Privacy Policy
We want you to know what happens to your personal information when you shop with NVee Superstore. This policy explains what we collect, how it is used and the choices you have.
The information we need depends on how you use the website. It can include:
If you register, we use your information to maintain your account...
Vaping and nicotine products are for adults aged 18 and over...
UK data-protection law gives you rights over your personal information...
1. Who is responsible for your information?
NVee Superstore is operated by Galaxy Connect Limited, registered in England and Wales under company number 06059467. Galaxy Connect Limited is responsible for deciding how and why personal information is used when you shop on NVee Superstore.
You can contact us about this Privacy Policy, your account or a privacy request at info@nveesuperstore.com or through Contact Us.
Our registered office is Amba House, 4th Floor Kings Suite, 15 College Road, Harrow, Middlesex, HA1 1BA. This is our registered office, not a physical shop or returns address.
2. What information do we collect?
- Your details: name, email address, telephone number, billing address and delivery address.
- Your account: username, sign-in and account settings, saved preferences and details linked to your Rewards Points account.
- Your orders: products ordered, transaction references, purchase history, amounts paid, delivery and refund information. Payment details used to complete a transaction are handled through the payment services available at checkout.
- Your messages: information you choose to include when contacting us, including order questions, return requests or product enquiries.
- Age-verification information: information or verification results needed when buying products that are legally restricted to adults.
- Website activity: technical information such as IP address, browser, device, pages viewed, search terms and basket activity, where collected through the website and the technologies you have allowed.
- Marketing choices: whether you have subscribed, unsubscribed or chosen particular communications.
3. Where does that information come from?
We receive information directly from you when you create an account, place an order, join a mailing list, use a contact form or ask for help.
Some information is collected as you use the site, for example through essential website logs and permitted cookies or similar technologies.
We may also receive relevant details from the services needed to complete an order, such as payment confirmations, delivery information, fraud checks and age-verification results. Where information is brought across from an existing NVee service or account, the source and purpose must be explained as part of that transfer.
4. Why do we use your personal information?
We only use personal information when there is a lawful reason to do so. The main purposes and legal bases are:
- To take and fulfil your order: accepting payment, sending order and dispatch updates, delivering goods and handling returns. The usual legal basis is taking steps to enter into or performing our contract with you.
- To run accounts and Rewards: managing sign-in, points balances, redemption and related account support. We rely on contractual necessity where applicable, with other purposes assessed separately.
- To meet legal responsibilities: keeping required transaction records, responding to valid legal requests and checking eligibility for age-restricted goods. The relevant basis is compliance with a legal obligation where that obligation applies.
- To protect customers and the website: preventing fraud, handling disputes and maintaining the security of our service. We may rely on our legitimate interests in keeping the store safe, provided those interests are not overridden by your rights.
- To answer enquiries and improve service: responding to requests and understanding problems customers encounter. Depending on the circumstances, this may be needed for a contract or for our legitimate interests in running the business.
- For marketing, analytics or non-essential tracking: consent is used where required. Other marketing may be permitted under specific rules for existing customers, with the appropriate opt-out choices. Our actual use of these features must match the permissions and controls presented on the site.
5. Orders, payments and deliveries
When you place an order, we use your contact details, delivery information and the items purchased to process it. Payment service providers handle the payment steps and send us the information needed to record whether payment was successful, issue refunds and resolve problems.
We share the information a courier needs to deliver the parcel, such as the recipient’s name, address and any relevant contact details. We also use order details to send essential messages, including confirmation, dispatch information and details of the courier carrying your order.
These service messages are not marketing emails. You may still receive important information about an order even if you have unsubscribed from offers and newsletters.
6. Accounts and Rewards Points
If you register, we use your information to maintain your account, make previous orders available where the feature supports it and help you manage sign-in or account enquiries.
For Rewards Points, we may need to record qualifying orders, points earned or redeemed, adjustments following returns and the relevant dates so we can calculate your balance and apply the scheme rules.
If existing NVee account, order or Rewards records are moved to the Superstore system, this must be covered by the applicable migration information. Moving an account or purchase history does not, by itself, give permission to send marketing that would otherwise require consent.
7. Age verification and restricted products
Vaping and nicotine products are for adults aged 18 and over. We use Age Check, our age-verification provider, when we need to check that a customer is old enough to buy an age-restricted product.
Depending on the verification method, further information may be needed to complete a check. We use the verification result to decide whether the age-restricted order can proceed. If you’re asked to provide further evidence, follow the instructions given during the verification process rather than emailing identity documents to customer support.
Age verification is applied where it is required. Shopping in the Food & Drink or Tech & Mobile departments does not automatically require a vaping-product age check.
8. Marketing emails and your choices
If you choose to receive marketing, we may email you about relevant products, news or offers where the law permits. We may also contact existing customers about similar products when the specific legal requirements for doing so are met.
You can unsubscribe from marketing at any time using the link in a marketing email or by emailing info@nveesuperstore.com We will respect your choice and update the relevant communication records.
