Privacy Policy

How We Protect Your Data

Last updated: February 2026

1. Introduction

Vapor-Z South Ltd, trading as The Nobacconists (Company No. 08694139), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, shop in our stores, or interact with us in any way.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is 164 Commercial Road, Southampton, SO15 1GF.

2. Information We Collect

We may collect the following types of personal information:

  • Identity data: Name, date of birth (for age verification purposes)
  • Contact data: Email address, telephone number, postal address
  • Transaction data: Details of products purchased, payment information, order history
  • Technical data: IP address, browser type, operating system, pages visited on our website
  • Marketing data: Your preferences for receiving marketing communications
  • Communications data: Records of any correspondence with us via email, phone, or social media

3. How We Use Your Information

We use your personal data for the following purposes, each supported by a lawful basis under the UK GDPR:

  • To fulfil orders and process payments (contractual necessity)
  • To verify your age in compliance with UK law (legal obligation)
  • To communicate with you about your orders, queries, or returns (contractual necessity)
  • To send marketing communications where you have opted in (consent)
  • To improve our website and services (legitimate interest)
  • To comply with legal and regulatory requirements (legal obligation)

4. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

  • Delivery partners (e.g., Royal Mail) to fulfil your orders
  • Payment processors to securely process transactions
  • Age verification services to comply with legal requirements
  • IT service providers who help us maintain our website and systems
  • Law enforcement or regulatory authorities where required by law

All third-party processors are contractually bound to handle your data in accordance with UK GDPR.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. In general:

  • Order and transaction data: 6 years (for tax and accounting obligations)
  • Marketing consent records: Until you withdraw consent
  • Website analytics data: 26 months
  • Customer enquiry records: 2 years from last contact

6. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at sales@the-nobacconists.co.uk.

7. Cookies

Our website uses cookies to enhance your browsing experience and analyse website traffic. Cookies are small text files stored on your device. We use:

  • Essential cookies: Required for the website to function (e.g., shopping basket, login sessions)
  • Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)
  • Marketing cookies: Used to deliver relevant advertisements (only with your consent)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect against unauthorised access, alteration, disclosure, or destruction. These include SSL encryption on our website, secure payment processing, and restricted access to personal data within our organisation.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Vapor-Z South Ltd t/a The Nobacconists
164 Commercial Road, Southampton, SO15 1GF
Email: sales@the-nobacconists.co.uk
Tel: 023 8023 4533

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.