Privacy policy

Last updated: 6 August 2026

Legacy Vape Hub UK Limited respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, register for a wholesale account, place an order, contact us, subscribe to marketing communications or otherwise interact with our business.

We process personal information in accordance with applicable UK data-protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Who Is Responsible for Your Personal Information?

The data controller responsible for your personal information is:

Legal company name: Legacy Vape Hub UK Limited
Trading name: Legacy Vape Hub
Company registration number: 11663585
Registered office: Unit 3, Jury Street, Manchester, United Kingdom, M8 8FN
Email: sales@legacyvapehub.co.uk

You can contact us about privacy, personal information or data-protection complaints by emailing sales@legacyvapehub.co.uk.

2. Who This Policy Applies To

This Privacy Policy applies to personal information relating to:

  • Wholesale account applicants
  • Existing wholesale customers
  • Directors, employees and representatives of customer businesses
  • Suppliers and business contacts
  • Website visitors
  • Newsletter subscribers
  • People who contact our customer-service team
  • People who submit return, refund or delivery claims

Although our customers may be businesses, information relating to an identifiable director, employee, sole trader, partner or business contact remains personal information and is protected by data-protection law.

3. Personal Information We Collect

Information You Provide to Us

Depending on how you interact with us, we may collect:

  • Your name and job title
  • Your business or trading name
  • Your company registration number
  • Your VAT number, where provided
  • Your email address
  • Your telephone number
  • Your billing, delivery and business addresses
  • Your wholesale account login and account information
  • Information submitted during wholesale account verification
  • Order, invoice, payment, delivery and refund information
  • Products purchased, quantities and order history
  • Messages sent through our contact form, live chat, email or telephone
  • Return requests, photographs, videos and supporting evidence
  • Newsletter and marketing preferences
  • Reviews, survey responses and feedback
  • Any other information you choose to provide

Wholesale Account Verification

To protect our trade pricing and confirm that customers are legitimate businesses, we may verify company information against Companies House, VAT records, public business registers or other appropriate sources.

In some circumstances, we may request additional information to confirm the identity, age, authority or business status of the person applying for an account.

Payment Information

Payments may be processed by our ecommerce platform and the payment provider selected during checkout.

We generally do not receive or store your complete payment-card number or card security code. Payment providers may supply us with limited information such as the payment status, payment method, transaction reference and limited card details.

Information Collected Automatically

When you use our website, we and our service providers may automatically collect:

  • Your IP address
  • Browser type and version
  • Device type and operating system
  • Approximate location based on your IP address
  • Pages viewed and links selected
  • Search terms and website interactions
  • Referring website or marketing source
  • Session, login and shopping-basket activity
  • Cookie and consent preferences
  • Technical, security and server-log information

Information Received From Other Sources

We may receive personal information from:

  • Companies House and other public business registers
  • Our ecommerce platform and connected applications
  • Payment providers
  • Courier and delivery companies
  • Fraud-prevention and security providers
  • Marketing, analytics and advertising providers where permitted
  • Suppliers and manufacturers
  • Your employer or another representative of your business
  • Publicly available business websites and directories

4. Why We Use Your Personal Information

We may use personal information to:

  • Create and manage wholesale customer accounts
  • Verify business details and account eligibility
  • Provide access to wholesale pricing
  • Process orders, payments, invoices and refunds
  • Pick, pack, dispatch and deliver orders
  • Provide order confirmations and tracking information
  • Respond to product, account and customer-service enquiries
  • Process returns, damaged-delivery reports and warranty claims
  • Maintain accounting, tax and transaction records
  • Prevent fraud, misuse and unauthorised account access
  • Protect our website, staff, customers and business
  • Manage supplier and commercial relationships
  • Improve our website, products and customer experience
  • Measure website performance and understand how visitors use our website
  • Send product news, wholesale offers and marketing communications where permitted
  • Manage product back-in-stock notifications
  • Comply with legal, regulatory and law-enforcement requirements
  • Establish, exercise or defend legal claims

5. Our Lawful Bases for Processing

Data-protection law requires us to have a lawful basis for using personal information. Depending on the purpose, we may rely on the following lawful bases.

