Di Vapor Privacy Policy
Welcome and thank you for your interest in browsing or buying from Di Vapor. We are a specialist in luxury bathroom products as well as spare parts. This Privacy Policy relates to the Di Vapor website (https://www.divapor.com), purchases, as well as email and telephone communication with Di Vapor.
The privacy and handling of your personal data is important to Di Vapor. This Privacy Policy outlines in a clear and concise way how any information that is collected by Di Vapor is used. Please read through this Privacy Policy and contact Di Vapor if you have any further questions.
Who we are?
Di Vapor Ltd is the data controller for personal information collected through divapor.com, our customer service channels and purchases from us. We determine how and why this information is used. We may use carefully selected service providers to help us provide our services, including payment processing, delivery, IT/hosting, accounting and communications services. Where those organisations process personal information on our behalf, we require appropriate data protection arrangements.
What information do we collect?
We collect information from you in several different ways. This could be via email, telephone or through the Di Vapor website.
PurchasesWhen making a purchase from Di Vapor we may collect your company name, personal name, email address, telephone number, date and time of purchase, billing address, delivery address, order details and payment transaction information. Di Vapor does not store full payment card numbers or card security codes. Payment card details are processed by our payment service providers, including PayPal. We may retain transaction identifiers, payment status, amounts paid and other information required for order administration, fraud prevention, accounting and legal purposes.
EnquiriesWhen you contact Di Vapor for help or assistance through our website we will store the information you provide including: time and date of enquiry, your name, email address, contact number, referring website page along with the details of your enquiry.
Stock NotificationsIf you contact Di Vapor with a request to inform you when an item comes back into stock we will store the following information: The date and time of your request, name, email and telephone number.
Brochure RequestsIf you request a brochure from Di Vapor we will store: the date and time of the request, your name, address, email address, telephone number and where you heard about Di Vapor.
Marketing communications
We may use your email address to send occasional marketing about Di Vapor’s own similar bathroom products, spare parts, accessories, product advice, special offers and promotions where permitted by law. This may include offers for the same product you previously purchased, or for relevant replacement, backup, spare, compatible or alternative products directly related to a previous purchase.
Where you provide your email address while purchasing or negotiating to purchase products or services from us, we may rely on the electronic-mail “soft opt-in” under the Privacy and Electronic Communications Regulations 2003 (PECR). We will only use this where we collected your contact details directly, gave you a clear opportunity to opt out when the details were collected, and the marketing relates to our own similar products or services. Our UK GDPR lawful basis for this processing is normally our legitimate interests in promoting relevant Di Vapor products and services to customers and to people who have purchased or negotiated to purchase products or services from us, where permitted by law.
Where we ask you to actively opt in to marketing, including where you previously opted out and later choose to receive marketing again, we rely on your consent. You may withdraw that consent at any time.
We will provide a simple unsubscribe or opt-out method in every marketing email. If you opt out or object to direct marketing, we will stop using your personal information for email marketing. We may retain limited information on a suppression list so that we can continue to respect your preference.
Service and transactional communications
Marketing preferences do not prevent us from contacting you where reasonably necessary to administer our relationship with you. We may send non-promotional service or transactional communications relating to enquiries, quotations, orders, payments, delivery, returns, refunds, warranties, product safety, account administration, fraud or security issues, changes affecting a service we provide to you, or other matters connected with a current or previous transaction. These communications are not marketing where they are genuinely administrative or customer-service messages and do not contain promotional material.
Business contacts
We may contact corporate customers and business contacts about relevant Di Vapor products and services where permitted by PECR and data protection law. Where the recipient is a corporate subscriber, such as a limited company or other incorporated organisation, the PECR consent and soft opt-in rules for electronic mail do not apply in the same way as they do to individual subscribers. Where a business email address or other information identifies an individual, we will normally rely on our legitimate interests in promoting our products and services, developing business relationships and communicating with customers and prospective corporate customers. Sole traders and certain partnerships are treated as individual subscribers for PECR purposes, so we will only send them electronic marketing where an applicable legal basis such as consent or the soft opt-in is available. We will identify ourselves in marketing communications and will respect objections and unsubscribe requests.
Your right to object to direct marketing
You have an absolute right to object to the use of your personal information for direct marketing at any time. You can use the unsubscribe link in any marketing email or contact us directly. Once you object, we will stop using your personal information for that purpose. We may retain your email address on a suppression list solely to ensure that your objection continues to be respected.
How do we use personal information?
We may use personal information for the following purposes:
- To respond to enquiries, provide quotations and take steps requested by you before entering into a purchase or other transaction.
- To process, administer and deliver orders and to communicate with you about payment, delivery, returns, refunds and other order-related matters.
- To provide customer service, technical support, after-sales support and warranty assistance.
- To create and administer customer, trade or credit accounts where applicable.
- To carry out appropriate fraud prevention, security, identity, payment and credit checks where necessary.
- To maintain accounting, tax, transaction and business records and comply with our legal and regulatory obligations.
