Privacy Policy
Last updated: October 2026
This page explains what information Phone & Vape Galaxy collects through this website and loyalty card, why we collect it, and the choices you have.
Who we are
Phone & Vape Galaxy, 22 Church Road, Welwyn Garden City, AL8 6PS, United Kingdom. For any privacy question, message us on WhatsApp or ask in store.
What we collect
- Your loyalty account: username, phone number and password. Passwords are stored encrypted, so nobody, including our staff, can read them.
- Things you choose to add: display name, profile photo and birthday.
- Loyalty activity: your stamps, rewards claimed, wishlist and online order history.
- Online orders: the items, total and delivery details you give at checkout. Card payments are handled by Stripe. Your card details go straight to Stripe and never reach our website.
- Shop statistics: anonymous counts of page visits and which perfumes are viewed, used to see what is popular.
Why we use it
- To run your loyalty card and give you rewards.
- To process and deliver online orders.
- To help you if you forget your password (we check your username and phone number).
- To send occasional offers on WhatsApp to customers who have a loyalty account. Tell us any time if you would rather not receive these.
Cookies and storage on your device
| Name | What it does | Needed? |
|---|---|---|
| Sign-in cookie | Keeps you logged in to your loyalty account for up to 30 days. | Essential |
| Basket, wishlist, recently viewed | Saved in your browser so your basket is still there when you come back. | Essential |
| Cookie choice | Remembers whether you accepted analytics. | Essential |
| Google Analytics | Helps us understand how people use the site. Only switched on if you press Accept. | Optional |
You can change your mind about analytics at any time.
Who we share it with
We do not sell your information. We use these services to run the website: Render (website hosting), MongoDB Atlas (database), Stripe (card payments), Cloudinary (photos) and Google Analytics (only if you accept). Some of these services may store data outside the UK, under their own data protection safeguards.
How long we keep it
We keep your loyalty account until you delete it. Order records may be kept longer where the law requires us to keep sales records.
Your rights
Under UK data protection law you can ask to see the information we hold about you, ask us to correct it, or ask us to delete it. You can delete your own account at any time from your loyalty dashboard under Account Settings. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).