Privacy Notice | VB Distribution

Who we are

The data controller is VB GLOBAL BRANDS LTD, trading as VB Distribution, registered in England & Wales, company no. 13540609, registered office St James Building, 4-12 Regent Street, London SW1Y 4RG. ICO registration no. ZC272685. Contact for privacy matters: compliance@vapesbars.com.

What we collect

Account and due-diligence data: names, job titles, business contact details, ID documents of directors and authorised buyers, company and VAT details, trading addresses.
Order and account data: orders, invoices, delivery details, payment status (we do not see or store full card details; payments are handled by Worldpay).
Communications: emails, calls, WhatsApp messages and complaints.
Website data: device and usage data, and cookies (see our Cookie Policy).
Marketing preferences.

Why we use it and our lawful bases (UK GDPR)

Purpose	Lawful basis
Opening and running your trade account, taking orders, delivery, payment	Contract
Know Your Customer (KYC) checks, including photo ID, proof of address and business documents; identity, business and age checks; HMRC, VAT and excise records; Trading Standards and law enforcement requests	Legal obligation
Fraud prevention, anti-diversion checks, credit control, site security, improving our service	Legitimate interests
Business marketing emails	Legitimate interests for corporate subscribers; consent where PECR requires it (for example sole traders)
Non-essential cookies	Consent

ID documents are used only for verification and are not used for any other purpose.

Who we share it with

Service providers acting for us: Shopify (website hosting), payment providers, couriers, IT, email and account-verification providers. Our main providers are Shopify (website and trade platform), Worldpay (card payments), our courier, our email newsletter provider Brevo, and Google (Google Sheets / Google Workspace, used to keep customer and order records).
HMRC, Trading Standards, police and other authorities where the law requires.
Professional advisers, and a buyer of our business if it is ever sold.

We do not sell your personal data and do not share it with advertising partners.

International transfers

Some providers (for example Shopify) may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

How long we keep it

Account, due-diligence, order and invoice records: 6 years after account closure.
Marketing data: until you unsubscribe.
Rejected applications: 6 years.

Your rights

You have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent at any time. Email info@vb-distro.com. We will respond within one month.

Complaints

You can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Changes

We will post any changes on this page.