Privacy Policy

Last updated: January 22, 2026

Welcome to fumot.uk (the “Website” or “Service”).

Fumot is committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit our website, place an order, or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or services, you agree to the practices described in this policy.

1. Who we are (Data Controller)

Email: [email protected]

2. What personal data we collect

We may collect the following types of personal data:

Identity & Contact Data: name, billing/shipping address, email address, phone number, date of birth (for age verification)
Transaction Data: purchase history, products ordered, payment amounts (we do not store full card details)
Payment Data: processed securely via third-party payment providers (e.g. Stripe, PayPal)
Technical Data: IP address, browser type/version, operating system, time zone, device information, pages visited
Marketing & Communication Data: your preferences for receiving marketing from us
Age Verification Data: due to legal restrictions on the sale of vaping/nicotine products, we may collect and process information to verify you are over 18
3. How we collect your data

We collect data when you:

Create an account or place an order
Complete age verification checks
Subscribe to our newsletter
Contact us (email, live chat, form)
Browse our website (via cookies & similar technologies)
Interact with us on social media (when linked to our site)
4. How & why we use your personal data (lawful basis)
Purpose Type of data Lawful basis
Process and deliver your order, including age verification Identity, Contact, Transaction, Age Performance of a contract + Legal obligation
Manage payments & prevent fraud Transaction, Technical Performance of a contract + Legitimate interests
Send order updates & service messages Contact Performance of a contract
Send marketing emails (only if you opted in) Contact, Marketing Consent (you can withdraw anytime)
Improve website, analyse usage, fix bugs Technical Legitimate interests
Comply with legal obligations (e.g. TRPR reporting, age sales laws) All relevant data Legal obligation
5. Sharing your personal data

We may share your data with:

Payment processors (Stripe, PayPal etc.) – they act as separate controllers
Shipping/delivery partners (Royal Mail, DPD, etc.)
Age verification service providers (if used)
IT & analytics providers (Google Analytics, Shopify, etc.) – under strict agreements
Legal authorities when required by law

We do not sell your personal data to third parties for marketing purposes.

6. International data transfers

Some of our service providers are located outside the UK/EEA (e.g. USA). Where this occurs, we ensure appropriate safeguards are in place (UK International Data Transfer Agreement, Standard Contractual Clauses, or adequacy decision).

7. Data retention

We keep your data only for as long as necessary:

Order & tax records → 6–7 years (legal requirement)
Marketing consent → until you unsubscribe
Website logs → usually 12–26 months
8. Your rights under UK GDPR

You have the right to:

Access your data (Subject Access Request)
Correct inaccurate data
Request deletion (in certain circumstances)
Restrict or object to processing
Data portability
Withdraw consent (where consent is the basis)
Lodge a complaint with the Information Commissioner’s Office (ico.org.uk)

To exercise any rights, please email: [email protected]

9. Cookies & similar technologies

We use cookies and similar technologies to improve your experience. Please see our separate Cookie Policy for details.

10. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction (SSL encryption, access controls, etc.). However, no method of transmission over the internet is 100% secure.

11. Changes to this Privacy Policy

We may update this policy from time to time. The updated version will be posted here with a revised “last updated” date.

If you have any questions about this Privacy Policy or our data practices, please contact:

Email: [email protected]