Contract

We process information where it is necessary to:

  • Create or manage your wholesale account
  • Process and deliver an order
  • Provide customer support
  • Handle returns, refunds or product claims
  • Take steps requested by you before entering into a contract

Legal Obligation

We process information where necessary to comply with obligations relating to:

  • Tax and accounting
  • Company and financial records
  • Fraud prevention
  • Product safety and recalls
  • Regulatory enquiries
  • Court orders and legal proceedings

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

Our legitimate interests may include:

  • Operating and improving our wholesale business
  • Verifying customer and company information
  • Preventing fraud and protecting account security
  • Maintaining accurate business records
  • Responding to business enquiries
  • Understanding customer demand and website performance
  • Managing business-to-business customer relationships
  • Marketing our products to business contacts where permitted by law
  • Establishing, exercising or defending legal claims

Consent

We may rely on your consent for:

  • Non-essential cookies and similar technologies where consent is required
  • Certain analytics and advertising activities
  • Marketing emails or messages where consent is required
  • Other processing where we specifically ask for permission

You may withdraw your consent at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

6. Wholesale Marketing Communications

We may send information about new vape products, brand launches, wholesale offers, bulk-buy promotions, clearance deals and company news.

We will only send electronic marketing where we have a valid legal basis and where the communication is permitted under applicable data-protection and electronic-marketing rules.

You can unsubscribe at any time by:

  • Selecting the unsubscribe link in a marketing email
  • Emailing sales@legacyvapehub.co.uk
  • Contacting our customer-service team

After you unsubscribe, we may retain limited information on a suppression list to ensure that we do not send further marketing to the same address.

Unsubscribing from marketing will not prevent us from sending essential service communications relating to your account, orders, invoices, payments, deliveries, product recalls or security.

7. Cookies and Similar Technologies

Our website uses cookies, pixels, tags, scripts, local storage and similar technologies.

These technologies may be used to:

  • Operate the website and shopping basket
  • Keep customers signed in
  • Remember preferences
  • Protect accounts and prevent fraud
  • Measure website traffic and performance
  • Understand how visitors use the website
  • Support marketing and advertising where permission has been provided

Necessary Cookies

Necessary cookies support essential website functions such as security, account login, checkout, shopping-basket operation, payment processing and consent preferences.

Functional Cookies

Functional cookies may remember choices such as website settings, preferences and selected features.

Analytics Cookies

Analytics cookies help us understand website usage, identify technical problems and improve website performance.

Advertising Cookies

Advertising cookies and similar technologies may be used to measure campaigns, understand advertising performance and provide more relevant marketing.

Where consent is required, non-essential technologies will not be activated until you make an active choice through our cookie banner or preference centre.

You can accept, reject or customise non-essential cookies and revisit your choices using the Cookie Preferences option on our website.

Browser settings can also be used to delete or block cookies. However, blocking necessary cookies may prevent parts of the website, customer account or checkout from working correctly.

8. Server Logs

Our website and hosting providers may create technical server logs when a visitor accesses the website.

Server logs may include:

  • IP address
  • Date and time of access
  • Requested pages or files
  • Browser and operating-system information
  • Error, security and performance information

We use this information to operate the website, investigate technical problems, maintain security, prevent misuse and protect our services.

9. Who We Share Personal Information With

We may share personal information with service providers where necessary to operate our business.

Recipients may include:

  • Our ecommerce platform and website-hosting providers
  • Payment processors and financial institutions
  • Courier, postal and delivery providers
  • Website security and technical-support providers
  • Connected applications and integration providers
  • Email, newsletter and customer-communication platforms
  • Live-chat and customer-support providers
  • Analytics and advertising providers where permitted
  • Accountants, legal advisers, insurers and professional consultants
  • Manufacturers and suppliers where necessary to investigate a product issue
  • Fraud-prevention and identity-verification providers
  • Companies providing document storage, archiving or secure destruction services
  • HMRC, regulators, law-enforcement agencies, courts and public authorities

We require service providers acting on our behalf to process personal information only for authorised purposes and to protect it appropriately.

We may also disclose information in connection with a sale, merger, restructuring, financing or transfer of all or part of our business, subject to appropriate confidentiality and data-protection safeguards.

10. International Transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful.

These steps may include:

  • Transferring information to a country covered by UK adequacy regulations
  • Using an approved International Data Transfer Agreement
  • Using the UK Addendum to approved contractual clauses
  • Using another legally permitted transfer mechanism
  • Applying appropriate technical, contractual and organisational safeguards

You may contact us for further information about the safeguards used for relevant international transfers.

11. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.

