Transparent data governance, cryptographic checkout security, DDP customs manifest handling, and statutory GDPR privacy rights for ZUKVAPE wholesale partners and adult (18+) buyers across Europe and international markets.
All transactions settle via PCI-DSS encrypted payment gateways. ZUKVAPE never stores raw card numbers or CVV codes.
EU GDPR ALIGNED
Strict Data Minimization
We capture only essential consignee coordinates, EU VAT/EORI details, and order telemetry required for fulfillment.
ZERO BROKERAGE
No Data Monetization
Your wholesale purchasing history and contact records are never sold, rented, or traded to third-party ad brokers.
FULL AUTONOMY
Statutory Subject Rights
Exercise your GDPR right to access, rectify, export, or erase your buyer account records within 30 calendar days.
ARTICLE 01 • DATA INVENTORY
MINIMIZATION PROTOCOL
1. Personal & Commercial Data We Collect
ZUKVAPE operates a dual-channel distribution platform serving European B2B wholesale accounts and adult (18+) retail buyers. We practice strict data minimization—collecting only the specific records necessary to verify legal age, calculate volume discounts, and dispatch orders.
Account & Consignee Coordinates
When you register a wholesale account or complete checkout, we record your recipient name, business entity title, EU VAT/EORI registration (for commercial B2B accounts), physical delivery address, email address, and mobile/WhatsApp number required by couriers for local delivery notifications.
Order & Technical Telemetry
We log your selected product SKUs, puff/nicotine specifications, order timestamps, payment gateway verification tokens, and basic device telemetry (IP address, browser user-agent, and regional locale) to calculate real-time shipping rates and prevent automated checkout abuse.
ARTICLE 02 • LAWFUL PROCESSING
GDPR ARTICLE 6 BASIS
2. How We Use Your Data & Legal Bases
Every data processing activity across ZUKVAPE.com is anchored to an explicit statutory basis under Article 6(1) of the European Union General Data Protection Regulation (GDPR):
CONTRACTUAL EXECUTION
GDPR Art. 6(1)(b)
Order Fulfillment & DDP Clearance
We process your shipping coordinates and SKU manifest to allocate stock between our local EU warehouses and primary factory hub, generate commercial invoices, and complete prepaid DDP customs declarations.
Dual-Hub Fulfillment Operations
STATUTORY & LEGITIMATE INTEREST
GDPR Art. 6(1)(c)/(f)
Regulatory & Security Compliance
We process verification records to enforce 18+ age-gating mandates under EU TPD regulations, maintain statutory tax accounting ledgers, validate 48-hour DOA warranty claims, and safeguard our platform against fraud.
TPD & Fiscal Audit Governance
ARTICLE 03 • CRYPTOGRAPHIC SECURITY
ZERO-TRUST ARCHITECTURE
3. Payment Isolation & Infrastructure Security
We deploy enterprise-grade security controls to protect wholesale and retail buyer data against unauthorized access, alteration, or disclosure.
End-to-End TLS 1.3 Transport & Server Hardening
All connections to ZUKVAPE.com are encrypted via 256-bit TLS 1.3 with HTTP Strict Transport Security (HSTS), role-restricted database isolation, and automated firewall defense.
Zero Raw Card Retention
Checkout payments are processed through PCI-DSS Level 1 certified gateways. ZUKVAPE never views, processes, or stores your full credit card number, CVV security code, or private banking credentials.
Ephemeral Claim Media Purge
When unboxing videos, photos, or verification documents are submitted for RMA claims or compliance checks, files are restricted to authorized personnel and purged within 30 days of ticket closure.
ARTICLE 04 • SUB-PROCESSOR DISCLOSURES
NO DATA MONETIZATION
4. Logistics Partners & Cross-Border Transfers
ZUKVAPE strictly prohibits selling, leasing, or trading customer information to marketing brokers. Data is disclosed solely to operational sub-processors bound by strict confidentiality:
Carrier & DDP Customs Network
To deliver your parcel and clear import duties under our 100% DDP service, your recipient name, shipping address, and contact number are transmitted to assigned carriers (DHL, DPD, UPS, and local postal services) and licensed customs clearance agents.
Cross-Border Transfer Safeguards
When orders ship directly from our primary manufacturing hub or require international technical support, data transfers outside the European Economic Area (EEA) are governed by EU Standard Contractual Clauses (SCCs) and strict data minimization.
ARTICLE 05 • COOKIES & TELEMETRY
SESSION GOVERNANCE
5. Cookie Architecture & Session Storage
We utilize lightweight, first-party browser cookies and local storage to maintain wholesale cart accuracy without invasive cross-site behavioral tracking.
Essential WooCommerce Cookies
Strictly necessary session tokens (such as woocommerce_cart_hash, woocommerce_items_in_cart, and age-gate confirmation flags) preserve your multi-flavor SKU selections and automated 10+ unit volume discounts while navigating.
Anonymized Analytics & Controls
We use aggregated, IP-masked telemetry to monitor page performance and regional EU warehouse demand. You can manage, block, or clear cookies at any time directly through your browser security preferences.
Technical Notice: Blocking Essential Cart Cookies
Please note that completely disabling strictly necessary first-party cookies in your browser will prevent our checkout engine from retaining items in your cart, authenticating your wholesale account session, or applying tiered B2B pricing.
ARTICLE 06 • GDPR SUBJECT RIGHTS
BUYER AUTONOMY
6. Your Privacy Rights & Retention Schedule
Under EU/UK GDPR (Articles 15–22) and applicable international data protection statutes, you maintain full control over your personal and commercial records:
Access, Correction & Portability
You may request a complete copy of the personal data we hold about your account in a structured format, rectify outdated company or delivery details, or object to non-essential processing at zero cost.
Right to Erasure & Retention Limits
You may request permanent deletion of your ZUKVAPE account profile at any time. Commercial invoices and customs ledger entries are retained only for the mandatory statutory tax audit period (typically 7 years) before automated purging.
Fast-Track DSAR Verification Protocol
To protect your account against unauthorized third-party social engineering, please submit Data Subject Access or Erasure requests from the registered email address associated with your ZUKVAPE orders. Verified requests are fulfilled within 72 hours to 30 calendar days.
ARTICLE 07 • PRIVACY CONCIERGE
DIRECT COMPLIANCE DESK
7. Policy Updates & Privacy Contact
We review this Privacy Policy periodically to align with updates in European vaping directives, customs workflows, and security standards. To exercise your data rights or inquire about our privacy practices, contact our dedicated team:
Privacy & Compliance Desk
Submit DSAR, data export, or account erasure requests with your registered email
