Privacy policy
This policy explains what personal data Vapour (vapourmagazine.co.uk) collects, why, and what your rights are. We collect very little: there are no accounts, no payments and no tracking cookies of our own.
Who is responsible for your data
Vapour, registered at 8 Hay Ln, Coventry CV1 5RF, is the data controller for this website. You can contact us about privacy at editor@vapourmagazine.co.uk or through our contact page.
What we collect and why
| Data | When | Why | Lawful basis |
|---|---|---|---|
| Your name, email address and message | If you use the contact form | To read and reply to your message | Legitimate interests (answering your enquiry) |
| Technical data: IP address, browser type, pages requested, time of request | Every visit, recorded by our hosting provider | To deliver the site, keep it secure and stop abuse | Legitimate interests (running a secure website) |
| Your 18+ confirmation | When you confirm your age | So the age check does not appear on every page | Stored only in your own browser (see below); we never receive it |
We do not ask for, and do not want, any health information. Please do not include it in a message.
Cookies and similar technology
We do not set cookies. When you confirm you are 18 or over, a small flag is saved in your browser's local storage so you are not asked again. It never leaves your device, and you can clear it at any time in your browser settings. Our hosting provider may set a strictly necessary security cookie to protect the site from attacks.
If we add analytics in future, we will only use non-essential cookies with your consent, and we will update this policy first.
Who processes data for us
- Cloudflare, Inc. hosts and delivers the website and records the technical data above for security. See Cloudflare's privacy policy.
- Web3Forms delivers contact form messages to our inbox. See Web3Forms' privacy policy.
- Our email provider stores the messages we receive.
These providers may process data outside the UK. Where they do, we rely on the safeguards UK law allows, such as the UK International Data Transfer Addendum or an adequacy decision. We do not sell your personal data or share it for anyone else's marketing.
Buy links to stores
When you follow a buy link you leave this site for a store's website. The link includes tracking tags (for example utm_source=vapourmagazine) so the store can see the visit came from us. We do not send the store your name or any other personal data. Once you are on the store's site, its own privacy policy applies.
How long we keep it
- Contact messages: up to 12 months after our last reply, unless we need them longer to deal with a complaint or legal claim.
- Technical logs: kept by our hosting provider for its standard security retention period.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict or stop using it, and object to how we use it. Email us and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office, though we would welcome the chance to put it right first.
Under-18s
This website is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you think someone under 18 has contacted us, tell us and we will delete their message.
Changes to this policy
We will update this page if anything changes, and the date below shows when it was last revised.