Privacy Policy
This policy explains what personal data we collect when you use hayativapes.uk, why we hold it, and what you can do about it.
Last updated: 12 August 2026
1. Who is the controller
Hayati Vapes is a trading name of Love Vaping Ltd, registered in England & Wales under company number 11308158. VAT registration GB295311204. Registered office and warehouse: Unit 11–15, Fylde Road Industrial Estate, Fylde Road, Preston, PR1 2TY.
For data protection purposes the controller is Love Vaping Ltd. Data protection enquiries: support@hayativapes.uk.
2. What we collect
- Order data — name, billing and delivery address, email, phone number, order contents and value.
- Account data — if you create an account, your login credentials and order history.
- Payment data — handled by Viva Wallet. We receive confirmation of payment and the last four digits of the card; we never see or store full card numbers.
- Age confirmation — a record that you confirmed being over 18.
- Basket data — if you enter an email at checkout but do not complete, we store the basket so we can send a reminder. You are told this at the point of entry and can unsubscribe from any reminder.
- Technical data — IP address, browser type and pages viewed, through cookies.
3. Why we hold it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Meeting age-restriction and tax obligations | Legal obligation |
| Basket reminders and marketing email | Consent, withdrawable at any time |
| Fraud prevention and site security | Legitimate interests |
| Answering your enquiries | Legitimate interests |
4. Who we share it with
We do not sell your data. We share it only with organisations that need it to fulfil your order: our couriers (Royal Mail and, where used, DPD) for delivery; Viva Wallet for payment; and our email provider for order confirmations and any marketing you have opted into. We also use two analytics providers, described in section 7. Each processes data under contract and only on our instructions. We may disclose data where the law requires it.
5. How long we keep it
Order and transaction records are kept for six years to meet HMRC requirements. Marketing consents are kept until you withdraw them. Abandoned basket records are deleted after 15 days. Account data is kept until you ask us to close the account.
6. Your rights
Under UK GDPR you have the right to access a copy of your data, to have inaccurate data corrected, to have data erased where we have no continuing basis to hold it, to restrict or object to processing, to portability, and to withdraw consent at any time. To exercise any of these, email support@hayativapes.uk. We will respond within one month.
Withdrawing marketing consent does not stop transactional email about an order you have placed.
7. Cookies
We use cookies that are strictly necessary for the site to work — keeping your basket and your session — and, where you agree, analytics cookies that tell us which pages are used. You can change or withdraw your cookie choice at any time using the Cookie settings link in the footer of every page.
We use two analytics tools, and they are not treated the same way:
- Google Analytics sets cookies, so it only runs if you accept analytics cookies on the banner. Refuse, and it is not loaded.
- Ahrefs Web Analytics sets no cookies and stores nothing on your device. It counts page views and where visitors arrived from, without identifying anyone or following you across other websites. Because nothing is stored on or read from your device, it does not require consent and runs for everyone. If you would rather it did not, a browser tracker blocker will stop it.
8. Security
The site is served entirely over HTTPS. Payment card data never touches our servers. Access to customer data is limited to staff who need it.
9. International transfers
Your data is processed in the UK and the European Economic Area wherever possible. Where a provider processes data elsewhere, it is done under safeguards recognised by UK data protection law.
10. Complaints
If you are unhappy with how we have handled your data, tell us first and we will try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.