Cookies & Privacy Policy

This Cookies and Privacy Policy ("Policy") explains how The Puff & The Pound (operated by Zagran Ltd) collects, uses, discloses, and protects your personal information when you visit VappyHour.com (the "Website"). This Policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

When you visit our Website, we may collect the following information:

• Personal identification information (such as your name and email address) if you voluntarily submit it via email;
• Technical information (including your IP address, browser type, device type, operating system, and browsing behaviour) collected automatically via cookies and similar technologies;
• Information about your interactions with content and advertisements on the Website.

Cookies are small text files placed on your device when you visit our Website. We use cookies for the following purposes:

• Essential cookies: These are necessary for the Website to function properly (e.g., maintaining your session).
• Analytics cookies: We use tools like Google Analytics to understand how visitors use our site, helping us improve content and user experience.
• Advertising cookies: Used to deliver relevant advertisements and measure their effectiveness.
• Functionality cookies: Remember your preferences (such as language or region) to enhance your experience.

You can manage or disable cookies via your browser settings. However, disabling essential cookies may affect the functionality of the Website.

We may use your personal information for the following lawful purposes:

• To provide and maintain the Website and its services;
• To respond to your inquiries and provide customer support;
• To send you updates about industry news, insights, and exclusive deals (if you have subscribed);
• To improve our Website and tailor content to your interests;
• To comply with legal obligations and protect the security of our Website.

Under UK GDPR, we process your personal data based on one or more of the following legal bases:

• Your consent (e.g., when you subscribe to our newsletter);
• Contractual necessity (e.g., to fulfil a service you have requested);
• Legitimate interests (e.g., website analytics, fraud prevention), provided these do not override your rights and freedoms.

We do not sell your personal information. We may share your data only with:

• Trusted third‑party service providers (such as web hosting, email delivery, and analytics platforms) who process data on our behalf under strict confidentiality agreements;
• Regulatory authorities, where required by law.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Secure socket layer (SSL) encryption for data transmission;
• Regular security audits and vulnerability assessments;
• Restricted access to personal data within our organisation;
• Data backup procedures to prevent loss;
• Employee training on data protection and security best practices.

Under UK GDPR, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data (subject to certain conditions);
• Restrict or object to processing in certain circumstances;
• Withdraw consent at any time (where processing is based on consent);
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

To exercise any of these rights, please contact us at hello@vappyhour.com. We will respond to your request within 30 days.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• For as long as you maintain an active account with us;
• To comply with legal, tax, or accounting requirements;
• To defend or pursue legal claims (up to 6 years in the UK).

When we no longer need your data, we will securely delete or anonymise it.

Our Website is not intended for children under 18. We do not knowingly collect personal information from children under this age. If you believe we have inadvertently collected such data, please contact us immediately so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The "Last Updated" date at the bottom of this page will indicate when the latest changes were made. We encourage you to review this Policy periodically.

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact:

Data Protection Officer: For data protection inquiries, please contact our DPO at dpo@zagran.co.uk.