1. Introduction
Welcome to 3DevicesCCELL. We respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how 3Devices Ltd, trading as 3DevicesCCELL, collects, uses, stores, shares and protects personal data when you visit our website, purchase products, create an account, contact us or otherwise interact with our business.
Our website, https://3devicesccell.co.uk/, offers CCELL vaporisation hardware, cartridges, all-in-one devices, pod systems, batteries and related products and services, including wholesale supply and business enquiries.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended.
By using our website, you acknowledge that you have been provided with this Privacy Policy. Where consent is required for particular processing activities, we will request it separately.
2. Who We Are
For the purposes of UK data protection law, the organisation responsible for determining how and why your personal data is processed is:
Legal business name: 3Devices Ltd
Trading name: 3DevicesCCELL
Company registration number: 13034602
VAT registration number: 420996581
Registered office: Hamill House, 112-116 Chorley New Road, Bolton, England, BL1 4DH
Website: https://3devicesccell.co.uk/
Privacy contact: info@3devicesccell.co.uk
3DevicesCCELL was previously known as WeAreCCELLSupplies.
If you have questions about this Privacy Policy or how we use your personal information, please contact us using the details above.
3. Personal Information We Collect
We may collect different categories of personal information depending on how you interact with our website.
3.1 Identity and contact information
This may include:
- Full name
- Business or company name
- Billing and delivery addresses
- Email address
- Telephone number
- Job title or business role
- Country or region
- Information supplied through enquiry forms
3.2 Account information
If you register an account, we may collect your username, email address, account preferences, saved addresses and order history.
Passwords are managed through our website's authentication system. We do not require you to disclose your password to customer support representatives.
3.3 Transaction and order information
When you place an order, request a quotation or purchase products, we may process:
- Products selected or purchased
- Order numbers and transaction references
- Billing and delivery information
- Payment status and payment method
- Order values and applicable taxes
- Shipping and fulfilment details
- Refunds, returns and customer service records
- Relevant correspondence relating to your purchase
Payments may be handled by authorised third-party payment service providers. We do not intentionally store complete payment card numbers or card security codes on our own website.
3.4 Technical and usage information
When you visit the website, our servers and permitted third-party services may collect:
- Internet Protocol (IP) address
- Browser type and version
- Operating system and device information
- Approximate geographical location derived from IP address
- Pages visited and navigation activity
- Website referral sources
- Date and time of visits
- Error reports and security-related events
- Cookie and similar technology identifiers
3.5 Marketing and communication information
Where applicable, we may collect:
- Newsletter subscription preferences
- Marketing permissions
- Communications with customer support
- Email subscription and unsubscribe records
- Feedback, reviews and survey responses
- Records of previous business enquiries
3.6 Wholesale and trade enquiries
For business customers, we may additionally collect information needed to assess and manage a wholesale relationship, including company details, business contact information, trade requirements, delivery destinations, requested quantities and relevant business verification information.
3.7 Age verification
Our website is intended for adults aged 18 or over.
We may process information necessary to operate age-confirmation or age-verification controls. If additional verification is required, we will explain what information is collected and how it is used.
We do not deliberately collect personal information from children.
4. How We Collect Personal Information
We obtain personal information through several sources.
Information you provide directly: When you complete a form, register an account, place an order, subscribe to communications or contact us.
Information collected automatically: Through server logs, security tools, cookies and other website technologies, subject to applicable consent requirements.
Information received from service providers: Such as payment confirmations, delivery updates, fraud-prevention results and customer service information.
Information received from business contacts: Where a representative contacts us on behalf of a company, or a company provides relevant staff contact information for an existing or prospective business relationship.
We use information obtained from third parties only where there is an appropriate lawful basis.
5. How and Why We Use Your Information
We process personal information for specific business purposes and only where we have an appropriate legal basis.
| Purpose | Lawful basis |
|---|---|
| Processing purchases, payments and deliveries | Performance of a contract |
| Managing customer accounts | Performance of a contract |
| Responding to enquiries and providing quotations | Legitimate interests or steps requested before entering a contract |
| Providing customer support and handling complaints | Contractual obligations and legitimate interests |
| Maintaining accounting and tax records | Legal obligation |
| Detecting fraud, preventing abuse and securing the website | Legitimate interests and, where applicable, legal obligation |
| Managing wholesale and business relationships | Legitimate interests or performance of a contract, as applicable |
| Sending consent-based marketing communications | Consent |
| Sending marketing communications where another PECR-compliant route applies | Legitimate interests where appropriate, subject to PECR requirements and opt-out rights |
| Non-essential website analytics and personalisation | Consent where required |
| Improving website performance and customer experience | Legitimate interests, where lawful |
Where we rely on legitimate interests, these may include operating an efficient business, responding to commercial enquiries, maintaining customer relationships, protecting our website, preventing fraud and improving our services.
We assess these interests against individuals' rights and reasonable expectations.
Where consent is our lawful basis, you can withdraw it at any time without affecting processing that was lawful before withdrawal.
6. Customer Accounts and WooCommerce
Our website uses WordPress and WooCommerce to provide e-commerce functionality.
