Privacy policy

This policy explains how we process your personal data when you visit whitecvapes.com or buy from us, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

Controller. High-End Performance Solutions, S.L. (White Cloud Vapes) · tax ID B22804298 · C/ San Vicente Mártir 51, bajo F, 46002 València · pedidos@whitecvapes.com · +34 695 569 956.

What we process and why. Orders: name, address, phone, email and order details, to prepare and ship your purchase, invoice it, handle returns and warranty and meet tax obligations (legal basis: contract and legal obligation). Customer account: the data you register to manage your orders (contract). Enquiries: the data you send by email or WhatsApp so we can reply (legitimate interest); WhatsApp conversations run through WhatsApp Business (Meta Platforms Ireland) under its own privacy terms. Age check: your confirmation that you are over 18 is stored in a technical cookie; we store nothing else about it (legal obligation). Virtual assistant: what you type in the website assistant is sent, only to generate the answer, to our artificial-intelligence provider Anthropic (Anthropic, PBC, United States), acting as our processor. This is an international data transfer covered by the European Commission standard contractual clauses included in its data processing agreement. We do not keep the conversations; Anthropic deletes them within 30 days, unless it detects use contrary to its policies, in which case it may keep them for up to 2 years; it is an automated system, not a person, as shown on screen; do not use it to share health or payment data or data about other people (legitimate interest). Marketing communications: only with your consent, which you can withdraw at any time.

Who we share data with. The courier to deliver your order, the bank or payment gateway to charge it, our hosting and email providers and Anthropic, the AI assistant provider (processors) and public authorities when the law requires. We never sell or transfer your data for marketing.

Retention. Order and invoice data for the periods required by tax and commercial law (generally 6 years); account data while your account is active; enquiries until resolved; assistant conversations up to 30 days.

Your rights. Access, rectification, erasure, objection, restriction and portability, by writing to pedidos@whitecvapes.com with a copy of your ID. If you believe we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security. The site runs over HTTPS and we apply technical and organisational measures to protect your data. We do not store card data: payment takes place at the bank’s gateway.