Legal

Privacy Policy

Last updated: 23 July 2026

This policy explains how POUCHUP collects, uses and protects your personal data when you visit our website or place an order. We handle your information in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who we are

POUCHUP is a trading name of REDPXL TRADING LTD, a company registered in England and Wales (company number 16454649), registered office 7.16 77 Marsh Wall, Canary Wharf, London, England, E14 9SH. In this policy “we”, “us” and “POUCHUP” refer to that company.

We are the data controller for the personal data described below. Our data protection contact is yo@pouchup.co.

2. What data we collect

We collect only what we need to run the shop and fulfil your order:

Order details — the products you buy, order value and order history.
Contact & delivery details — your name, email address and delivery address.
Payment information — handled directly by our payment provider, Viva.com. We do not see or store your full card details.
Age confirmation — the fact that you have confirmed you are of legal purchase age (18 in the UK, 21 in the US). Age is confirmed by self-declaration; we do not use a third-party age-verification service.
How you found us — if you arrive from a link with campaign tags (such as UTM parameters), we record that source against your visit and order so we know which marketing works.
Messages you send us — if you use the contact form or email us, we keep the message and your email address so we can reply.
Newsletter address — if you sign up to the newsletter, your email address and where on the site you signed up.
Usage & device data — basic analytics about how the site is used, collected only with your consent (see our Cookie Policy).

3. How we use it, and our lawful basis

Under the UK GDPR we rely on the following lawful bases:

To fulfil your order (performance of a contract) — taking payment, dispatching goods and providing support.
To meet legal obligations — including age-restricted sales rules, tax and accounting records.
With your consent — optional analytics cookies and, if you opt in, marketing emails. You can withdraw consent at any time.
Our legitimate interests — keeping the site secure and preventing fraud, balanced against your rights.

4. Cookies

We use cookies and similar technologies. Essential cookies keep the site working; analytics cookies are only set with your consent. Full detail is in our Cookie Policy.

5. Who we share it with

We share personal data only with the providers we need to run the shop and complete your order, and only what they need:

Payment processing — Viva.com, who process your payment; the charge is made in pounds sterling.
Delivery — Royal Mail, who receive your name and delivery address to deliver your parcel.
Email — Brevo, used to send order confirmations, shipping updates and refund notices.
Analytics — Google (Google Analytics 4) and Microsoft (Clarity), only where you have consented.
Advertising analytics — Snap Inc. (the Snap Pixel), only where you have consented; receives site events such as product views and purchases, carrying product identifiers and GBP amounts. We do not send Snap your email address, phone number or any other contact details, in plain or hashed form.
Database hosting — MongoDB Atlas, where our shop data (orders, products, messages) is stored.
Site hosting — Vercel, which serves the website.

We do not sell your personal data. We may disclose data where required by law.

6. How long we keep it

We keep order and transaction records for as long as legally required (typically six years for order and tax records) to meet tax and accounting obligations. Other data is kept no longer than necessary for the purpose it was collected for.

We haven’t sent marketing email yet. When we do, every email will include an unsubscribe link, and you can ask us to remove your address at any time at yo@pouchup.co.

7. Your rights

You have the right to:

access the personal data we hold about you;
ask us to correct inaccurate data;
ask us to delete your data, where we have no ongoing lawful reason to keep it;
object to or restrict certain processing;
request a copy of your data in a portable format;
withdraw consent at any time, without affecting processing already carried out.

To exercise any of these, contact us using the details below.

8. Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Age of our customers

POUCHUP sells age-restricted nicotine products and is intended for adults of legal purchase age — 18 and over in the UK, 21 and over in the US. We do not knowingly collect data from anyone under the legal purchase age. See our Age Policy.