available, to review or change optional choices. You can also manage cookies in your browser; blocking some cookies may affect the basket or checkout.

Who receives information

We share information only as needed for the purposes above, with service providers and others such as:

• Shopify, which provides our online store, hosting, checkout and related services. See Shopify's privacy information.
• Payment providers, including Viva.com Smart Checkout, to process payments, refunds and fraud checks. See Viva.com's privacy policy.
• Age-verification provider, Northern Apps, when an age check is presented. See its privacy notice.
• Delivery providers, including Royal Mail Click & Drop, to deliver orders and provide tracking. See Royal Mail's privacy notice.
• Store-feature providers, such as Judge.me for reviews, Shopify Messaging for email features and HulkApps for discount features, where you use or interact with those features. See Judge.me, Shopify and HulkApps / Shop Circle privacy information.
• Professional advisers, regulators, law enforcement or other authorities where disclosure is required or permitted by law.

These providers may process information on our behalf or under their own privacy terms. Some may process information outside the UK. Where a restricted international transfer takes place, we use a transfer mechanism or other safeguard required by applicable data-protection law.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected. We consider whether an order or customer-service matter is still active, applicable tax, accounting and other legal record-keeping requirements, the need to handle disputes or enforce our terms, and whether the information can be deleted or made anonymous. Marketing details are kept until you unsubscribe or they are no longer needed. Cookie and consent information is kept for the period needed to remember and evidence your choices. Service providers may have their own retention periods; see their privacy information for details, including age-verification data.

Your rights

Depending on the circumstances, you may have the right to request access to your personal information, correction, deletion or restriction; to object to processing based on legitimate interests; to receive certain information in a portable format; and to withdraw consent where we rely on consent. You can object to direct marketing at any time. Some rights are subject to exceptions under data-protection law. To exercise a right, email support@vapesquard.co.uk. We may need to confirm your identity before responding.

You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

Security and changes

We use appropriate safeguards to protect information, but no online service can guarantee absolute security. We may update this policy when our processing, services or legal requirements change. The current version will be published on this page with its update date.