Privacy Policy — VB Distribution

The types of personal information we collect depend on how you interact with our Site and Services. When we refer to "personal information," we mean information that identifies, relates to, describes, or can reasonably be associated with you.

Information We Collect Directly from You

Information you provide directly through our Services may include:

Contact details: Your name, address, telephone number, and email address.

Order information: Your name, billing address, shipping address, payment confirmation details, email address, and telephone number.

Account information: Your username, password, security questions, and other information used for account security purposes.

Shopping information: Items you view, add to your cart, save to your account, purchase, review, or interact with through loyalty programmes, referrals, or gift cards.

Customer support information: Any information you choose to include in communications with us, including when you contact us through the Services.

Some features of the Services may require you to provide certain personal information directly. You may choose not to provide this information, but doing so may limit or prevent your access to certain features or functionality.

Information We Collect About Your Usage

We may automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies").

Usage Data may include information about how you access and use our Site and account, including:

• Device information;
• Browser information;
• Network connection information;
• IP address; and
• Information regarding your interaction with the Services.

Information We Obtain from Third Parties

We may obtain personal information about you from third parties, including vendors and service providers acting on our behalf, such as:

• Companies that support our Site and Services, including Shopify;
• Payment processors, who collect payment information such as bank account details, credit or debit card details, and billing address in order to process payments and fulfil orders; and
• Third parties who help us analyse interactions with our Site, emails, Services, or advertisements through technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any personal information obtained from third parties will be handled in accordance with this Privacy Policy. Please also refer to the section titled Third-Party Websites and Links below.

Providing Products and Services

We use your personal information to provide the Services and perform our contract with you, including to:

• Process payments;
• Fulfil orders;
• Send notifications relating to your account, orders, returns, exchanges, or other transactions;
• Create, maintain, and manage your account;
• Arrange shipping; and
• facilitate returns, exchanges, and related customer service.

We may also enhance your shopping experience by enabling Shopify to connect your account with other Shopify services you choose to use. In such cases, Shopify will process your information in accordance with its own Privacy Policy and Consumer Privacy Policy.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including to send marketing communications by email, text message, or post, and to show you advertisements for products or services.

This may include using your personal information to better tailor our Services and advertising on our Site and other websites.

If you are located in the EEA, the legal basis for these processing activities is our legitimate interest in promoting and selling our products in accordance with Article 6(1)(f) of the GDPR.

Security and Fraud Prevention

We use your personal information to detect, investigate, prevent, or take action in relation to possible fraudulent, unlawful, or malicious activity.

If you register for an account, you are responsible for keeping your login credentials secure. We strongly recommend that you do not share your username, password, or other account access details with anyone. If you believe your account has been compromised, please contact us immediately.

If you are located in the EEA, the legal basis for this processing is our legitimate interest in maintaining the security of our website and Services under Article 6(1)(f) of the GDPR.

Communicating with You and Improving Our Services

We use your personal information to provide customer support, respond to enquiries, and improve our Services.

If you are located in the EEA, the legal basis for this processing is our legitimate interest in providing effective customer service and maintaining our business relationship with you under Article 6(1)(f) of the GDPR.

Like many websites, we use cookies on our Site. For specific information about cookies used in connection with Shopify, please refer to Shopify's Cookie Policy.

We use cookies to:

• operate and improve our Site and Services;
• remember your preferences and actions;
• run analytics;
• better understand how users interact with our Services; and
• support marketing and advertising activities.

We may also permit third parties and service providers to use cookies on our Site to help tailor the services, products, and advertisements you see on our Site and across other websites.

Most web browsers accept cookies by default. You can usually modify your browser settings to remove or reject cookies. Please note that disabling cookies may affect your user experience and cause certain features or functionality of the Services to operate improperly or become unavailable.

Blocking cookies may also not completely prevent the sharing of information with third parties, including advertising partners.

