Privacy Policy

This privacy policy explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

Who We Are

Ohh Vapes of Scotland is operated by Alhilli Group Ltd, 48-50 Graham Street, Airdrie, ML6 6BU. Contact: support@ohhvapesofscotland.co.uk. We’re the data controller for the information described in this privacy policy, meaning we decide how and why your personal data is processed.

What We Collect

When you place an order or contact us, we may collect your name, address, email, phone number, and payment details (processed securely by our payment provider — we do not store card details). We may also collect age verification data required by law, and basic technical data such as your IP address and browser type when you use the site.

How Long We Keep Your Data

We retain order and customer records for as long as required by UK tax and accounting law (normally six years), and age verification records for the period required under Tobacco and Related Products Regulations. Data we no longer need for a legal or business purpose is deleted or anonymised.

Who We Share Data With

We share the minimum necessary data with couriers (for delivery), our payment provider (to process payment), and age verification services (to meet legal requirements). We do not sell your personal data to third parties, and we don’t share it with marketers beyond what’s needed to run this shop.

Cookies

This site may use cookies and similar technologies for essential site functionality and, where enabled, analytics. Where analytics or marketing cookies are used, we will ask for your consent in line with UK PECR rules.

Third-Party Embedded Content

Our Visit Us page can show a live map of our shop location, provided by Google Maps. This map is not loaded automatically — it only loads when you click “View Map”, at which point Google may process your IP address and other technical data in order to display the map. This happens on Google’s own servers, outside our control, and is subject to Google’s Privacy Policy.

How We Use It

We use your information to process orders, verify your age, deliver products, and communicate with you about your order — for example order confirmations, delivery updates, and replies to support queries. We don’t use your data for anything beyond running this shop and meeting our legal obligations.

Keeping Your Data Secure

We use reasonable technical and organisational measures to protect the personal data we hold, including restricting who on our small team can access order and customer records, and relying on payment providers who are themselves independently certified for card-payment security. No online system can be guaranteed completely secure, but we review our processes periodically as the business grows.

Your Rights

You have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. You can also lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled. Contact us using the details above or on our Contact page to exercise any of these rights.

Questions About This Privacy Policy

If anything in this privacy policy is unclear, or you’d like more detail on how a specific type of data is used, email support@ohhvapesofscotland.co.uk and we’ll answer directly rather than pointing you back to this page. We’ll also update this policy if our data practices change, so it’s worth checking back occasionally if you’re a regular customer.