Privacy Policy

Last Updated: 27 January 2026

At Pouch Lab, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, phone number, date of birth (for age verification)
Delivery Information: Shipping address, billing address
Payment Information: Payment card details (processed securely by our payment provider)
Age Verification: Date of birth and verification documents to confirm you are 18 years or older
Communications: Information you provide when contacting customer service or subscribing to marketing

1.2 Information Collected Automatically

Device & Browser Data: IP address, browser type, device identifiers
Usage Data: Pages visited, products viewed, time spent on site
Cookies: See our Cookie Policy for details on how we use cookies

2. How We Use Your Information

We use your personal information for the following purposes:

Age Verification: To verify you are 18+ and legally permitted to purchase nicotine products
Order Processing: To process and fulfill your orders, including shipping and delivery
Customer Service: To respond to inquiries, resolve issues, and provide support
Marketing: To send promotional emails about new products and offers (with your consent)
Legal Compliance: To comply with legal obligations and prevent fraud
Website Improvement: To analyze usage patterns and improve our services

3. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance: Processing necessary to fulfill your order
Legal Obligation: Age verification and compliance with tobacco/nicotine regulations
Legitimate Interests: Fraud prevention, website security, and business analytics
Consent: Marketing communications (you may withdraw consent at any time)

4. Data Sharing and Disclosure

We may share your information with:

Service Providers: Payment processors, shipping carriers, age verification services, email marketing platforms
Legal Authorities: When required by law or to protect our legal rights
Business Transfers: In the event of a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as necessary to:

Fulfill the purposes outlined in this policy
Comply with legal, accounting, or reporting requirements (typically 7 years for financial records)
Resolve disputes and enforce our agreements

6. Your Rights

Under UK GDPR, you have the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (subject to legal obligations)
Restriction: Limit how we process your data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Unsubscribe from marketing at any time

To exercise these rights, contact us at sales@pouchlab.co.uk

7. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

SSL encryption for data transmission
Secure payment processing (PCI DSS compliant)
Access controls and authentication
Regular security assessments

8. International Transfers

Your data may be transferred to and processed in countries outside the UK/EEA. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Children's Privacy

Our products are strictly for adults aged 18 and over. We do not knowingly collect information from individuals under 18. If we become aware of such collection, we will delete the information immediately.