Privacy Policy

Last updated: 9 May 2026

1. Who we are

Ecig Switch is a UK-based online retailer of e-liquids and vaping hardware, trading from www.dnaeliquids.co.uk and www.ecigswitch.co.uk.

We are the data controller responsible for your personal data.

• Data controller: Jonathan Terrington trading as Ecig Switch (sole trader)
• Address: 285/287 Dickson Road, Blackpool, FY1 2JL, United Kingdom
• Email: trade@ecigswitch.co.uk
• ICO registration: Registration with the Information Commissioner’s Office is in progress; this page will be updated with the registration number once issued.

We are not required to appoint a Data Protection Officer under Article 37 of the UK GDPR. Privacy questions can be sent to the email address above.

2. The personal data we collect

Depending on how you interact with us, we may collect:

• Account and order data: name, billing and delivery address, email address, phone number, order history.
• Payment data: we do not see or store your full card details. Card payments are handled by our payment processor (see Section 6). We receive only a transaction reference and confirmation of payment status.
• Communications: the content of any messages you send us by email, contact form or wholesale enquiry form.
• Age confirmation: we operate an 18+ age gate on the site. We record only that you confirmed you are 18 or over (stored in your browser, not in our systems). We do not collect your date of birth at the gate.
• Technical data: IP address, browser type, device type, pages visited, referring URL, and similar information collected via cookies and analytics. See our cookie information for detail.

We do not knowingly collect or process special-category personal data (such as health data, racial or ethnic origin, or biometric data) and we do not knowingly collect personal data from anyone under 18.

3. How we use your data and our lawful basis

Under the UK GDPR we process personal data only where we have a lawful basis to do so. The main bases we rely on are:

• Performance of a contract — to take, process, package and dispatch your order, and to handle returns, refunds and customer service.
• Legal obligation — to keep accounting and tax records, to verify age for the sale of nicotine-containing products, and to comply with consumer protection law.
• Legitimate interests — to operate, secure and improve the website, prevent fraud and abuse, and respond to enquiries. Where we rely on legitimate interests we have considered your rights and freedoms.
• Consent — for non-essential cookies and any direct marketing email we may send. You can withdraw consent at any time.

4. Marketing

We will only send you marketing emails if you have asked us to or, where the law allows, you are an existing customer and we are telling you about similar products. Every marketing email contains a one-click unsubscribe link. You can also opt out at any time by emailing trade@ecigswitch.co.uk.

5. Cookies and analytics

We use cookies and similar technologies to make the site work, to remember your basket and login, and (with your consent) to measure how the site is used. Our cookie banner, provided by CookieYes, lets you accept or reject non-essential cookies. You can change your preferences at any time using the cookie settings link in the footer.

Analytics on this site are provided by Google (Google Analytics and Google Search Console, integrated via Site Kit and Google Tag Manager). Where you have not consented to non-essential cookies, analytics tracking is not loaded.

6. Who we share your data with

We share personal data only with carefully selected service providers who help us run the business. These are our processors and act on our instructions:

• Viva Wallet — payment processing for card transactions.
• Hostinger — email hosting and outbound transactional email (order confirmations, shipping notifications, password resets) routed via FluentSMTP.
• Royal Mail and/or other UK couriers — used as needed to fulfil and deliver orders. They receive your name, delivery address and (where applicable) phone number or email for delivery notifications.
• Google — analytics, search performance and tag management (Site Kit, Google Analytics, Google Search Console, Google Tag Manager).
• Rank Math — SEO tools that may process limited usage data.
• MalCare — website security and malware scanning.
• Akismet — comment and form spam filtering (operated by Automattic).
• CookieYes — cookie consent management.
• ShortPixel — image optimisation (operates on uploaded media, not on customer data).
• Our website host — for the technical operation of the site.

We may also disclose personal data where we are required to do so by law, by a court order, or in connection with the prevention of fraud or other crime.

Some of our processors may transfer data outside the UK (for example to the EEA or USA). Where they do, we rely on the UK’s adequacy regulations or on standard contractual clauses approved by the UK government to make sure your data continues to be protected to UK GDPR standards.

7. How long we keep your data

• Order and accounting records: kept for 6 years from the end of the financial year in which the transaction occurred, to meet HMRC requirements.
• Account data: kept while your account is active. If you ask us to delete your account we will do so, subject to records we are legally required to keep.
• Marketing preferences: kept until you unsubscribe.
• Customer service correspondence: kept for up to 3 years from the date of the last contact, then deleted.
• Analytics data: kept according to the retention period set in Google Analytics (currently 14 months).

8. How we keep your data secure

The website uses HTTPS encryption end to end. Customer accounts are password-protected and we use security tooling (including MalCare) to monitor for malicious activity. Card payment data is handled by our PCI-compliant payment provider and never touches our servers. Access to administrative areas is limited to authorised personnel only.

No system can be guaranteed 100% secure. If we ever become aware of a personal data breach that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours as required by law, and contact affected individuals where required.

9. Your rights

Under the UK GDPR you have the right to:

• Be informed about how your personal data is used (this policy).
• Request a copy of the personal data we hold about you (a “subject access request”).
• Ask us to correct inaccurate personal data.
• Ask us to delete your personal data (“right to erasure”), subject to legal record-keeping obligations.
• Ask us to restrict or object to processing in certain circumstances.
• Ask for your data to be ported to another provider where technically possible.
• Withdraw consent at any time where we are relying on consent (for example marketing or non-essential cookies).
• Not be subject to decisions based solely on automated processing — we do not carry out any such decision-making.

To exercise any of these rights, email trade@ecigswitch.co.uk. We will respond within one calendar month. There is normally no charge.

10. Complaints

We hope you will come to us first if you have any concern about how we use your data. You also have the right to complain to the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of the page will tell you when. Significant changes will be highlighted on the website.

12. Contact

Jonathan Terrington trading as Ecig Switch
285/287 Dickson Road
Blackpool
FY1 2JL
United Kingdom
Email: trade@ecigswitch.co.uk