Privacy policy

PRIVACY POLICY

Last Updated: October 2025

Galax-E-Juice Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit or make a purchase from www.galaxejuice.co.uk (the "Site").

1. INFORMATION WE COLLECT

Personal Information You Provide

When you make a purchase or create an account, we collect:

  • Name and contact details (email address, phone number)
  • Billing and shipping addresses
  • Payment information (processed securely through our payment provider)
  • Age verification information (required by UK law for vaping products)
  • Order history and preferences

Information Collected Automatically

When you visit our Site, we automatically collect:

  • Device information (IP address, browser type, operating system)
  • Browsing behaviour (pages viewed, products clicked, time spent on site)
  • Cookies and similar tracking technologies
  • Referral source (how you found our website)

2. HOW WE USE YOUR INFORMATION

We use your personal information to:

  • Process and fulfil your orders, including payment processing and shipping
  • Communicate with you about your orders, including confirmations and updates
  • Verify your age to comply with UK vaping product regulations
  • Provide customer support and respond to your enquiries
  • Send marketing communications (only with your consent)
  • Prevent fraud and enhance security
  • Improve our website, products, and services
  • Comply with legal obligations

3. LEGAL BASIS FOR PROCESSING (GDPR)

We process your personal information under the following legal bases:

  • Contract performance: To fulfil orders and provide services you've requested
  • Legitimate interests: To improve our business, prevent fraud, and ensure security
  • Legal obligation: To comply with UK age verification and tax laws
  • Consent: For marketing communications (you can withdraw consent anytime)

4. SHARING YOUR INFORMATION

We share your information only with trusted third parties who help us operate our business:

  • Shopify: Our e-commerce platform provider (see Shopify's privacy policy at shopify.com/legal/privacy)
  • Payment processors: To securely process your payments
  • Shipping carriers: To deliver your orders (Royal Mail, etc.)
  • Marketing platforms: To send emails (only with your consent)
  • Analytics providers: Google Analytics to understand site usage (you can opt out at tools.google.com/dlpage/gaoptout)
  • Age verification services: To comply with UK vaping regulations

We never sell your personal information to third parties.

5. COOKIES AND TRACKING

We use cookies to:

  • Remember your preferences and shopping cart
  • Understand how you use our website
  • Deliver relevant advertising
  • Analyse site performance

You can control cookies through your browser settings. Visit www.allaboutcookies.org for more information.

Cookie Types We Use:

  • Essential cookies: Required for the site to function
  • Performance cookies: Help us improve the site
  • Marketing cookies: Used for targeted advertising (with your consent)

6. YOUR RIGHTS (UK GDPR)

Under UK data protection law, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a portable format
  • Object: Opt out of marketing communications or data processing
  • Withdraw consent: Stop us processing data based on consent

To exercise these rights, contact us at sales@galaxejuice.co.uk.

7. MARKETING COMMUNICATIONS

With your consent, we may send you:

  • Promotional emails about new products and special offers
  • Abandoned cart reminders
  • Product recommendations

You can unsubscribe anytime by:

  • Clicking "unsubscribe" in any marketing email
  • Contacting us at sales@galaxejuice.co.uk
  • Updating your account preferences

8. DATA RETENTION

We retain your personal information for as long as necessary to:

  • Fulfil orders and provide customer support
  • Comply with legal obligations (e.g., tax records for 6 years)
  • Resolve disputes and enforce our policies

When no longer needed, we securely delete or anonymise your data.

9. DATA SECURITY

We implement appropriate technical and organisational measures to protect your data, including:

  • Secure SSL encryption for data transmission
  • Secure payment processing (we don't store full card details)
  • Regular security assessments
  • Restricted access to personal information

However, no method of transmission over the internet is 100% secure.

10. INTERNATIONAL TRANSFERS

Some of our service providers (e.g., Shopify) may process data outside the UK/EEA. We ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the UK ICO
  • Adequacy decisions for certain countries
  • Privacy Shield frameworks where applicable

11. CHILDREN'S PRIVACY

Our products are only for individuals aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe we've collected data from a minor, please contact us immediately.

12. THIRD-PARTY LINKS

Our Site may contain links to third-party websites. We're not responsible for their privacy practices. Please review their privacy policies before providing any information.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We'll notify you of significant changes by posting the updated policy on our Site with a new "Last Updated" date.

14. CONTACT US

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Galax-E-Juice Ltd Email: sales@galaxejuice.co.uk Phone: 07907 819637 Address: Waveney Lodge, Butt Lane, Burgh Castle, Norfolk, NR31 9QD, United Kingdom VAT Number: GB279997113 Company Number: 10701535

Data Protection Officer: For data protection enquiries, email sales@galaxejuice.co.uk

Supervisory Authority: If you're unhappy with how we've handled your data, you can lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.