This Privacy Policy explains how PuffCell VAPE (“we”, “us”) collects, uses and protects your personal data when you visit puffcell.com or place an order. We are a retail and wholesale supplier of vaping products to customers aged 18 and over. We comply with the EU General Data Protection Regulation (GDPR) and applicable local laws.
1. Who we are
PuffCell VAPE operates the website puffcell.com. For any privacy request you can contact us at info@puffcellvape.com. Our registered office is Unit 185, G/F, Hang Wai Industrial Centre, 6 Kin Tai St, Tuen Mun, Hong Kong.
2. Data we collect
- Account & identity data: name, email address, billing and shipping address, phone number, and (where required) proof of age.
- Order & transaction data: products ordered, amounts, payment status, and delivery information.
- Technical & usage data: IP address, browser type, device, pages visited, and cookies (see our Cookie Policy).
- Communications: messages you send us via contact forms, email or live chat.
3. How we use your data
- To process and fulfil your orders, including age verification and fraud prevention.
- To communicate order status, support and, where you have opted in, marketing.
- To improve our website, products and services.
- To comply with legal and regulatory obligations (e.g. age-restricted sales records).
4. Legal basis for processing
We process your data on the basis of contract performance (to fulfil orders), legal obligation (age-verification and tax records), legitimate interests (fraud prevention, service improvement), and your consent (marketing communications, non-essential cookies).
5. Sharing your data
We share data only with processors necessary to run the store: payment providers, shipping carriers, and our web-hosting/IT providers. We do not sell your personal data. Cross-border transfers are protected by appropriate safeguards.
6. Cookies & similar technologies
We use strictly necessary cookies to operate the store and optional analytics cookies. You can manage cookies in your browser; see our Cookie-Richtlinie.
7. Your rights under the GDPR
- Access to the personal data we hold about you (Art. 15).
- Rectification of inaccurate or incomplete data (Art. 16).
- Erasure (“right to be forgotten”) where applicable (Art. 17).
- Restriction or objection to processing (Art. 18 & 21).
- Data portability (Art. 20).
- Withdraw consent at any time, without affecting prior lawful processing.
To exercise these rights, email info@puffcellvape.com. You also have the right to lodge a complaint with your local supervisory authority.
8. Data retention
We keep order and account data for as long as your account is active and for the period required by tax, accounting and age-verification laws (generally up to 6 years), after which it is deleted or anonymised.
9. Children & age verification
This site is strictly for customers aged 18 and over. We use age-verification at checkout and may request ID. We do not knowingly collect data from minors.
10. Payment & data security
This site is served over HTTPS, so information you send us — including checkout details — is encrypted in transit. Card payments are handled by our external payment provider: you enter card details on the provider’s payment flow, and the authorisation result is returned to us. We do not receive or store your full card number, and we never ask for it by email, phone or chat. Cash-on-delivery orders carry no card data at all.
Order, account and age-verification records are stored on our servers and retained as described in section 8. If you believe a payment was made without your authorisation, contact us immediately at info@puffcellvape.com and we will open a dispute with the payment provider.
11. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with a revised date.
Zuletzt aktualisiert: 11. September 2026.
