BangVapeEU Privacy Policy

Effective date: 8 June 2024
Controller: BangVapeEU
Website: https://bangvapeeu.com
Contact: [email protected]

Introduction

BangVapeEU (“we”, “us”, “our”) is committed to protecting your privacy. This Policy explains what personal data we collect when you use bangvapeeu.com (the “Service”), how we use and share it, and the rights available to you under the EU GDPR . If you do not agree with this Policy, please do not use the Service. We may update this Policy from time to time; material changes will be posted here with a new effective date.

What We Collect

• Account & Identity Data: name, email address, password (hashed), date of birth, billing/shipping address, phone number.
• Order & Payment Data: order details, chosen payment method, transaction and refund status. We do not store full card numbers or CVV; payments are processed by PCI-DSS compliant providers (e.g., PayPal, Stripe, or local gateways).
• Age-Verification Data: information required to confirm you are 18+ via third-party providers (e.g., 1account or equivalent).
• Usage & Technical Data: IP address, device and browser type, operating system, referral URLs, pages viewed, timestamps, clickstream, and diagnostic data (often via cookies or SDKs).
• Marketing & Communications Data: your marketing preferences and campaign interactions (opens/clicks).
• Affiliate/Partner Data: identifiers from affiliate networks (e.g., AWIN) for referral attribution and fraud prevention.
• Support & User-Generated Content: messages you send us, product reviews, survey responses, and any attachments you provide.

We may aggregate or anonymise data so it can no longer identify you; such data is not considered personal data.

How We Collect Information

• Directly from you: account signup, checkout, forms, reviews, customer support.
• Automatically: via cookies, pixels, and similar technologies when you browse our site.
• From third parties: payment processors, age-verification providers, analytics/advertising partners, couriers and fulfilment services, anti-fraud and address-validation tools, and affiliate networks—where lawful.

How and Why We Use Your Information (Lawful Bases)

• Provide the Service & fulfil orders (contract): create/manage your account, process and deliver orders, handle returns and support.
• Age/identity checks for restricted products (legal obligation/legitimate interests/consent where required).
• Payments & fraud prevention (contract/legitimate interests/legal obligation): process payments, detect and prevent fraud or abuse.
• Operations, security & troubleshooting (legitimate interests): maintain and improve the Service, diagnose issues, secure our systems.
• Analytics & performance (consent/legitimate interests): understand usage and improve products and user experience.
• Marketing & newsletters (consent/legitimate interests): send promotions and updates; you can opt out at any time (see “Your Rights”).
• Compliance & enforcement (legal obligation/legitimate interests): meet legal requirements and enforce our Terms.

We do not sell your personal data.

Third-Party Sharing

We share personal data only as necessary and under appropriate safeguards with the following categories of recipients:

• Payment processors (e.g., PayPal, Stripe) to process transactions.
• Age-verification/identity providers (e.g., 1account or equivalent) to confirm eligibility to purchase age-restricted products.
• Logistics & fulfilment partners (warehousing, couriers, returns handlers) to deliver your order.
• Analytics & performance tools (e.g., Google Analytics) to understand site usage.
• Marketing platforms (email/SMS providers, ad networks) for campaigns with your consent or as permitted by law.
• Affiliate networks (e.g., AWIN) for referral attribution and fraud prevention.
• Hosting/IT & security providers that keep the Service operating.
• Professional advisers and authorities where required by law or to establish/exercise legal claims.

Processors act on our instructions and must not use personal data for their own purposes.

International Transfers

Your data may be transferred to countries outside the EEA. Where we transfer personal data internationally, we rely on lawful transfer mechanisms such as adequacy decisions and/or Standard Contractual Clauses (SCCs) with additional safeguards where appropriate.

Data Retention

We keep personal data only for as long as necessary for the purposes described in this Policy:

• Orders & invoices: retained for periods required by tax and accounting laws.
• Age-verification records: retained for a reasonable period to demonstrate compliance.
• Accounts: retained while your account is active; upon a valid deletion request we erase or restrict data unless we must keep it by law.
• Marketing data: retained until you opt out or after a defined inactivity period.
• Server logs/analytics: retained for short operational periods unless aggregated or anonymised.

Cookies and Similar Technologies

Cookies are small text files placed on your device. We use the following categories: Strictly necessary (core functions like login, cart, checkout), Functionality (language, currency, region), Performance (analytics and diagnostics), Targeting/advertising (measure and deliver relevant ads), and Unclassified (under review). Non-essential cookies are used only with your consent via our cookie banner. You can change preferences at any time via Cookie Settings or your browser. Blocking some cookies may impact site functionality.

Security

We implement technical and organisational measures to protect your data (encryption in transit, access controls, least-privilege, monitoring). However, no system is 100% secure; you use the Service at your own risk. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and regulators as required by law.

Your Rights (EU)

Subject to conditions and applicable law, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing based on legitimate interests or direct marketing. Where processing is based on consent, you may withdraw consent at any time. To exercise these rights, contact [email protected]. You also have the right to complain to a supervisory authority (e.g.,your local EEA authority).

Do Not Track

Some browsers offer a “Do Not Track” (DNT) setting. We currently do not alter our data collection and use practices in response to DNT signals.

Minors

Our products and Service are intended only for adults aged 18+ (or the legal age for vaping in your jurisdiction). We do not knowingly collect data from minors. If you believe a minor has provided data to us, contact us and we will take appropriate steps to delete it.

Medical & Product Disclaimer

Content on bangvapeeu.com is for general information only and is not medical advice. Products containing nicotine are addictive. Consult a healthcare professional if you have questions about vaping or nicotine products. Products are not intended for use by pregnant or breastfeeding persons, people with certain medical conditions, or non-smokers.

Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy or security practices. Review their policies before providing personal data.

Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The effective date at the top shows when it was last updated. Significant changes will be highlighted on this page.

Nous contacter

If you have questions, requests, or complaints about this Privacy Policy or our data practices, please contact: BangVapeEU – Data Protection
Courriel : [email protected]