Our normal retention approach is:

  • Orders, invoices, payments and accounting records: normally retained for at least six years or for any longer period required by law
  • Active wholesale accounts: retained while the account remains active and for an appropriate period afterwards
  • Inactive customer accounts: reviewed periodically and deleted or anonymised where the information is no longer required
  • Unsuccessful or incomplete wholesale applications: normally retained for up to 12 months unless there is a reason to retain them longer
  • Returns, disputes and product claims: retained for the duration of the matter and any applicable legal limitation period
  • Customer-service messages: retained for as long as needed to resolve the enquiry and maintain appropriate business records
  • Marketing information: retained until consent is withdrawn, an objection is received or the information is no longer required
  • Marketing suppression records: retained as necessary to respect unsubscribe and objection requests
  • Cookie and consent records: retained for the relevant cookie duration and as needed to demonstrate consent choices
  • Security and server logs: normally retained for a limited period unless required for an investigation, dispute or legal obligation

We may retain anonymised information that no longer identifies an individual for statistical and business-analysis purposes.

12. How We Protect Personal Information

We use appropriate technical and organisational measures designed to protect personal information from:

  • Unauthorised access
  • Accidental loss
  • Alteration
  • Disclosure
  • Destruction
  • Misuse

Measures may include secure website connections, access restrictions, individual staff accounts, authentication controls, security monitoring, backups and staff procedures.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Customers are responsible for protecting their account passwords and should contact us immediately if they believe their account has been compromised.

13. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

  • Access personal information we hold about you
  • Rectify inaccurate or incomplete information
  • Erase personal information in certain circumstances
  • Restrict how we use personal information
  • Object to processing based on legitimate interests
  • Object to direct marketing at any time
  • Receive or transfer certain information in a portable format
  • Withdraw consent where processing is based on consent
  • Request information about automated decision-making where applicable

These rights are not absolute. In some circumstances, we may need to retain or continue processing information to meet legal obligations, defend claims, prevent fraud or complete an existing contract.

We normally respond to valid data-rights requests without undue delay and within one calendar month. We may request information to confirm your identity before releasing or changing personal information.

You will not normally be charged for exercising your data-protection rights. A reasonable fee may apply where permitted by law, including where a request is manifestly unfounded or excessive.

14. How to Make a Data-Protection Request or Complaint

To exercise your rights or complain about how we have handled your personal information, contact:

Legacy Vape Hub UK Limited
Unit 3, Jury Street
Manchester
United Kingdom
M8 8FN
Email: sales@legacyvapehub.co.uk

Please clearly state that your message is a data-protection request or data-protection complaint.

Where you submit a complaint, we will take appropriate steps to investigate it and communicate the outcome without undue delay.

15. Complaints to the Information Commissioner’s Office

We encourage you to contact us first so that we have an opportunity to resolve your concern.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint

16. Automated Processing and Fraud Screening

Our ecommerce platform, payment providers and security services may use automated tools to identify possible fraud, unusual transactions, account misuse or security risks.

These tools may produce risk indicators that help us decide whether an order or account requires additional checks.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards where those safeguards are legally required.

17. Children and Age-Restricted Products

Legacy Vape Hub is a vape wholesale business and our website is not intended for children.

Vape and nicotine products are intended for adults aged 18 and over. We do not knowingly create wholesale accounts for anyone under 18.

If you believe that a person under 18 has provided personal information to us, please email sales@legacyvapehub.co.uk so that we can investigate and take appropriate action.

18. Third-Party Websites

Our website may contain links to manufacturers, government guidance, payment providers, social-media platforms or other third-party websites.

We are not responsible for the privacy practices or content of third-party websites. You should review the privacy policy of each external website before providing personal information.

19. Providing Personal Information

Providing personal information is generally voluntary. However, certain information is required to:

  • Verify your wholesale account
  • Enter into a contract with you
  • Process payment
  • Deliver an order
  • Comply with legal requirements
  • Investigate a return, refund or delivery claim

If you do not provide required information, we may be unable to approve your account, provide wholesale pricing, process your order or respond fully to your request.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business, website, technology, service providers or legal obligations.

The latest version will be published on this page with an updated revision date. Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected individuals.

21. Contact Us

For questions about this Privacy Policy or how Legacy Vape Hub UK Limited uses personal information, contact:

Legacy Vape Hub UK Limited
Company Registration Number: 11663585
Unit 3, Jury Street
Manchester
United Kingdom
M8 8FN
Email: sales@legacyvapehub.co.uk