Last updated: 30 September 2026
Hillsborough Vape Lounge Limited respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with, how long we keep it and the rights you have over your personal information.
1. Who We Are
The website is operated by:
Hillsborough Vape Lounge Limited
Company registration number: 15527957
Registered office: 568 Langsett Road, Hillsborough, Sheffield, S6 2LX
Email: info.hillsboroughvapelounge@gmail.com
Telephone: 0114 453 9746
For the purposes of applicable UK data protection legislation, Hillsborough Vape Lounge Limited is the data controller for the personal information collected through this website, except where another organisation is independently responsible for its own processing.
2. Information We Collect
Depending on how you use our website, we may collect the following information:
Information you provide to us
This may include:
- Your name;
- Billing and delivery address;
- Email address;
- Telephone number;
- Account login details;
- Order and purchase information;
- Information you provide when contacting us;
- Information relating to returns, refunds or customer service enquiries;
- Information provided when completing age verification; and
- Any other information you voluntarily provide to us.
Information collected automatically
When you use our website, certain information may be collected automatically, including:
- IP address;
- Browser type and version;
- Device type;
- Operating system;
- Website pages visited;
- Approximate location information derived from your IP address;
- Referring website;
- Website usage information; and
- Information collected through cookies and similar technologies.
3. How We Use Your Information
We may use your personal information for the following purposes:
Processing and fulfilling orders
We use your information to:
- Process and manage orders;
- Take and process payments;
- Arrange delivery;
- Provide Click & Collect services;
- Contact you about your order;
- Process returns and refunds; and
- Provide customer support.
Age verification
Where required, we use age-verification services to establish whether you meet the legal age requirement for purchasing age-restricted products.
Our website may use AgeOnce for this purpose.
Age verification may involve information from an identity document and information relating to your age and identity. AgeOnce states that original ID and facial images are processed for verification and are not retained as raw images after processing, although information required for the verification service may be retained in accordance with its own privacy arrangements.
You should review AgeOnce’s own privacy information when completing an AgeOnce verification.
Website operation and security
We may use information to:
- Operate and maintain the website;
- Protect the website against fraud and abuse;
- Detect suspicious activity;
- Maintain website security;
- Diagnose technical problems; and
- Improve website performance.
Website analytics
We use Google Analytics to understand how visitors use our website.
This may involve information such as pages visited, approximate location, device information, browser information and interactions with the website.
Analytics information helps us understand website usage and improve our website and services.
Where required, we will obtain consent before placing or using non-essential analytics cookies.
Customer service
We may use your information to respond to enquiries, complaints, requests and other communications.
Legal and regulatory obligations
We may process personal information where necessary to:
- Comply with legal obligations;
- Meet age-restriction requirements;
- Prevent fraud;
- Protect our business and customers;
- Respond to lawful requests from authorities; or
- Establish, exercise or defend legal claims.
4. Lawful Bases for Processing
We rely on different lawful bases depending on why we are processing your information.
These may include:
Contract
We process information where it is necessary to enter into or perform a contract with you, such as processing and delivering an order.
Legal obligation
We may process information where necessary to comply with a legal or regulatory requirement, including requirements relating to age-restricted products, taxation, accounting and record keeping.
Legitimate interests
We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
This may include operating and improving our website, maintaining security, preventing fraud, responding to customer enquiries and managing our business.
Consent
Where consent is required, we will ask for your consent before carrying out the relevant processing.
For example, certain non-essential cookies and marketing activities may require consent.
Where processing is based on consent, you can withdraw your consent at any time.
5. Age Verification
Because we sell age-restricted products, we may need to verify your age before accepting or fulfilling an order.
Age verification may be performed using a third-party service such as AgeOnce.
The information required for age verification may include information contained on an identity document and information used to establish your age and identity.
Age verification may involve automated processing by the verification provider.
The provider may have its own privacy policy explaining how verification information is processed and retained.
We only require age verification where necessary to comply with applicable legal requirements or our own age-verification procedures.
