🔒PRIVACY POLICY🔒

Last Updated: October 2026

This Privacy Policy describes how we collect, use, and process your personal information when you use our website and delivery reservation system. We are committed to protecting your privacy and ensuring your personal data is handled securely and in compliance with the UK General Data Protection Regulation (UK GDPR).

1. Information We Collect

Because we operate strictly as an online reservation system and do not process payments directly on our website, we only collect the minimum personal data necessary to facilitate your doorstep delivery and ensure legal age compliance.

  • Reservation Data: Name, delivery address, telephone number, and email address.
  • Technical Data: IP address, device type, and browser details (used for fraud prevention and system security).
  • Payment & Age Attestation: Your explicit online confirmation that you are 18 years of age or older.

2. How Your Data is Used

We process your personal information under the following legal bases:

  • Performance of a Service: To process your reservation request and navigate our delivery drivers to your address.
  • Legal Obligation: To strictly enforce UK age-gating laws regarding nicotine and vaping products.
  • Legitimate Interests: To protect our delivery drivers, prevent proxy purchasing, and secure our platform against fraudulent account creation.

3. Open Banking & Doorstep Verification (Fena Pay by Bank)

Your financial privacy is entirely protected under our payment structure:

  • No Online Financial Data: We do not collect, view, or store credit/debit card numbers or bank account details on this website.
  • Fena Open Banking (Option A): If you choose to pay via the driver's Fena QR code, the transaction is processed directly through Fena Labs (an FCA-authorised payment institution). The authentication happens entirely within your own banking app. We only receive a confirmation of successful payment and adult KYC status.
  • Physical ID Inspections (Challenge 25): When our drivers inspect your physical ID at the door, they do so visually. We do not photograph, scan, or retain digital copies of your identification documents.

4. Data Sharing and Third Parties

We never sell your data. We only share your data with trusted service providers necessary to run our business:

  • Delivery Personnel: Internal drivers or couriers who receive your name, address, and phone number to fulfill your reservation.
  • Fena Labs: To generate the secure Open Banking payment link at your doorstep.
  • Law Enforcement: Only if legally required to do so under UK law (e.g., in relation to serious proxy-purchasing investigations).

5. Data Retention and Our Permanent Banning Policy

We generally retain customer reservation data only as long as necessary for tax, accounting, and business evaluation purposes.

  • The Permanent Block List (GDPR Exception): Under the UK GDPR "Legitimate Interests" framework, we maintain a permanent record of names, phone numbers, device IDs, and delivery addresses associated with individuals who fail a doorstep age check, attempt proxy purchasing on behalf of a minor, or display abusive behavior toward our drivers. Requests for data erasure ("Right to be Forgotten") will be legally denied for entries on this block list to ensure ongoing legal compliance and staff safety.

6. Your Rights Under UK GDPR

You have rights regarding your personal data, including:

  • The Right of Access: You can request a copy of the personal data we hold about you.
  • The Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • The Right to Restriction: You can ask us to restrict the processing of your data under specific circumstances.

To exercise any of these rights, please contact our Data Compliance team at: info@wizard-vape-delivery.com