Your data, your rights.
We collect only what's needed to run the shop, ship your order, and stay in touch when you've asked us to. This page explains what we hold, why, how we protect it — and what you can do to control it.
At a glance
- We never sell your data to third parties
- We comply with UK GDPR and the Data Protection Act 2018
- You can access, correct, or delete your data at any time
- Marketing emails are opt-in only — easy to unsubscribe
The data controller
Alectrofag is a trading name of Love Vaping LTD, a company registered in England and Wales. For the purposes of UK data protection law, Love Vaping LTD is the data controller of any personal information you provide when using this website.
Information we collect
We collect different types of information depending on how you interact with us. Not all of it is collected from every visitor.
Identity information
First name, last name, date of birth, and age verification results.
Contact information
Email address and phone number, collected when you place an order or create an account.
Demographic information
Postcode, delivery preferences, and stated interests for personalisation.
Transaction data
Details of purchases made through our website. Payment card details themselves are processed by our payment provider, not stored by us.
Technical data
IP address, browser type, device type, and browsing patterns on our site.
Marketing preferences
Your choices about receiving promotional communications from us.
Other information
Anything you provide voluntarily through customer surveys, competitions, or offers.
How we use your information
Order processing
Managing your purchases, processing payments, and arranging delivery.
Customer service
Responding to enquiries, resolving issues, and handling returns and refunds.
Marketing communications
Sending promotional emails about new products, special offers, or relevant content — only if you've opted in. You can unsubscribe at any time.
Personalisation
Tailoring website content and product recommendations based on your preferences.
Analytics and improvement
Understanding how our website is used so we can improve performance, usability, and product range.
Legal compliance & fraud prevention
Meeting our legal obligations (including age verification for vape products) and preventing fraudulent activity.
Why we're allowed to process your data
UK GDPR requires us to have a lawful reason for processing your personal data. Depending on what we're doing, one or more of these applies.
Contract
To fulfil your order and provide the service you've paid for. Without your information, we can't ship to you.
Legitimate interests
To improve our services, prevent fraud, and run our business effectively — balanced against your privacy rights.
Consent
For marketing communications and non-essential cookies. You can withdraw consent at any time.
Legal obligation
For keeping records required by HMRC, age verification for vape products, and complying with other UK laws.
How we protect your information
We use a combination of technical and organisational measures to keep your data safe.
- SSL encryption on all transactions and communication with our servers
- Access controls so only authorised staff handle personal data
- Regular security audits and vulnerability assessments
- UK GDPR and DPA 2018 compliance across all data handling
- Payment data handled by PCI-compliant providers, not stored by us
- Secure backups with encryption at rest
No system on the internet is 100% secure, so we strongly recommend using a strong, unique password for your account and contacting us straight away if you notice anything unusual.
Cookies & tracking technologies
Cookies are small text files stored on your device that help our website work properly and remember your preferences. We use four types.
You can manage cookies through your browser settings or our cookie preferences panel. Disabling some cookies may limit certain features of the site.
Sharing your data
We don't sell, rent, or share your data with third parties for their own marketing. We share data only in these specific cases:
Service providers
Companies that help us run the business — couriers (for delivery), payment processors (for transactions), and helpdesk software providers. They're contractually required to protect your data and use it only for the agreed purpose.
Legal obligations
We may disclose data when required by law, a court order, or a regulatory authority — for example, in response to a valid police request or HMRC enquiry.
Business transfers
If Love Vaping LTD is involved in a merger, acquisition, or sale of business assets, your data may be transferred to the new owner under strict confidentiality agreements.
Links to external sites
Our website may contain links to external sites that aren't operated by us. We have no control over those sites and aren't responsible for their privacy practices. We encourage you to review the privacy policy of any external site you visit before sharing personal information with it.
Your data protection rights
Under UK GDPR, you have the following rights regarding your personal data. These are free to exercise — just email us.
Right of access
Request a copy of the personal data we hold about you, free of charge.
Right to rectification
Request corrections to any inaccurate or incomplete data we hold.
Right to erasure
Request that we delete your data in certain circumstances (also known as the "right to be forgotten").
Right to restrict processing
Request that we limit how we use your data in certain situations.
Right to object
Object to processing based on legitimate interests, or to any direct marketing at any time.
Right to data portability
Request that we transfer your data to you or another service provider in a structured, machine-readable format.
How long we keep your data
We hold personal data only as long as we need it for the purpose it was collected, plus any period required by law.
Order and transaction records
Kept for 6 years after your last order to meet HMRC tax record requirements.
Account data
Kept until you ask us to delete your account, or after a long period of inactivity (we'll let you know before we delete anything).
Marketing preferences
Kept until you unsubscribe or withdraw your consent.
Cookies
Stored on your device according to each cookie's set lifetime, and managed via your browser settings.
Restricted to adults
Our website and services are intended for individuals aged 18 and above. We collect age verification data to comply with UK law on the sale of age-restricted products. We may request additional proof of age where necessary.
By placing an order with us, you confirm that you are 18 or older. If we have reason to believe a user is under 18, we will cancel any pending orders and delete the associated account data.
Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we operate. The "Last updated" date at the top of this page shows when the most recent revision was made.
Where changes are significant, we'll let you know via the website or by email if you have an account with us. Continued use of our website after changes go live means you accept the updated policy.
Questions about your data?
Medical disclaimer
Vaping products are intended for adult smokers and vapers only. Content on this website is for informational purposes and should not be considered medical advice. If you have any concerns about vaping, nicotine use, or related health effects, please consult a healthcare professional.