6. Who We Share Your Information With
We may share personal information with trusted organisations where necessary to operate our business and provide our services.
These may include:
- WooCommerce / WordPress service providers involved in operating the website;
- Age verification providers, including AgeOnce;
- Payment service providers where applicable;
- Royal Mail and other delivery providers where necessary to deliver your order;
- Google, including Google Analytics, where applicable;
- Trustindex, where necessary for website review functionality;
- Website hosting, security and technical service providers;
- Professional advisers such as accountants, legal advisers or insurers where necessary;
- Government bodies, regulators or law-enforcement authorities where legally required; and
- Other service providers acting on our behalf.
We do not sell your personal information to third parties.
7. Google Analytics
We use Google Analytics to help us understand how visitors interact with our website.
Google Analytics may collect information about your device, browser, website interactions and approximate location.
Depending on the configuration of our website and applicable cookie requirements, analytics cookies may only be used after you have provided the appropriate consent.
Google may process information in accordance with its own privacy and data-processing arrangements.
For further information about Google’s handling of data, please refer to Google’s privacy information.
8. Trustindex and Google Reviews
Our website may display customer reviews using Trustindex or similar review functionality.
Where third-party review content or services are used, information may be processed by the relevant provider in accordance with its own privacy policy.
Trustindex publishes its own privacy information explaining how it processes personal data in connection with its services.
9. Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function, for example to operate shopping baskets, checkout and account functionality.
Other cookies may be used for analytics, preferences or other non-essential purposes.
Where required by law, we will request your consent before using non-essential cookies.
For more information, please see our Cookie Policy.
10. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, regulatory and dispute-resolution requirements.
Different types of information may therefore be retained for different periods.
For example:
- Order and transaction information may need to be retained for accounting, tax and legal purposes.
- Customer account information may be retained while your account remains active and for a reasonable period afterwards.
- Customer service communications may be retained for as long as reasonably necessary to deal with the enquiry and any resulting issues.
- Age-verification information will be retained only for as long as reasonably necessary for the relevant legal, security or business purpose, subject to the arrangements of the verification provider.
- Analytics information is retained in accordance with the applicable Google Analytics configuration and retention settings.
When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.
11. Data Security
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access;
- Accidental loss;
- Destruction;
- Alteration;
- Disclosure; and
- Other unauthorised processing.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. International Data Transfers
Some of the organisations and technology providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place where required.
The relevant third-party provider’s privacy information may contain further details about international data processing.
13. Your Data Protection Rights
Depending on the circumstances and the applicable legal requirements, you may have rights including:
- The right to access your personal information;
- The right to have inaccurate information corrected;
- The right to request deletion of your information;
- The right to restrict certain processing;
- The right to object to certain processing;
- The right to data portability where applicable; and
- The right to withdraw consent where processing is based on consent.
These rights are subject to certain legal conditions and exemptions.
If you wish to exercise a data protection right, please contact us using the details below.
14. Direct Marketing
If we send marketing communications to you, we will do so in accordance with applicable electronic marketing and data protection laws.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe from marketing communications at any time by following the unsubscribe instructions provided or by contacting us.
You can continue to receive essential transactional communications, such as order confirmations and delivery updates, even if you opt out of marketing communications.
15. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, content or security of third-party websites.
You should review the privacy policy of any third-party website you visit.
16. Children’s Privacy
Our website is not intended for children.
We do not knowingly collect personal information from children for the purpose of selling age-restricted products.
Age-restricted products are only available to customers who meet the applicable legal age requirements.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, technology, services or legal requirements.
The latest version will always be made available on this website.
Last updated: 30 September 2026
18. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Hillsborough Vape Lounge Limited
568 Langsett Road
Hillsborough
Sheffield
S6 2LX
Email: info.hillsboroughvapelounge@gmail.com
Telephone: 0114 453 9746
19. Complaints
If you have concerns about how we process your personal information, please contact us first so that we can investigate your concerns.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
The ICO provides information about data protection rights and how to make a complaint through its website.
You can find the ICO’s current contact details at the official ICO website.