Privacy Policy
This policy explains what personal data we collect when you use hayativapes.uk, why we hold it, and what you can do about it.
Last updated: 3 August 2026
1. Who is the controller
Hayati Vapes is a trading name of Love Vaping Ltd, registered in England & Wales under company number 11308158. VAT registration GB295311204. Registered office and warehouse: Unit 11–15, Fylde Road Industrial Estate, Fylde Road, Preston, PR1 2TY.
For data protection purposes the controller is Love Vaping Ltd. Data protection enquiries: support@hayativapes.uk.
2. What we collect
- Order data — name, billing and delivery address, email, phone number, order contents and value.
- Account data — if you create an account, your login credentials and order history.
- Payment data — handled by Viva Wallet. We receive confirmation of payment and the last four digits of the card; we never see or store full card numbers.
- Age confirmation — a record that you confirmed being over 18.
- Basket data — if you enter an email at checkout but do not complete, we store the basket so we can send a reminder. You are told this at the point of entry and can unsubscribe from any reminder.
- Technical data — IP address, browser type and pages viewed, through cookies.
3. Why we hold it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Meeting age-restriction and tax obligations | Legal obligation |
| Basket reminders and marketing email | Consent, withdrawable at any time |
| Fraud prevention and site security | Legitimate interests |
| Answering your enquiries | Legitimate interests |
4. Who we share it with
We do not sell your data. We share it only with organisations that need it to fulfil your order: our couriers (Royal Mail and, where used, DPD) for delivery; Viva Wallet for payment; and our email provider for order confirmations and any marketing you have opted into. Each processes data under contract and only on our instructions. We may disclose data where the law requires it.
5. How long we keep it
Order and transaction records are kept for six years to meet HMRC requirements. Marketing consents are kept until you withdraw them. Abandoned basket records are deleted after 15 days. Account data is kept until you ask us to close the account.
6. Your rights
Under UK GDPR you have the right to access a copy of your data, to have inaccurate data corrected, to have data erased where we have no continuing basis to hold it, to restrict or object to processing, to portability, and to withdraw consent at any time. To exercise any of these, email support@hayativapes.uk. We will respond within one month.
Withdrawing marketing consent does not stop transactional email about an order you have placed.
7. Cookies
We use cookies that are strictly necessary for the site to work — keeping your basket and your session — and, where you agree, analytics cookies that tell us which pages are used. You can refuse non-essential cookies and change your mind later through your browser settings.
8. Security
The site is served entirely over HTTPS. Payment card data never touches our servers. Access to customer data is limited to staff who need it.
9. International transfers
Your data is processed in the UK and the European Economic Area wherever possible. Where a provider processes data elsewhere, it is done under safeguards recognised by UK data protection law.
10. Complaints
If you are unhappy with how we have handled your data, tell us first and we will try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.