1.0 – Data Collection

Nextgen Vapes does not sell products or provide services to children, nor do we market to them. If you are under 18, you are not permitted to use nextgenvapes.co.uk or access our products/services through any other channel.

We may collect and process the following data about you:

1.1 – Information You Provide

This includes details you submit via forms on nextgenvapes.co.uk, by phone, email, or other communication methods. Examples include:

• Registration, orders, subscriptions, surveys, or feedback.

• Personal details (name, email, address, date of birth, gender, etc.).

• Competition entries or marketing preferences.

• Note: We do not store payment card information.

Job Applicants:
If you apply for a role at Nextgen Vapes, we retain application details for up to two years for recruitment purposes. Equal opportunities data (voluntary) is used only for statistical monitoring.

1.2 – Information We Collect Automatically

When you interact with us (e.g., visiting our site or store), we may gather:

• Website activity: URLs visited, traffic data, IP address, browser/OS type.

• Cookies: Used to enhance your browsing experience (see our Cookie Policy). You can disable cookies in your browser settings.

• CCTV: For crime prevention and safety at our premises (retained for up to 30 days unless needed for incidents).

• Incident logs: If an issue arises, we record relevant details.

• Public feedback: Posts or comments about us may be retained.

1.3 – Information from Third Parties

We may verify your identity/age via third-party services (e.g., age checks). These providers may retain search records.

2.0 – Data Use

We process your data under the following legal bases:

2.1 – Contract Fulfilment

To process orders, verify age/identity (via third-party checks), and comply with sales terms.

2.2 – Legitimate Interests

• Improve our website, products, and services.

• Market similar products (existing customers only).

• Prevent fraud (monitoring transactions, CCTV, call recordings).

• Comply with legal/regulatory obligations (e.g., health/safety logs).

2.3 – Consent

• New customers: We (or partners) will contact you only if you consent.

• Cookies/analytics: Enabled with your permission (manage via Cookie Policy).

• Withdraw consent anytime by emailing info@nextgenvapes.co.uk.

2.4 – Legal Compliance

When required by law (e.g., fraud investigations, data subject requests).

3.0 – Data Transfer

Data is primarily stored in the EU, but may be transferred outside the EEA for:

• Order processing, payments, or support (e.g., cloud services).

• Transfers use EU-approved safeguards (e.g., standard contractual clauses).

4.0 – Data Security & Retention

• Encrypted servers and strict access controls protect your data.

• Payments processed via secure gateways (e.g., Stripe, PayPal).

• Retention: Up to 10 years (or as needed legally). CCTV footage: 30 days (unless retained for incidents).

5.0 – Your Rights

You may:
✔ Access, correct, or delete your data.
✔ Restrict processing or withdraw consent.
✔ Request data portability.
✔ Opt out of marketing (info@nextgenvapes.co.uk).

We respond within 30 days (no fee for standard requests).

6.0 – Policy Updates

Last updated: 2025. Changes will be posted on this page.

Contact:
Email info@nextgenvapes.co.uk for questions or requests.