Last updated: 15 October 2026
This Privacy Policy explains how ND Vape (“we”, “us”) collects and uses your personal data when you visit ndvape.com or place an order. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.
1. What data we collect
- Order and contact data: name, billing and delivery address, e-mail, phone number, company details (if you order as a business).
- Order details: products, quantities, prices, chosen warehouse (China or EU), order history.
- Payment data: card payments are processed by Stripe. We do not see or store your full card number.
- Communication: messages you send us via WhatsApp, e-mail or contact forms.
- Technical data: IP address, browser type and cookies needed for the website to work (cart, login, age confirmation).
2. Why we use your data and the legal basis
- To process and deliver your order and handle complaints – performance of a contract (Art. 6(1)(b) GDPR).
- To issue invoices and keep accounting records – legal obligation (Art. 6(1)(c) GDPR).
- To confirm that visitors are adults (18+) and to protect the website against fraud – legitimate interest (Art. 6(1)(f) GDPR).
- To answer your questions and send order updates – performance of a contract / legitimate interest.
- To send newsletters or offers – only with your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
3. Who we share data with
- Payment provider: Stripe Payments Europe, Ltd. (card payments).
- Carriers and couriers delivering your order.
- Our suppliers and warehouses (China / EU) – only the data needed to ship your order.
- Website hosting and e-mail service providers.
- WhatsApp (Meta Platforms Ireland Ltd.) if you contact us via WhatsApp.
- Accountants and public authorities where required by law.
Some of these providers may process data outside the EU/EEA. In such cases transfers are protected by appropriate safeguards (e.g. EU Standard Contractual Clauses).
4. How long we keep your data
- Order and invoice data: 10 years, as required by accounting law.
- Customer account data: until you delete your account or ask us to delete it.
- Communication: as long as needed to handle your request, then deleted.
- Marketing consent: until you withdraw it.
5. Cookies
We use cookies that are necessary for the website to work (shopping cart, login, age verification, security). With your consent we may also use analytics cookies. You can change your cookie settings at any time in the cookie banner or in your browser.
6. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability and to withdraw consent at any time. To exercise your rights, contact us via WhatsApp or through the contact details on our website.
You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
7. Age restriction
Our website and products are intended only for persons aged 18 and over. We do not knowingly collect data from minors.
8. Changes
We may update this Privacy Policy from time to time. The current version is always published on this page.
