Consent Management Policy

Vape Superstore is committed to complying with the General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR) by ensuring that consent is obtained, managed, and documented correctly for all marketing activities. This Consent Management Policy outlines the processes we use to manage customer consent for marketing communications and how customers can manage their preferences.

Purpose

The purpose of this policy is to ensure that Vape Superstore obtains, records, and manages consent in a clear, transparent, and legally compliant manner for all marketing activities.

Obtaining Consent

We obtain consent for marketing communications through the following methods:

• Opt-in Boxes: We use clear, affirmative opt-in mechanisms (e.g., checkboxes) where customers can provide explicit consent for marketing communications.
• Subscription Forms: When customers sign up for our newsletters or promotions, they are asked to consent to receiving marketing materials.
• Purchase Consent: Customers may consent to receive marketing communications at the time of purchase by opting in through a checkbox or during the checkout process.

Managing and Recording Consent

Vape Superstore ensures that consent is properly documented and that we maintain an accurate record of when, how, and what customers have consented to. This includes:

• Timestamping: Each consent is timestamped to show when consent was obtained.
• Clear Documentation: We record the source of consent (e.g., website form, purchase process) and the specific marketing activities consented to.
• Granular Consent: We seek granular consent, allowing customers to opt in for specific marketing channels (e.g., email, SMS, post).

Withdrawing Consent

Customers can withdraw their consent at any time by:

• Clicking the "unsubscribe" link in email communications.
• Replying to SMS messages with "STOP" to opt out.
• Contacting customer service to request removal from marketing lists.

Retention of Consent Records

Consent records are retained for as long as the individual remains subscribed to our marketing lists. If a customer unsubscribes, their consent record is archived to ensure compliance with data retention laws.

Conclusion

At Vape Superstore, we take our customers' privacy and consent seriously. By following this Consent Management Policy, we ensure that we respect our customers' preferences and comply with GDPR and PECR regulations regarding marketing communications.