Data Retention Policy
Data Retention Policy
At Vape Superstore, we are committed to protecting the personal data of our customers and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Data Retention Policy outlines how we manage and retain customer data, ensuring that we only keep personal data for as long as necessary to fulfil its intended purpose and comply with legal obligations.
Purpose
The purpose of this policy is to establish clear guidelines for the retention, storage, and deletion of personal data. This ensures that Vape Superstore complies with data protection principles, particularly those relating to data minimisation and the retention of personal data for no longer than necessary.
Retention Periods
We retain personal data for the following purposes and for the following periods:
- Customer Account Data: Data associated with customer accounts, including purchase history, is retained for as long as the customer maintains an account. If the account is inactive for more than 2 years, we will anonymise or delete the account data.
- Marketing Data: Data related to email marketing and communications will be kept for 24 months from the last engagement (e.g., last opened email or click). Unsubscribed or opted-out users will be retained in our "Do Not Contact" list indefinitely to prevent future marketing contact.
- Transaction Data: We will retain transaction data (e.g., order history) for 6 years as required for tax and accounting purposes.
- Cookie Data: Data collected through cookies is retained for up to 24 months, depending on the type of cookie. Users may opt-out of cookies at any time through our Cookie Preferences.
Data Disposal
When personal data is no longer required, we ensure it is securely disposed of through methods such as data anonymisation or deletion. We comply with the legal requirements for the retention and destruction of data, ensuring that no personal data is kept longer than necessary.
Retention Process
Our team regularly reviews the data stored in our systems to ensure that it is kept up to date and that outdated or unnecessary data is securely deleted or anonymised.
Conclusion
By implementing this Data Retention Policy, we ensure that personal data is handled in compliance with applicable laws and regulations. Vape Superstore is committed to respecting customers' privacy and protecting their personal data.