- To protect our legal rights, prevent misuse of our services and establish, exercise or defend legal claims.
- To understand how our website and services are used and to improve our website, products, services and business operations.
- To undertake internal reporting, analysis, research, product development and business planning.
- To use purchase history, product interests and previous interactions to make our customer service and, where legally permitted, our marketing communications more relevant.
- To send marketing communications where permitted by PECR and data protection law, as explained in the Marketing communications and Business contacts sections above.
We process personal information only where we have a lawful basis to do so. We normally rely on:
Contract – where processing is necessary to take steps at your request before a purchase, process and deliver your order, administer your account, and provide relevant after-sales service.
Legal obligation – where we need to retain or process information to comply with tax, accounting, consumer protection or other legal requirements.
Legitimate interests – where necessary for the operation, administration, protection and improvement of our business, website and services, customer service, fraud prevention, security, analysis, relevant direct marketing, business-to-business communications and the establishment or defence of legal rights, provided those interests are not overridden by your rights and freedoms.
Consent – where we specifically ask you to consent, including certain marketing communications and where consent is required for cookies or similar technologies.
Our lawful basis for email marketing is explained separately in the Marketing communications section above.
Your data protection rights
Depending on the circumstances and the lawful basis on which we process your information, you may have the right to request access to your personal information, correction of inaccurate information, erasure of information, restriction of processing, data portability and to object to certain processing. Where we rely on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before it was withdrawn. Some rights are subject to legal exceptions, including where we are required to retain information for accounting, tax, legal, fraud prevention or other legitimate purposes.
You have an absolute right to object to the use of your personal information for direct marketing. You can exercise this right using the unsubscribe facility in a marketing email or by contacting us. We may retain limited information on a suppression list so that we can continue to respect your objection.
If you have concerns about how we use your personal information, please contact us so that we can investigate. You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK data protection regulator.
When do we share personal data?
Di Vapor does not sell personal information to third parties for their own marketing purposes. We may share personal information where reasonably necessary with organisations that help us operate our business and provide our services, including payment processors, banks and payment providers, delivery and logistics providers, IT and hosting providers, communications providers, analytics providers, accounting and financial service providers, fraud prevention and security providers, professional advisers and public authorities where required by law.
Depending on the circumstances, these organisations may process information on our behalf as processors or may act as separate data controllers. We only share information that is reasonably necessary for the relevant purpose and put appropriate data protection arrangements in place where required.
We may also disclose personal information where reasonably necessary to establish, exercise or defend legal claims, investigate suspected fraud or unlawful activity, protect our customers or business, comply with a legal obligation, or in connection with a sale, restructuring or transfer of all or part of our business, subject to applicable data protection law.
Where do we store and process personal data?
Our principal website and order databases are hosted on servers in the United Kingdom. Some service providers we use may process personal information in other countries. Where personal information is transferred outside the United Kingdom and UK data protection law requires safeguards, we use an appropriate lawful transfer mechanism, such as applicable UK adequacy regulations or appropriate contractual safeguards.
How do we secure personal data?
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or misuse. These measures include access controls, restricted staff access, system security measures and regular backups for business continuity and disaster recovery. Access to personal information is limited to authorised Di Vapor personnel and authorised service providers who require access for a legitimate business purpose.
How long do we keep your personal data for?
We retain personal information only for as long as reasonably necessary for the purposes for which it is used, taking account of our legal, accounting, tax, warranty, customer service, fraud prevention and potential legal-claim requirements. Order, invoice, payment and accounting records may therefore be retained for a number of years after a transaction. Other information may be deleted or anonymised when it is no longer reasonably required.
Marketing eligibility information is retained while it remains reasonably necessary for our direct marketing purposes and is periodically reviewed. Where someone opts out, withdraws consent or objects to direct marketing, we may retain limited suppression information for as long as reasonably necessary to ensure that their preference continues to be respected.
How to contact us?
Di Vapor Ltd is the data controller responsible for this Privacy Policy. If you have questions about how we use your personal information or wish to exercise a data protection right, you can contact us at help@divapor.com or through our contact page
Use of cookies and other technologies
Di Vapor uses cookies and similar technologies for purposes including maintaining website functionality, remembering shopping basket choices, account and session management, security, completing transactions, analytics and, where permitted, advertising and marketing.
Cookies and technologies that are strictly necessary for the operation, security or functionality of the website may be used without consent where permitted by law. Analytics or statistical technologies may be used where consent has been obtained or where another applicable PECR exception lawfully applies.
Marketing and advertising cookies or similar technologies are only used where the consent required by law has been obtained. Where consent is required, you can withdraw or change your choice at any time using the cookie controls made available on the website. You can also control cookies through your browser, although disabling necessary cookies may prevent parts of the website from functioning correctly.
Where third-party services are used, those providers may process information in accordance with their own privacy information and applicable data protection law.
Linking to other websites / third party content
Please note that any links to other websites or resources from the Di Vapor website does not constitute any endorsement or responsibility for the content or information on that external website.