Privacy policy

This policy explains how snus & pouches (snusandpouches.co.uk) collects and uses personal data. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, in plain English. We collect the data needed to sell and deliver nicotine pouches to adults in the UK, we do not sell it, and you can ask to see or delete it at any time.

Who is responsible

snus & pouches is the data controller for the data described here. Questions, requests and complaints about data go to [email protected]. You can also use the contact page.

What we collect and why

Data	Why we need it	Legal basis
Name, delivery address, email, phone	To take your order, deliver it and tell you where it is	Contract
Date of birth and age verification result	To confirm you are 18 or over before we sell you nicotine	Legal obligation
Payment details	To take payment. Card numbers are handled by our payment provider, not stored by us	Contract
Order history	To show your account, process returns and run the rewards scheme	Contract
Messages you send us	To answer your question and keep a record of it	Legitimate interest
Device and browsing data (pages visited, browser, rough location)	To keep the site working, stop fraud and understand which pages are useful	Legitimate interest, or consent for optional cookies
Marketing preferences	To send offers by email only if you have opted in	Consent

Age verification

Nicotine pouches may only be sold to adults aged 18 and over. When you place an order we check your age against the details you give us using a third party age verification service. The service receives your name, address and date of birth and returns a pass or a fail. If a check fails we may ask for a copy of photo ID before dispatch, which is deleted once the check is complete. A courier may also ask for ID on delivery. We keep the result of the check, not the documents, for as long as your account exists.

Cookies

Essential cookies keep you logged in, remember your basket and let the checkout work. Optional cookies for analytics and marketing are only set if you accept them on the cookie banner, and you can change your mind at any time from the cookie settings link in the footer. We use analytics to see which guides and which pages on the nicotine pouches hub people read. Analytics data is aggregated and does not identify you.

Who we share data with

• Delivery companies, including Royal Mail, receive your name, address and phone number so they can deliver and send tracking updates.
• Our payment provider processes your card details under its own security standards.
• The age verification service, described above.
• The independent review platform receives your email address and order reference after delivery so it can invite you to leave a review. See the reviews page.
• Our email provider, if you have opted in to marketing.
• Law enforcement or regulators, if we are legally required to.

Each of these processes data on our instructions under a written contract. We do not sell personal data, and we do not share it with advertisers for their own use.

How long we keep it

Order records are kept for six years after the order to meet tax and consumer law requirements. Account data is kept while the account is active and deleted 12 months after the last login or order. Messages to customer service are kept for two years. Age verification results are kept while the account exists. Marketing data is deleted as soon as you unsubscribe.

Your rights

Under UK GDPR you can ask us to:

• tell you what data we hold about you and give you a copy (a subject access request);
• correct anything that is wrong;
• delete your data, where we are not required by law to keep it;
• stop using your data for marketing, at any time, by clicking unsubscribe or emailing us;
• restrict or object to other processing, or receive your data in a portable format.

Email [email protected] with "Data request" in the subject line. We respond within one month.

If you are not happy with how we have handled your data you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Security

Data is transmitted over encrypted connections and stored on systems with access limited to staff who need it. Card details never touch our servers. If a breach puts your data at risk we will tell you and the ICO as the law requires.

Children

This site is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has placed an order, email us and we will cancel it and remove the data.

Changes to this policy

We update this policy when the law or our practices change; the date at the top shows the last revision. This policy should be read alongside our terms and conditions.