Privacy Policy

Last updated: 09/11/2025

This Privacy Policy describes how Mediself Limited (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit thevapingworld.co.uk (the “Website”).

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following types of personal information:

• Personal details – name, email address, phone number, postal address.
• Account details – login information, password (encrypted).
• Order details – purchase history, billing and shipping addresses, payment method (handled securely by our payment processors).
• Technical data – IP address, browser type, operating system, referring URLs, pages visited, and time spent on the Website.
• Cookies and tracking data – used to improve your experience and analyse site traffic. See our Cookie Policy for details.

2. How We Use Your Information

We may use your personal data for the following purposes:

• To process and deliver your orders or donations.
• To communicate with you, including responding to your enquiries.
• To send you updates, offers, or newsletters (only if you have consented).
• To improve our products, services, and Website functionality.
• To detect and prevent fraud or other prohibited activities.
• To comply with legal and regulatory obligations.

3. Legal Basis for Processing

We process your personal data only when one of the following applies:

• You have given consent.
• It is necessary for the performance of a contract with you.
• It is required to comply with a legal obligation.
• It is in our legitimate interests, provided your rights do not override those interests.

4. How We Protect Your Information

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is stored securely, and access is limited to authorised personnel only.

5. Sharing Your Information

We may share your data with:

• Service providers who help us operate our business (e.g. payment processors, delivery partners, IT support).
• Regulatory bodies or law enforcement agencies where required by law.
• Analytics or advertising partners (e.g. Google Analytics) to help us understand Website usage.

We never sell or rent your personal data to third parties.

6. International Data Transfers

If your data is transferred outside the UK or EEA, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information.

7. Data Retention

We keep your personal information only as long as necessary for the purposes for which it was collected or as required by law (e.g. tax or accounting regulations).

8. Your Data Protection Rights

You have the following rights under the UK GDPR:

• The right to access your personal data.
• The right to rectify inaccurate or incomplete data.
• The right to erase your data (“right to be forgotten”).
• The right to restrict or object to processing.
• The right to data portability (receive your data in a machine-readable format).
• The right to withdraw consent at any time.

To exercise these rights, please contact us using the details below.

9. Cookies

We use cookies to enhance your browsing experience and analyse traffic. You can manage or disable cookies through your browser settings. For more details, please see our Cookie Policy.

10. Third-Party Links

Our Website may contain links to other websites. We are not responsible for the privacy practices or content of those third-party sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

📧 Sales@medi-self.co.uk

🏢 Mediself Limited, Unit 1 Sprinfield Industrial Estate, Eastham Street, Preston, PR1 7JD

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://www.ico.org.uk.