Privacy Policy

​

​

Last Updated: June 2026

​

Welcome to The Smoke Laboratory. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, register an account, or purchase our premium lifestyle accessories and herbal smoking blends.

Please read this policy carefully to understand our practices regarding your personal data. By using our website, you agree to the collection and use of information in accordance with this policy.

 

 

1. The Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR), the data controller is The Smoke Laboratory. If you have any questions about this Privacy Policy or how we handle your data, please contact our data protection team at: thesmokelab@outlook.com.

 

 

2. The Information We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity Data: Includes your first name, maiden name, last name, username or similar identifier, and date of birth (required for mandatory legal age verification).

• Contact Data: Includes your billing address, delivery address, email address, and telephone numbers.

• Financial Data: Includes bank account and payment card details (processed securely by our third-party payment gateways; we do not store raw card numbers).

• Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.

• Technical & Usage Data: Includes your internet protocol (IP) address, login data, browser type, time zone setting, operating system, and information about how you use our website.

 

 

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

• Direct Interactions: You give us your Identity, Contact, and Financial Data by filling in forms, creating an account, or purchasing products on our site.

• Automated Technologies: As you interact with our website, we may automatically collect Technical and Usage Data through cookies and server logs.

• Third Parties: We receive personal data from various third parties, including our mandatory automated age-verification providers and high-risk merchant payment processors.

 

 

4. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

 

Purpose / ActivityType of DataLawful Basis for Processing

To register you as a new customerIdentity & ContactPerformance of a contract with you

To process and deliver your order, including managing paymentsIdentity, Contact, Financial & TransactionPerformance of a contract; Necessary for our legitimate interests

To verify you are 18 or older before dispatching goodsIdentity & ContactCompliance with a legal obligation (Children and Families Act 2014)

To manage our relationship with you (e.g., notifying you of changes to our terms)Identity, Contact & ProfilePerformance of a contract; Compliance with a legal obligation

To administer and protect our business and website (including troubleshooting and data analysis)Technical & UsageNecessary for our legitimate interests (running our business, securing our IT network)

 

 

5. Sharing Your Personal Data

We do not sell your personal data to third parties. However, to operate legally and efficiently, we must share your data with trusted third-party service providers, including:

• Age Verification Providers: To comply with UK statutory laws, your identity and date of birth are shared with automated age-verification services (e.g., AgeChecked or VerifyMyAge) to confirm you are 18+.

• Payment Gateways: Your Financial Data is securely transmitted directly to our high-risk payment merchant processors (e.g., Square or Viva Wallet) using industry-standard encryption.

• Delivery and Logistics Partners: Your Contact Data is shared with courier services (e.g., Royal Mail, DPD) to fulfill your delivery. All orders are packed in discreet, plain, unbranded packaging to protect your privacy.

• Professional Advisors: Including lawyers, auditors, and insurers where necessary.

• Law Enforcement: We may disclose your data if legally required to do so by UK law enforcement or regulatory authorities.

 

 

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and third parties who have a business need to know.

 

 

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For tax and transaction auditing purposes, we are legally required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers.

 

 

8. Your Legal Rights

Under the UK GDPR, you have comprehensive rights in relation to your personal data, including the right to:

• Request access to your personal data (a "data subject access request").

• Request correction or erasure of your personal data.

• Object to or request the restriction of processing your personal data.

• Request the transfer of your personal data to you or a third party.

• Withdraw consent at any time where we are relying on consent to process your data.

If you wish to exercise any of these rights, please contact us at our designated business email address. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

 

 

9. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or fail to function properly.

 

 

​

 

​