We may use permitted order and website activity to understand which communications are relevant, but only in line with the applicable marketing and privacy rules. Restrictions on marketing vaping and nicotine products apply separately and must be respected.
Unsubscribing from marketing does not stop essential order messages, refunds, account-security messages or replies to enquiries you have made. 7. Age verification and restricted products
9. Cookies, analytics and advertising technology
Cookies and similar technologies help some website features work, such as keeping items in your basket, maintaining a signed-in session and remembering your settings. Other technologies may measure how the site is used or support advertising.
We explain the cookies and technologies in use, including their purposes, in our Cookie Policy. You can use Cookie Preferences to review and change your choices for technologies that require consent.
Where consent is needed for an optional technology, it must not be activated before that consent is given. The cookie choices shown to you must reflect the actual scripts and services running on NVee Superstore.
10. Who do we share information with?
We share personal information only where there is a valid reason, for example with:
- Payment providers: to take payments, verify transactions and issue refunds.
- Delivery companies: to fulfil and investigate orders.
- Technology and hosting suppliers: to maintain the website, customer accounts and essential systems.
- Customer support, email and Rewards service providers: where they help us provide the relevant service or send permitted messages.
- Age Check: our age-verification provider, when a check is required for an age-restricted purchase.
- Fraud-prevention providers: where a check is necessary.
- Professional advisers, regulators and authorities: where necessary for legal compliance, claims or legitimate requests.
Service providers are expected to handle information in line with applicable data-protection requirements. If another organisation uses information for its own purposes, it may also have responsibilities to explain that use to you.
We do not give unrelated businesses permission to use your information for their own direct marketing without the consent or other lawful permission required.
11. Does information leave the UK?
Some website, payment or communications services may process personal information outside the UK.
Where a restricted international transfer takes place, it must meet UK data-protection requirements. This can involve a destination recognised as providing adequate protection or an approved contractual safeguard with any necessary checks.
If you would like to know more about the safeguards relevant to your information, contact info@nveesuperstore.com. The final list of providers, relevant countries and legal transfer mechanisms must match the systems actually used.
12. How long do we keep it?
We keep personal information for as long as it is reasonably needed for the reason it was collected, and for any additional period the law requires.
For example, we may need to retain order and payment records to meet tax and accounting rules, deal with refunds, respond to complaints or establish legal claims. Customer-service records may be retained while an issue is being handled and for a proportionate period afterwards. Marketing preferences must be kept for as long as needed to respect opt-outs and demonstrate compliance.
The exact period depends on the type of record, the legal requirements and the risk involved. When information is no longer needed, we will delete it or make it anonymous in an appropriate way. A request to close an account does not always mean every transaction record can be deleted immediately.
13. How do we protect your information?
We use organisational and technical measures intended to protect personal information against unauthorised access, loss, alteration or misuse. Access should be limited to people and suppliers who need it for their work.
No online service can promise that every security risk will be eliminated. Please use a secure password, keep your account details private and contact us if you notice suspicious activity. We will respond to personal-data incidents and notify affected people or the Information Commissioner’s Office when the law requires.
14. Your rights and choices
UK data-protection law gives you rights over your personal information, depending on the circumstances. These can include:
- Access: ask for a copy of personal information we hold about you.
- Correction: ask us to fix inaccurate or incomplete details.
- Deletion: ask us to remove information when the relevant legal conditions are met.
- Restriction: ask us to limit how information is used in certain situations.
- Portability: ask for certain data in a usable format, where this right applies.
- Objection: object to certain processing based on legitimate interests. You have the right to object to the use of your personal information for direct marketing at any time.
- Withdraw consent: change your mind where our processing relies on your consent.
- Rights relating to automated decisions: seek the protections available where a decision is made solely by automated means and has a legal or similarly significant effect on you.
To make a request, email info@nveesuperstore.com. We may need to verify your identity before responding. Some rights have exceptions, and we will explain if a request cannot be met in full.
15. Automated checks and personalised experiences
Some website processes may use technology to assess risks, help detect suspicious orders or identify which products and information may be relevant to visitors. Age-restricted orders may also involve automated verification steps.
Automated recommendations and marketing choices must respect your applicable privacy and cookie preferences. If we use solely automated decision-making that has a legal or similarly significant effect on you, we will provide the explanations and safeguards required by law.
The precise checks and systems used will depend on the services enabled on the live website.
16. Complaints and questions
If you have a question about this policy or how we handle your personal information, please email info@nveesuperstore.com. Tell us what you’re concerned about so we can investigate.
You can also complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator, at ico.org.uk. You do not have to wait for our permission to contact the ICO.
If your question is about an order or a return rather than personal data, please use Contact Us so it can reach the right team.
17. Changes to this Privacy Policy
We will review this Privacy Policy when our website, services, suppliers or legal obligations change. The most recent version will be available on this page. If a new use of your personal information requires a separate notice or consent, we will provide it at the appropriate time.
You can also read our Terms & Conditions and Cookie Policy for more detail about using the website and managing cookies.