Privacy policy

This Privacy Policy explains how personal data is handled when you visit VapePodCar, buy car fragrances, use a customer account or contact us.

Who is responsible for your data?

VapePodCar is operated by S DAILY TRADE s.r.o., the controller of personal data used to run this store and manage our customer relationships.

Registered office: Vodná ul. 2915/11, 945 01 Štúrovo, Slovakia
Company identification number (IČO): 50436864
Tax identification number (DIČ): 2120323249
VAT identification number: SK2120323249
Commercial Register: District Court Nitra, Section Sro, Insert No. 41313/N
Privacy contact: contact@vapepodcar.com

Information we collect and where it comes from

• Information you provide: your name, email address, telephone number where provided, billing and delivery addresses, selected products, order details, account information, messages and any information you choose to include in a return, refund or complaint request.
• Payment information: order totals, payment and refund status, and transfer information made available by our bank, such as the payer's name and payment reference. Payment is currently by bank transfer. Do not send us card details or online-banking credentials.
• Information collected through the store: IP address, browser and device information, cookie identifiers, pages and products viewed, cart and checkout activity, and privacy choices.
• Information from service providers: transaction, delivery, support and technical information needed to provide their services, including information from Shopify, our bank and delivery providers.

Information submitted during checkout or an account interaction may be retained even if you do not complete an order. Leaving the page does not automatically delete information already submitted.

How and why we use information

• Orders and customer services: to respond to a purchase enquiry, process an order, match a bank transfer, arrange delivery, manage an account, communicate about a transaction and handle returns or complaints. We rely on steps requested before a contract or performance of a contract under Article 6(1)(b) GDPR.
• Legal requirements: to keep required accounting and tax records, meet consumer-protection duties and respond to lawful requests. We rely on legal obligations under Article 6(1)(c) GDPR.
• Security and business administration: to protect the store, investigate misuse, answer general enquiries and establish, exercise or defend legal claims. These are our legitimate interests under Article 6(1)(f) GDPR, subject to your rights and interests.
• Optional cookies and targeted advertising: where used, these rely on your consent under Article 6(1)(a) GDPR and applicable cookie rules. Accepting our sales terms or placing an order is not consent to optional tracking or marketing.

Order confirmations, payment instructions and other service messages are separate from marketing. Any optional marketing messages are subject to applicable consent and unsubscribe requirements. Refusing optional cookies does not prevent you from buying.

The contact, address and transaction information needed for an order is necessary to process and deliver it. If you do not provide that information, we may be unable to complete the purchase. Optional information is not required.

Who receives information?

Information is shared as needed with Shopify, which hosts and operates our online store; our bank; fulfilment and delivery providers; communication and support providers; and professional advisers where their assistance is needed. Authorities may receive information where disclosure is legally required. A provider may act on our instructions or as an independent controller for its own obligations.

Shopify Network Intelligence is enabled for this store. This allows Shopify to use information about interactions and transactions here together with information from other Shopify merchants to provide enhanced services, including analytics, personalisation, product improvements and advertising. Shopify acts as a separate controller for this processing and applies your relevant privacy choices. Targeted advertising in the European Economic Area requires consent. See Shopify's Consumer Privacy Policy and Shopify's privacy portal for its processing and your choices.

Cookies and your choices

Necessary technologies support the cart, checkout, sign-in, security and recording your choices. Optional technologies are subject to consent where required. Use the banner's Manage preferences, Accept or Decline controls, or reopen Cookie preferences in the footer to change your choices. See our Cookie Policy for more information.

International processing

The store's Shopify hosting location is the United States. Shopify and other providers may also process information in other countries outside the European Economic Area. Such processing must comply with applicable transfer rules. Depending on the transfer, safeguards may include an applicable adequacy decision, approved Binding Corporate Rules or the European Commission's Standard Contractual Clauses, together with any additional safeguards required. Shopify describes its arrangements in its Data Processing Addendum. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

How long we keep information

We keep information for the period needed for its purpose. This depends on whether an order, account, enquiry, return or complaint remains active; applicable accounting and tax retention duties; and limitation periods or ongoing disputes. Account closure or a deletion request does not require us to delete records we must retain by law or that remain necessary for a justified legal claim. We limit their use to the purpose that requires retention. Cookie lifetimes are explained in our Cookie Policy.

Your rights

Under the GDPR, and subject to the conditions and exceptions in the law, you may request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests and to direct marketing. You can withdraw consent at any time without affecting processing that was lawful before withdrawal.

Send requests to contact@vapepodcar.com or our registered office. We may request information necessary to verify your identity. We normally respond within one month; where the law permits an extension, we will explain it within that initial period.

You may complain to the Slovak Office for Personal Data Protection or another competent supervisory authority, including the authority where you habitually live or work or where an alleged infringement occurred. You do not have to contact us before making a complaint.

Updates

We will update this policy when our processing changes. Where additional notice or consent is required, we will provide or request it before the relevant new processing begins.