Privacy Policy
Last updated: 6 June 2026
1. Who We Are
Exmoor Vape is a retail vape shop located at 56B The Avenue, Minehead, Somerset, TA24 5BB. We are the data controller responsible for your personal data collected through this website.
- Email: enquiries@exmoorvape.co.uk
- Phone: 01643 709251
2. What Data We Collect
This website is primarily informational. We do not operate an online shop or require user registration. The data we may collect includes:
- Age verification data: Your date of birth is checked client-side to verify you are over 18. This data is not stored on our servers — only a cookie is set to remember that you have passed the age check.
- Contact enquiries: If you contact us by email or phone, we will process your name, contact details and the content of your message to respond to your enquiry.
- Analytics data: If you consent, we use Google Analytics to collect anonymised usage data such as pages visited, time on site, device type and approximate location. This helps us understand how visitors use our website.
3. Cookies We Use
Cookies are small text files stored on your device. We use the following cookies:
Strictly Necessary Cookies
These cookies are essential for the website to function and cannot be switched off.
| Cookie | Purpose | Duration |
|---|---|---|
age_verified |
Records that you have confirmed you are over 18, so you are not asked again on each visit. | 30 days |
cookie_consent |
Records your cookie preferences (whether you accepted or declined analytics cookies). | 365 days |
Analytics Cookies (Optional)
These cookies are only set if you give your consent via the cookie banner.
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Google Analytics — distinguishes unique users. | 2 years |
_ga_* |
Google Analytics — maintains session state. | 2 years |
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:
- Legitimate interest: Age verification to comply with UK law restricting the sale of vaping products to adults.
- Consent: Analytics cookies are only placed with your explicit consent.
- Contractual necessity: Processing contact enquiry data to respond to your request.
5. Third-Party Services
Google Analytics
If you consent, we use Google Analytics 4 (GA4) to collect anonymised website usage data. Google may transfer data outside the UK; they rely on Standard Contractual Clauses for such transfers. See Google's Privacy Policy.
Google Maps
Our contact section includes an embedded Google Maps iframe to show our shop location. When this loads, Google may collect data according to their Privacy Policy.
6. Data Retention
- Age verification cookie: 30 days, then automatically deleted.
- Cookie consent preference: 365 days.
- Analytics data: Retained by Google for 14 months, then automatically deleted.
- Contact enquiries: Retained for as long as necessary to deal with your enquiry, then deleted.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate personal data.
- Erase your personal data ("right to be forgotten").
- Restrict or object to processing of your data.
- Withdraw consent at any time (e.g. by clearing your cookies or using your browser settings).
- Lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been infringed.
To exercise any of these rights, contact us at enquiries@exmoorvape.co.uk.
8. Children's Privacy
This website is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. Our age verification gate is designed to prevent access by minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.