Privacy Policy

This Privacy Policy governs the manner in which Zagran Ltd, trading as Vapour.House (Website address: https://vapour.house), collects, uses, maintains, and discloses information collected from users (each, a “User“) of the website. We are steadfastly committed to ensuring the protection of your digital privacy.

The Data Controller responsible for your personal information is:

• Entity: Zagran Ltd, a company registered in England.
• Company Number: 16334360.
• Registered Office: 82a James Carter Road, Mildenhall, West Suffolk, England, Great Britain, IP28 7DE.

We collect various data to provide and enhance our Service. The types and purposes of collection are detailed below:

• Comments and Communication Data: When visitors submit comments on our website, we formally record the data displayed in the comments form, the visitor’s IP address, and the browser user agent string. This is strictly for the legitimate purpose of facilitating automated spam detection and site security.
  
  An anonymised string (a hash) derived from your email address may be furnished to the Gravatar service to verify its usage. Upon approval, your profile picture will be publicly visible alongside your comment. The Gravatar service’s privacy policy applies to their processing.
  
• Media/Image Data: Should you choose to upload images to the website, we advise that you scrupulously avoid uploading images that contain embedded location data (EXIF GPS). Any such location data can potentially be downloaded and extracted by other visitors to the website.
• Account Registration Data: For users who formally register on our website (if applicable), we retain the personal information they furnish in their user profile, including but not limited to name and email address.

Articles published on Vapour.House may incorporate embedded content from other digital platforms, such as videos, images, or articles. Embedded content operates precisely as if the visitor had navigated directly to the originating third-party website.

• These external websites may independently collect data pertaining to you, utilise their own cookies, embed supplementary third-party tracking mechanisms, and monitor your interaction with their content.
• This tracking includes monitoring your interaction with the embedded material if you possess an account with that third party and are logged into their service whilst viewing our website.

We do not share your personal data with third parties except in the limited circumstances outlined below:

• Spam Detection: Visitor comments are processed via an automated spam detection service for security and operational integrity.
• Security Requests (Password Reset): Should you formally request a password reset, your IP address will be securely included within the communication dispatched to you for verification purposes.
• Legal Obligations: We will disclose your Personal Data where necessitated by law, such as to comply with a subpoena or other legal process under UK jurisdiction, or when we believe in good faith that disclosure is necessary to protect our rights or the safety of others.

We retain your personal data only for as long as is strictly necessary for the purposes set out in this policy, and to meet our administrative, legal, or security obligations:

• Comments: If you leave a comment, both the comment and its associated metadata are retained indefinitely. This is a deliberate measure to enable us to recognise and approve any subsequent follow-up comments automatically, thereby enhancing user experience and avoiding undue delay in the moderation queue.
• User Accounts: For registered users, we store their provided personal information for the duration of their account activity.

As a data subject under UK GDPR, you maintain robust rights regarding the personal data we hold about you:

• Right of Access: You are entitled to formally request an exported file of the personal data we hold about you.
• Right to Rectification and Erasure: You can see, edit, or formally request the deletion of the personal information we hold. This right to erasure does not extend to any data we are legally obliged to retain for administrative, legal, or stringent security purposes.
• Data Modification: All registered users have the ability to review and modify their personal information at any time (with the exception of their chosen username). Website administrators are also duly authorised to view and edit this information.

This policy is governed by the laws of the United Kingdom.
Policy Last Updated: [2025-01-19]