Groovy Cigs respects your privacy and is committed to protecting your personal information.
This privacy policy explains how we collect, use and protect information when you visit groovycigs.uk/, create an account, contact us or place an order.
Who we are
Groovy Cigs
44 Victoria Road
Woolston
Southampton
SO19 9DX
United Kingdom
Email: accounts@groovycigs.uk
Information we collect
We may collect information including:
- your name
- billing and delivery address
- email address
- telephone number
- order and transaction details
- account information
- communications you send to us
- technical information such as your IP address, browser and device information
- information required for age verification
We do not normally receive or store your full payment-card details. Payments are handled by our payment-processing provider.
How we use your information
We use personal information to:
- process and fulfil orders
- take and manage payments
- arrange delivery
- provide customer service
- manage returns and refunds
- verify that customers meet legal age requirements
- prevent fraud and misuse
- maintain and improve our website
- comply with legal, regulatory and accounting requirements
- send marketing communications where you have chosen to receive them
Our lawful bases
Depending on the circumstances, we process information because:
- it is necessary to perform a contract with you, such as processing an order;
- we have a legal obligation;
- we have a legitimate business interest, such as fraud prevention or improving our services; or
- you have given consent, such as for certain marketing communications.
Age verification
Because we sell age-restricted products, customers may be required to complete an age-verification process.
We use AgeOnce to provide age-verification services. Information required for verification may therefore be processed by AgeOnce in accordance with its own privacy practices.
We do not use age-verification information for marketing purposes.
Payments
Payments are processed by third-party payment providers.
Where necessary, we share information with a payment provider so that it can process transactions, prevent fraud and comply with financial regulations.
We do not normally store your full debit or credit card number on our website.
Who we share information with
We may share relevant information with organisations that help us operate the business, including:
- payment processors
- age-verification providers
- delivery and postal services
- website and hosting providers
- email providers
- fraud-prevention and security services
- professional advisers
- regulators, law-enforcement bodies or public authorities where required by law
We only share information where reasonably necessary for the relevant purpose.
Website services
Our website uses WordPress and WooCommerce and may use associated services supplied by Automattic and other service providers.
These services may process technical or transactional information necessary to operate the website and online store.
Marketing
We will only send marketing communications where permitted by law.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or contacting us at:
Unsubscribing from marketing does not prevent us from sending service communications relating to an order or your account.
Cookies
Our website may use cookies and similar technologies to operate the store, remember preferences, maintain shopping baskets, provide security and understand how the website is used.
Where consent is legally required for non-essential cookies, we will ask for it before using them.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, fraud-prevention and regulatory requirements.
Different categories of information may therefore be retained for different periods.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to:
- request access to your personal information
- ask us to correct inaccurate information
- ask us to erase information
- restrict or object to certain processing
- request transfer of certain information
- withdraw consent where processing is based on consent
To exercise any of these rights, contact:
Complaints
If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.
Changes to this policy
We may update this privacy policy when our services, suppliers or legal obligations change.
The latest version will always be published on this website.