Terms & Conditions

Last updated: 17 August 2026

EU Vape Box respects your privacy and is committed to handling personal data fairly, transparently and securely.

This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how long we keep it, and the rights available to you when you visit our website, create an account, place an order, submit a form or contact our support team.

1. Who We Are

EU Vape Box is operated by:

Legal business name: Shenzhen Bao an Yi Yuan Electronics Store
Unified Social Credit Code: 92440300MAKRJR4341
Registered address: A2-02, Building A2, Tianfu Huafu (Zone A), Lijin Community, Hangcheng Subdistrict, Bao’an District, Shenzhen, Guangdong, China
Website: https://euvapebox.com
Privacy contact: support@euvapebox.com

This business is the data controller responsible for deciding why and how personal data is processed through EU Vape Box.

You may also contact us directly at support@euvapebox.com regarding any privacy matter.

2. Who This Policy Applies To

This policy applies to people who:

Browse EU Vape Box
Create or use a customer account
Submit or update an order
Make a payment
Receive a delivery
Submit a product enquiry or support request
Contact us through email or WhatsApp
Subscribe to stock, product or promotional updates
Communicate with us in connection with a business relationship

Our products and services are intended only for adults who meet the legal purchasing age in their country. They are not intended for minors.

3. Personal Data We Collect

Depending on how you use our website, we may collect the following information.

Account and Identity Information

Name
Username
Account login details
Age or adult-status confirmation
Company name, where provided
Customer or account identifier

We do not need to see your account password. Passwords are handled through the website’s account system and should be stored in protected form.

Contact Information

Email address
Telephone or WhatsApp number
Billing address
Delivery address
Country and postcode

Order and Transaction Information

Products, flavours and quantities ordered
Selected warehouse
Order number
Order status
Price and currency
Payment method
Payment confirmation or receipt
Billing and delivery records
Refund, replacement, voucher or support history

We do not normally receive or store your complete bank-card credentials. Payments are processed through the bank or payment service selected for the transaction.

Delivery Information

Recipient name
Delivery address
Telephone number
Email address, where required for delivery notifications
Carrier and tracking number
Delivery status
Relevant communications concerning a delayed, returned or undeliverable parcel

Enquiry and Support Information

When you submit a form or contact us, we may receive:

Your name and contact details
Order number
Product name
Requested quantity
Delivery country
The contents of your message
Photographs, videos, receipts or other evidence you provide
Previous communications relating to the request

Please do not send identity documents, financial account passwords or unrelated sensitive information unless we specifically explain why it is required.

Technical and Website Information

When you access our website, limited technical information may be generated automatically, including:

IP address
Browser and device type
Operating system
Approximate country or region
Pages viewed
Date and time of access
Referring page
Session, security and cookie identifiers
Error, fraud-prevention and server-log information

Marketing Preferences

If you subscribe to updates, we may record:

Your email address
Subscription date
Consent status
Communication preferences
Unsubscribe or objection requests

4. How We Collect Personal Data

We collect personal data:

Directly from you when you create an account, order, complete a form or contact us
Automatically through website, server, security and cookie technologies
From banks or payment providers when they confirm a payment
From warehouses and delivery companies when they update an order or parcel
From service providers that help us operate the website or communicate with you
From another person who places an order for delivery to you

If another person provides your information, they should have permission to do so.

5. Why We Use Personal Data

We use personal data to:

Create and manage customer accounts
Confirm that customers meet applicable age requirements
Receive, verify and process orders
Confirm payments and prevent payment fraud
Check stock and reserve products
Arrange warehouse processing and delivery
Send order, payment and tracking notifications
Provide product and warehouse information
Respond to enquiries and support requests
Investigate missing, damaged, incorrect or faulty goods
Maintain transaction, accounting and compliance records
Protect accounts, the website and our business from misuse
Diagnose technical problems and improve website performance
Send marketing messages where permitted
Establish, exercise or defend legal claims
Comply with applicable legal and regulatory requirements

We do not sell personal data.

6. Legal Bases for Processing

Depending on the activity, we rely on one or more of the following legal bases.