In certain circumstances, we may disclose your personal information to third parties for the purposes described in this Privacy Policy, including:

• to vendors and service providers who perform services on our behalf, such as IT management, payment processing, analytics, customer support, cloud storage, fulfilment, and shipping;
• to business and marketing partners who assist in delivering services and advertising to you;
• where you direct us, request us, or otherwise consent to the disclosure, such as for shipping, social media integrations, or login tools;
• within our corporate group and affiliates where necessary for business operations; and
• in connection with corporate transactions such as mergers, acquisitions, restructuring, or insolvency proceedings, or where required to comply with legal obligations, enforce our terms, or protect our rights and the rights of others.

We disclose the following categories of personal information and sensitive personal information about users for the purposes set out above in "How we Collect and Use your Personal Information" and "How we Disclose Personal Information":

Category:

• Identifiers such as basic contact details and certain order and account information
• Commercial information such as order information, shopping information and customer support information
• Internet or other similar network activity, such as Usage Data
• Geolocation data such as locations determined by an IP address or other technical measures

Categories of Recipients:

• Vendors and third parties who perform services on our behalf (such as Internet service providers, payment processors, fulfillment partners, customer support partners and data analytics providers)
• Business and marketing partners
• Affiliates

We do not use or disclose sensitive personal information without your consent, except where permitted or required by law.

Our Site may contain links to websites or platforms operated by third parties. If you follow a link to a third-party site, you should review that site's privacy policy, security practices, and terms independently.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms.

Information you choose to share on public or semi-public platforms, including third-party social media sites, may be visible to others and may be used by those third parties according to their own policies.

The inclusion of a link on our Site does not imply endorsement of the linked website, platform, or its operators.

The Services are not intended for children, and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe that a child has provided us with personal information, please contact us using the details set out below so that we can take appropriate action.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "sell" or "share" personal information of individuals under the age of 16 as those terms are defined under applicable law.

We take reasonable steps to protect your personal information. However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

Any information you transmit to us is done at your own risk. We recommend that you avoid sending sensitive or confidential information through unsecured communication channels.

We retain your personal information only for as long as necessary to:

• maintain your account;
• provide the Services;
• comply with legal obligations;
• resolve disputes; and
• enforce our agreements and policies.

The retention period will depend on the nature of the information and the purpose for which it was collected.

Depending on your location, you may have some or all of the following rights in relation to your personal information, subject to applicable law:

• Right of access: You may request access to the personal information we hold about you and information about how we use it.
• Right to deletion: You may request that we delete personal information we hold about you.
• Right to correction: You may request correction of inaccurate personal information.
• Right to portability: You may request a copy of your personal information and, where applicable, request that it be transferred to a third party.
• Right to restrict processing: You may request that we restrict or stop certain processing of your personal information.
• Right to withdraw consent: Where we rely on your consent, you may withdraw that consent at any time.
• Right to appeal: You may have the right to appeal a decision we make in relation to your privacy request.
• Right to manage communication preferences: You may opt out of promotional emails at any time by using the unsubscribe link included in our communications. Even if you opt out of marketing messages, we may still send you service-related communications, such as those relating to your account or orders.

To exercise any of these rights, please contact us using the contact details set out below.

We will not discriminate against you for exercising your rights. Before responding to certain requests, we may need to verify your identity using details such as your email address or account information.

Where permitted by law, you may appoint an authorised agent to act on your behalf. In such cases, we may require proof of authorisation and may also need to verify your identity directly.

We will respond to your request within the time period required by applicable law.

If you have concerns about how we process your personal information, please contact us using the details below.

If you are not satisfied with our response, you may have the right, depending on your location, to appeal our decision or lodge a complaint with your local data protection authority.

If you are located in the EEA, you may contact your local supervisory authority.

Please note that we may transfer, store, and process your personal information outside the country in which you live. Your information may also be processed by our staff, service providers, and partners in other countries.

If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

If you have any questions about this Privacy Policy, our privacy practices, or would like to exercise your rights, you may contact us at:

VB Distribution
4–12 Regent Street
Vapes Bars Limited
Office No. 440, 4th Floor, Rex House
London
SW1Y 4RG
United Kingdom

Email: info@vb-distro.com
Phone: +44 207 692 8713

For the purposes of applicable data protection law, and unless otherwise stated, VB Distribution / Vapes Bars Limited is the data controller of your personal information.