This privacy policy explains how The Vapour Hut (operated by Lenik Ltd, a company registered in the United Kingdom) collects, uses and protects information about people who visit thevapourhut.com. It is written for UK readers under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We’ve tried to keep it short, plain, and honest. If anything is unclear, please email us at [email protected].

Last updated: 14 May 2026.

The Vapour Hut is an independent UK vaping news, reviews and guides publication. The site is run by Lenik Ltd. We do not sell vaping products — we write about them.

For the purposes of UK GDPR, Lenik Ltd is the data controller for personal data collected through this site. Our contact details are at the bottom of this page.

We collect the minimum amount of personal data we need to run the site and reply to people who contact us.

1. Data you give us directly — when you submit our contact form, we collect the name, email address, subject line, and message you choose to send us. Nothing more.

2. Technical data from your visit — when you load a page we automatically record limited technical information: your IP address, the page you requested, the page you came from (referer), and your browser’s user-agent string. This is normal web-server logging and is the same data essentially every website on the internet receives.

3. Cookies set by us — see the “Cookies” section below.

We do not ask you to create an account. We do not collect payment information. We do not sell or rent your personal data to anyone.

Under UK GDPR every use of personal data needs a lawful basis. Ours are:

Contact form submissions — lawful basis: legitimate interests (responding to people who contact us) and your consent implied by submitting the form. We use the data only to reply to your enquiry.

Server logs (IP, referer, user-agent) — lawful basis: legitimate interests (security, abuse prevention, debugging). Logs are retained for up to 30 days then rotated.

Cookies / analytics — lawful basis: consent for any non-essential cookies. Essential cookies (those needed to make the site work) are set under legitimate interests.

The Vapour Hut uses a minimal set of cookies. We do not run third-party advertising cookies and we do not embed social-media tracking pixels.

Essential cookies are set by our content delivery network (Cloudflare) to protect against bots and abuse. These cookies are required for the site to work safely. They do not identify you personally.

If we add optional analytics in future (for example to count anonymised page visits), we will ask you to consent first via a cookie banner. You can withdraw consent at any time by clearing your browser cookies for this domain.

We share data with a small number of trusted service providers to run the site. Each handles data under its own privacy policy:

Cloudflare, Inc. — content delivery network and security layer. Receives every HTTP request to the site so it can serve content quickly and block bad traffic. See cloudflare.com/privacypolicy.

Hetzner Online GmbH — hosts the server the site runs on (EU/Germany). See hetzner.com/legal/privacy-policy.

Lenik Postal (self-hosted) — the mail server we use to send and receive email from [email protected]. Operated by us on Hetzner infrastructure.

If we add other services (newsletter platforms, comments systems, etc.), we will update this policy and obtain consent where required.

Contact form messages: we keep the message and your email address for as long as we need to deal with your enquiry, and for up to 2 years afterwards in case you contact us again about the same topic. After that we delete or anonymise.

Server logs: rotated and overwritten within 30 days.

Backups: our encrypted server backups roll on a 7-daily / 4-weekly / 12-monthly cycle. Anything still inside that window may exist in backup form for up to 12 months even after we delete it from the live site.

You have the right to:

Access — ask us what personal data we hold about you.

Rectification — ask us to correct information that is wrong or incomplete.

Erasure — ask us to delete personal data we hold about you, where there is no overriding reason to keep it.

Restriction — ask us to stop processing your data while a query is resolved.

Objection — object to our processing on the basis of legitimate interests.

Portability — receive a copy of data you have provided to us in a machine-readable format.

Complaint — complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you think we have mishandled your data.

The easiest way to exercise any of these rights is to email us at [email protected] with the subject line “Privacy request”. We will acknowledge your request within 5 working days and respond fully within one month, in line with UK GDPR.

We may need to verify your identity before acting on certain requests. We will explain what we need at the time.

The Vapour Hut covers products intended for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us in error, please email [email protected] and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be flagged on the site itself. Continued use of the site after a change means you accept the updated policy.

The Vapour Hut
Operated by Lenik Ltd
United Kingdom

Email: [email protected]

For general enquiries please use our contact form. For privacy-specific requests, please email directly with the subject line “Privacy request” so we can route it correctly.