Contract

Processing is necessary to:

Create and administer your account
Process your order
Confirm payment
Arrange delivery
Provide customer support
Handle an order-related request

Legal Obligation

We may process and retain information where necessary to comply with accounting, tax, consumer-protection, product, regulatory or other legal obligations.

Legitimate Interests

We may process information where necessary for legitimate business purposes, including:

Operating and securing the website
Preventing fraud and abuse
Maintaining transaction records
Managing stock and customer service
Investigating complaints
Improving website reliability
Establishing or defending legal claims

We consider the possible effect on your rights before relying on legitimate interests.

Consent

We rely on consent where required, including for:

Optional marketing subscriptions
Non-essential cookies
Certain optional communications or uses of information

You may withdraw consent at any time. Withdrawal does not make earlier processing unlawful.

7. Accounts and Age Confirmation

Customers are required to meet the legal purchasing age applicable in their destination country.

We may record your confirmation that you are an adult. If additional verification is legally required for a particular destination or product, we may request further information before accepting or dispatching an order.

If we learn that personal data has been provided by a minor who is not legally permitted to use the service, we may close the account, cancel the request where legally permitted and delete the information unless retention is required by law.

8. Payments

EU Vape Box may offer bank transfer or supported online bank-transfer methods such as Revolut.

Payment providers and banks process payment information under their own privacy terms. We normally receive information such as:

Payer name
Payment reference
Amount
Date and time
Confirmation status

If you send a payment receipt through email, WhatsApp or a form, it will be used to identify and process your order.

Please cover or remove unrelated account balances, transactions or other unnecessary financial information before sending a receipt.

9. Warehouses and Delivery Companies

To fulfil your order, we may share necessary information with:

The warehouse handling the products
Packing and fulfilment providers
Delivery companies and their local partners
Customs, regulatory or public authorities where legally required

Information shared may include the recipient’s name, address, postcode, telephone number, email address, products, parcel information and order reference.

We share only information reasonably required to prepare, dispatch, track and deliver the order or resolve a delivery issue.

10. Service Providers

We may use third parties that help us provide the website and services, including:

Website hosting and business email providers, including Hostinger
Website and ecommerce technologies, including WordPress and WooCommerce
Page, form and website-management tools, including Elementor and Contact Form 7
Content-delivery, security and anti-abuse services, including Cloudflare and Cloudflare Turnstile
Banks and payment-service providers
Warehouses, fulfilment partners and carriers
Email-delivery and customer-communication services
Professional advisers, accountants and technical-support providers
Analytics or cookie-management tools, if enabled

These providers receive only the information necessary for their role and may process it under a service agreement, their own legal obligations or their own privacy terms.

11. WhatsApp Communications

If you contact us through WhatsApp, your telephone number, profile information and message contents may be processed by WhatsApp and its affiliated companies under their own privacy terms.

WhatsApp is an external communication service. Do not use it to send passwords, complete bank-card information, unnecessary identity documents or other highly sensitive information.

For formal privacy requests, we recommend contacting:

support@euvapebox.com

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Essential Cookies

Essential cookies support functions such as:

Account login
Shopping cart
Checkout
Language or session settings
Security
Fraud and abuse prevention
Cookie-consent preferences

These cookies are required for the website to function correctly.

Functional, Analytics and Marketing Cookies

If enabled, these technologies may help us:

Remember optional preferences
Understand how visitors use the website
Measure website performance
Identify technical errors
Evaluate marketing activity

Where consent is legally required, non-essential cookies will not be activated until you make a choice through the cookie banner.

You can change or withdraw your cookie choice through the website’s cookie settings. You can also manage cookies through your browser, although disabling essential cookies may prevent some functions from working.

Further information may be provided in our Cookie Settings or Cookie Policy.

13. International Data Processing

EU Vape Box is operated by a business established in China. Your personal data may therefore be accessed or processed in China when we administer an account, confirm an order or respond to a support request.

Some hosting, security, email, payment, warehouse and technology providers may also process information in the European Economic Area, the United Kingdom, the United States, China or other countries in which they operate.

Where international data-transfer requirements apply, we will use an appropriate legal mechanism or safeguard, such as:
An adequacy decision
Approved standard contractual clauses
A legally recognised certification or framework
Another transfer mechanism permitted by applicable law

You may contact us to request available information about the safeguards relevant to your personal data.

14. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal obligations.

Our general retention approach is:

Account information: while the account remains active and for a reasonable period after closure
Order and transaction records: generally up to 10 years where required for accounting, tax, consumer-protection or legal-claim purposes
Payment confirmations and receipts: for the period necessary to verify the transaction and meet accounting or legal requirements
Enquiry and support records: normally up to 24 months after the last relevant communication, unless connected to an order, dispute or legal obligation
After-sales evidence: for the period necessary to investigate and resolve the request and any related claim
Marketing information: until consent is withdrawn, you object, or the information is no longer reasonably required
Security and technical logs: for a limited period appropriate to security, fraud prevention and technical investigation
Cookie records: according to the lifespan stated in the cookie settings or consent tool

Information may be kept longer where necessary for an active dispute, fraud investigation, regulatory request or legal claim. It may be deleted or anonymised earlier when it is no longer needed.

15. Marketing Communications

We send promotional or stock-update messages only where we have an appropriate legal basis.

You may stop marketing communications at any time by:

Clicking the unsubscribe link in an email
Contacting support@euvapebox.com
Updating available communication preferences

Unsubscribing from marketing will not prevent necessary order, payment, security or delivery messages.

We may retain a limited suppression record to ensure that we respect your unsubscribe request.

16. Security

We use reasonable technical and organisational measures intended to protect personal data, including measures relating to:

Access control
Account authentication
Website encryption
Security monitoring
Anti-spam and anti-abuse protection
Controlled access to order and support information
Backups and system maintenance
Staff and service-provider access limitations

No internet transmission or storage system can be guaranteed to be completely secure. You should use a unique password, keep your login information confidential and contact us promptly if you suspect unauthorised account access.

17. Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

Be informed about how your data is used
Request access to your personal data
Request correction of inaccurate or incomplete information
Request deletion of personal data
Request restriction of processing
Object to processing based on legitimate interests
Object at any time to direct marketing
Withdraw consent
Receive certain information in a portable format
Lodge a complaint with a competent data-protection authority
Request human intervention where a significant decision is made solely by automated means

These rights are not absolute. For example, we may need to retain transaction information to comply with legal obligations or defend a legal claim.

We will normally respond without undue delay and within one month where the GDPR applies. Complex or repeated requests may require additional time as permitted by law.

18. How to Make a Privacy Request

To exercise a privacy right, email:

support@euvapebox.com

Please include:

Your name
The email address used on the website
Your order number, if relevant
A clear description of your request

We may request limited additional information to confirm your identity. This is intended to prevent personal data from being disclosed to an unauthorised person.

We will never ask for your account password.

19. Automated Decision-Making

We do not currently use solely automated decision-making that produces legal effects or similarly significant effects on customers.

Security and anti-abuse systems may automatically identify suspicious activity. Where an order or account requires further review, a person may assess the available information before action is taken.

20. Links to Other Websites

Our website may contain links to WhatsApp, payment services, carriers, social platforms or other external websites.

Those organisations operate under their own privacy policies. EU Vape Box is not responsible for the privacy practices of an external website once you leave our website.

21. Disclosure Required by Law

Website text, original graphics, layout, branding and other original EU Vape Box content may not be copied, republished or commercially exploited without permission.

Third-party brand names, logos, product images and trademarks belong to their respective owners.

No use of a third-party mark on this website implies ownership by EU Vape Box.

22. Business Changes

If the business, website or relevant assets are reorganised, transferred or sold, personal data may be transferred as part of that transaction where permitted by law.

Any recipient must process the information consistently with applicable data-protection requirements.

23. Changes to This Privacy Policy

We may update this Privacy Policy when our website, service providers, processing activities or legal obligations change.

The latest version will be published on this page with a revised “Last updated” date.

Where a change materially affects how we use personal data, we will provide additional notice where required.

24. Contact Us

For questions about this Privacy Policy or the use of your personal data, contact:

EU Vape Box
Email: support@euvapebox.com
Website: https://euvapebox.com
WhatsApp: +86 151 7776 7311

For privacy-rights requests, email is the recommended contact method because it provides a clear written record.