This policy explains what personal data PopVapor collects, why, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The short version: we collect very little. There are no accounts, no shop, no newsletter and, at the moment, no analytics. The only personal data we receive directly is what you choose to send us through the contact form.
Who we are
PopVapor is an editorial website about pod vapes in the UK. For the purposes of data protection law, PopVapor is the controller of the personal data described here. You can reach us about anything in this policy through our contact page.
What we collect and why
Contact form messages
If you use the contact form, we receive your name, email address and whatever you write in your message. We use this only to read and reply to you, and to correct our content if you've reported a mistake.
The form is run by Web3Forms, a third-party form service. When you press send, your message goes to Web3Forms, which passes it to us by email. Web3Forms acts as a processor for this purpose. You can read how it handles data on the Web3Forms website.
Our lawful basis is legitimate interests: we need to process your details to respond to a message you chose to send us.
We keep messages only for as long as we need them to deal with your enquiry, and we delete them within 12 months unless we need to keep a record of a correction.
Age check setting
When you first visit, we ask you to confirm you're 18 or over. Your answer is saved in your browser's local storage so you aren't asked again on every page. This is stored on your device, not sent to us, and it doesn't identify you. You can remove it at any time by clearing your browser's site data. Because it's strictly necessary to show you the site in line with your choice, it doesn't need separate consent.
We don't set advertising or tracking cookies.
Hosting and security logs
The site is hosted and delivered through Cloudflare. Like any web host, Cloudflare processes technical data when you visit, such as your IP address, browser type and the pages requested, to deliver the site and protect it from attacks and abuse. Cloudflare acts as a processor for this. Its privacy policy explains how it handles that data, including transfers outside the UK and the safeguards it uses.
Our lawful basis is legitimate interests in running a secure, working website.
Analytics
We don't currently use any analytics or visitor tracking. We may add analytics in future to understand which guides are useful. If we do, we'll update this policy before it goes live and, where the law requires it, ask for your consent first.
Who we share data with
We don't sell personal data, and we don't share it with advertisers. The only third parties involved are the processors named above (Web3Forms and Cloudflare), and anyone we're legally required to share data with, for example by a court order.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that's wrong
- ask us to delete your data
- ask us to restrict or stop using your data
- object to our use of your data where we rely on legitimate interests
- ask for your data in a portable format, where that applies
To use any of these rights, get in touch through the contact page. We'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office. Its complaints page explains how. We'd appreciate the chance to sort it out first, though.
Children
This site is for adults aged 18 and over. We don't knowingly collect data from anyone under 18.
Changes to this policy
If we change how we handle data, we'll update this page and the date at the top.
Last updated