Privacy Policy

We collect the following personal data when you place an order or contact us:

• Name, email address, and phone number
• Billing and shipping address
• Order history and payment method selection
• IP address and browser information (via server logs)
• Any messages you send us via the contact form

We do not store card numbers or payment credentials — payments are handled securely by your chosen method (PayPal, Bank Transfer, CashApp, Bitcoin, etc.).

We use your personal data to:

• Process and fulfil your orders discreetly
• Send order confirmations and shipping updates
• Respond to your enquiries
• Improve our website and services
• Comply with legal obligations

We do not sell your personal data to third parties.

We retain your order data for up to 7 years for tax and accounting purposes as required by UK law. Contact form messages are retained for up to 2 years.

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Object to processing
• Data portability

To exercise any right, email us at info@ediblevapesstorm.co.uk.

Our website uses a session cookie to maintain your shopping cart. No tracking or advertising cookies are set. You can disable cookies in your browser settings, but this will prevent the cart from functioning.

We may use the following third-party services: PayPal, CashApp, Venmo, Zelle (payment processing), Bootstrap CDN and Google Fonts (page styling). These services have their own privacy policies.

We implement security best practices including HTTPS encryption, prepared SQL statements to prevent injection attacks, and hashed passwords. All transactions are processed securely. However, no internet transmission is 100% secure.

Questions about this policy? Contact us: info@ediblevapesstorm.co.uk