Privacy Policy
This policy explains what personal data we collect when you use eluxsalt.uk, why we hold it, and what you can do about it.
Last updated: 15 September 2026
1. Who is responsible for your data
Elux Salt UK is a trading name of Love Vaping Ltd, registered in England & Wales under company number 11308158. VAT registration GB295311204. Registered office: 86–90 Paul Street, London, EC2A 4NE. Trading address: Unit 11–15, Fylde Road Industrial Estate, Fylde Road, Preston, PR1 2TY.
For data protection purposes the controller is Love Vaping Ltd. Data protection enquiries: support@eluxsalt.uk.
2. What we collect
- Order data — your name, billing and delivery address, email address, phone number, and what you ordered.
- Your 18+ declaration — the confirmation you give at checkout, with the date and time you gave it.
- Account data — if you create an account: your name, email address, date of birth, password (stored only as a secure hash), order history, and whether you have asked for our newsletter.
- Payment data — handled by our payment provider, Viva Wallet. We receive confirmation that a payment succeeded and limited card details such as the last four digits; we never see or store your full card number.
- Technical and security data — your IP address, browser type and the pages you request, recorded in our server logs, and a record of failed sign-in attempts, which we use to block attacks on the site.
- Analytics data, only if you accept analytics — through Google Analytics, the pages you view, how you reached us, your device, browser and approximate location, and what you add to your basket and buy; and through Microsoft Clarity, recordings of how pages are scrolled, tapped and clicked. Clarity never records what you type into forms, and it hides numbers and email addresses shown on the page.
3. Why we hold it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Taking, delivering and supporting your order | Performance of a contract |
| Running your account, if you create one | Performance of a contract |
| Meeting age-restriction and tax obligations | Legal obligation |
| Newsletter email, only if you ask for it | Consent, which you can withdraw at any time |
| Understanding how the site is used, only if you accept analytics | Consent, which you can withdraw at any time |
| Keeping the site secure and preventing fraud | Legitimate interests |
| Answering your enquiries | Legitimate interests |
4. Who we share it with
We do not sell your data. We share it only with organisations that need it to run the shop: Royal Mail, to deliver your order; Viva Wallet, to take payment; the service that sends our order emails; and Amazon Web Services, which hosts this website in London. Each acts on our instructions under contract. If you accept analytics, analytics data also goes to Google (Google Analytics) and Microsoft (Clarity) under their terms for those services. We may also disclose data where the law requires it.
5. How long we keep it
Order records are kept for six years, because HMRC requires it. Account data is kept until you ask us to close your account. Newsletter consent is kept until you withdraw it. Server and security logs are deleted after no more than 30 days.
If you accept analytics, Google Analytics keeps its data for 14 months. Microsoft Clarity keeps recordings for 30 days, and a small sample of recordings and heatmap data for up to 9 months.
6. Your rights
Under UK data protection law you have the right to a copy of your data, to have inaccurate data corrected, to have data erased where we have no continuing need to hold it, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email support@eluxsalt.uk. We will respond within one month.
Withdrawing newsletter consent does not stop the emails you need about an order you have placed.
7. Cookies and similar storage
Some cookies and browser storage are needed for the site to work, and are always on:
- Basket and session cookies, which keep your basket and your sign-in working.
- Your age confirmation, stored in your browser for 30 days so you are not asked on every visit.
- Your cookie choice, stored for a year so we remember your answer.
Analytics are optional, and off until you choose. If you press “Accept analytics” on the cookie banner, we use:
- Google Analytics, to count visits and see which pages and products people use. It sets cookies whose names begin
_ga, which last up to two years. - Microsoft Clarity, which records how pages are used and builds heatmaps, so we can find pages that are confusing or broken. It sets cookies named
_clckand_clskon this site, and Microsoft may also set its own cookies from its domains.
If you press “Essential only”, neither is loaded and nothing is sent to Google or Microsoft. You can change your mind at any time with the Cookie settings link at the bottom of every page; if you withdraw your consent, the analytics cookies already set are deleted. We do not use advertising cookies.
8. Security
The site is served entirely over HTTPS. Card payments are handled by Viva Wallet, and card numbers never reach our servers. Access to customer data is limited to the people who need it to run the shop.
9. International transfers
This website is hosted in the UK. If you accept analytics, Google and Microsoft may process analytics data outside the UK. Wherever a provider we use processes data outside the UK, it does so under safeguards recognised by UK data protection law.
10. Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
If we change this policy, we will update the date at the top of this page.