Privacy policy

Last updated: 30 August 2026

This Privacy Policy explains how Vaba Technology, registered in the United Kingdom and operating the Vaba Vaba online store at vabavape.com, collects, uses, shares and protects personal information.

1. Information we may collect

Depending on how a person uses the store, we may collect:

  • identity and contact information, such as name, email address, telephone number and delivery or billing address;
  • account, order and transaction information, including selected products, order history, delivery details, returns and refunds;
  • payment-related information supplied to payment processors; we do not need to receive a complete payment-card number when the payment provider processes it directly;
  • communications, support requests, reviews and other information submitted to us;
  • technical and usage information, such as IP address, device and browser information, pages viewed, referral information, security events and cookie or similar-technology data; and
  • age or eligibility information where reasonably necessary to comply with restrictions on adult products.

2. How we use information

We may use personal information to:

  • provide accounts, process orders, take payment, arrange delivery and handle returns or refunds;
  • provide customer service and communicate about an order;
  • verify eligibility, prevent fraud, protect the store and enforce our terms;
  • maintain and improve the website, products and customer experience;
  • send marketing where consent or another lawful basis permits it, and honour opt-out requests; and
  • comply with legal, tax, accounting, safety, regulatory and dispute-resolution obligations.

3. Lawful bases

Where data-protection law requires a lawful basis, we rely as appropriate on performance of a contract, compliance with a legal obligation, legitimate interests that are not overridden by individual rights, or consent. Consent can be withdrawn at any time, without affecting processing that occurred before withdrawal.

4. How information may be shared

We may share information only as reasonably necessary with service providers that help operate the store, including our e-commerce platform, payment processors, fraud-prevention and security providers, hosting and technical providers, customer-support tools, and delivery carriers such as DHL where selected. We may also share information with analytics or marketing providers where those services are enabled and permitted, with professional advisers, or with authorities where legally required. These recipients may use information only for their authorised purpose or under their own legally required privacy terms.

5. International transfers

Some service providers may process information outside the customer’s country. Where required, we use or require an appropriate transfer mechanism or other safeguard recognised by applicable data-protection law.

6. Cookies and similar technologies

We may use cookies and similar technologies that are necessary for shopping-cart, checkout, account, security and site functions. Analytics, personalisation or advertising technologies may also be used where enabled and permitted. Where consent is required for a non-essential technology, consent should be obtained before it is used. Browser settings can be used to block or delete cookies, although doing so may affect store functions.

7. Marketing choices

Marketing emails can be stopped using the unsubscribe option in the message or by contacting us. Transactional or service messages relating to an account, order, safety issue or policy may still be sent where necessary.

8. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer service, fraud prevention, accounting, tax, legal claims and regulatory obligations. Retention periods vary according to the type of information and applicable requirements.

9. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

10. Privacy rights

Depending on applicable law, a person may have rights to access, correct, delete, restrict or object to processing of personal information, receive a portable copy, and withdraw consent. A request may require reasonable identity verification. UK individuals may also complain to the Information Commissioner’s Office.

11. Adult service and children

Our vaping and nicotine products are intended only for people who have reached the legal purchasing age at their location. We do not knowingly offer these products to, or seek to collect personal information from, underage customers. If we learn that information was provided by an ineligible minor, we may delete it and cancel the related account or order where appropriate.

12. Third-party links

The website may link to third-party sites or services. Their privacy practices are governed by their own notices, and we are not responsible for content or processing outside our control.

13. Changes to this policy

We may update this Privacy Policy to reflect operational, technical or legal changes. The revised version will be posted on this page with an updated date.

14. Contact

Privacy questions and rights requests should be sent to Vaba Technology at service@vababazar.de.