When you shop on our website, WooCommerce may process information needed to manage products, carts, checkout, payments, deliveries, returns and customer accounts.
This includes information associated with your orders and preferences.
Shopping cart and session technologies may also be used to remember products selected during a visit.
Certain information is necessary to complete transactions. If you do not supply the required information, we may be unable to process your order.
7. Payment Processing
Payments made through our website may be processed by external payment service providers.
These providers may collect and process information needed to authorise transactions, prevent fraud, comply with financial regulations and manage refunds.
Such information may include billing details, transaction values, transaction identifiers and payment credentials entered into secure payment interfaces.
Payment providers may act as independent data controllers for some processing activities and as processors for others.
Their own privacy notices may apply to information they collect directly.
We do not sell payment information to third parties.
8. Sharing Personal Information
We do not sell or rent personal information.
We may share personal data with organisations that assist us in operating our business, including:
- Website hosting and infrastructure providers
- Payment processing companies
- Delivery, shipping and logistics partners
- Website security and fraud-prevention services
- Email hosting and communication providers
- Customer relationship and support platforms
- Analytics and website performance providers, subject to consent requirements
- Professional advisers, including accountants and legal representatives
- Regulatory authorities or law-enforcement bodies where legally required
We disclose only information reasonably necessary for the relevant purpose.
Where third parties act as our data processors, we put appropriate contractual and security arrangements in place as required by applicable law.
9. International Data Transfers
Some suppliers or technology providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure an appropriate level of protection under UK data protection law.
Depending on the destination and circumstances, these protections may include:
- UK adequacy regulations
- The UK International Data Transfer Agreement
- The UK Addendum to approved contractual clauses
- Other legally recognised transfer mechanisms and safeguards
Where required, we assess the risks associated with international transfers.
You may contact us for information about the safeguards applicable to your personal data.
10. Cookies and Tracking Technologies
Our website may use cookies and related technologies to operate essential functions, maintain shopping sessions, improve performance and understand website usage.
We distinguish between strictly necessary technologies and non-essential technologies.
Where UK law requires consent, non-essential cookies and similar technologies will only be used following valid consent.
You can find further information in our Cookie Policy.
11. Email Marketing and Newsletters
If you subscribe to our newsletter or otherwise receive permitted marketing communications, we may send updates relating to our products, technology, business services, promotions and availability.
Where required, we obtain consent before sending marketing emails.
For certain existing customer or business communications, other rules may permit marketing without prior consent, provided the applicable legal requirements are met.
You can opt out of marketing communications by using the unsubscribe link in an email or contacting us directly.
Opting out of marketing does not prevent us from sending important transactional or service communications relating to existing orders or legal obligations.
12. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for its purpose or to satisfy legal, accounting and regulatory obligations.
Our retention approach includes:
Order and financial records: Retained for applicable accounting, tax and legal record-keeping periods, generally up to six years or longer where required by law.
Customer account information: Retained while the account remains active, and afterwards for a justified period necessary for compliance, legitimate business records or legal claims.
Business enquiries: Retained for as long as necessary to handle the enquiry, maintain a legitimate business relationship and meet applicable legal requirements.
Marketing subscription information: Retained while subscriptions remain active, with limited suppression records kept where necessary to respect opt-outs.
Security and technical logs: Retained for periods proportionate to operational and security needs.
Cookie preferences: Retained in accordance with the actual consent-management configuration.
We securely delete or anonymise information when it is no longer required, unless continued retention is legally justified.
13. Your Rights Under UK Data Protection Law
Depending on the circumstances, you have the following rights:
Right of access: You may request a copy of personal data we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete information.
Right to erasure: You may request deletion of personal information in certain circumstances.
Right to restrict processing: You may request restrictions on how we use your information where applicable.
Right to data portability: You may request certain personal information in a structured, commonly used and machine-readable format.
Right to object: You may object to processing based on legitimate interests in applicable circumstances.
Right to withdraw consent: You may withdraw consent where processing relies on it.
Rights relating to automated decision-making: You may have additional rights where qualifying solely automated decisions produce legal or similarly significant effects.
You have the right to object at any time to the processing of your personal data for direct marketing.
To exercise your rights, contact info@3devicesccell.co.uk.
We may request proportionate information to verify your identity before responding.
We normally respond to qualifying data protection requests within one month, subject to permitted extensions and exceptions.
14. Data Security
We use appropriate technical and organisational security measures to help protect personal information from unauthorised access, alteration, disclosure, loss or destruction.
Depending on the system and circumstances, these measures may include:
- HTTPS encryption for website connections
- Restricted administrative access
- Authentication and account security controls
- Software maintenance and security updates
- Access permissions based on business requirements
- Website monitoring and malicious activity prevention
- Secure arrangements with relevant service providers
No online system can guarantee absolute security.
We regularly review our measures in light of changing risks and business requirements.
15. Third-Party Websites and Embedded Content
Our website may include links to other websites, product manufacturers, business partners, review platforms or social media services.
These organisations may operate their own privacy policies.
We are not responsible for their independent processing of personal information.
Embedded videos, maps or other external content may also collect information when you interact with them, subject to applicable cookie and consent rules.
We recommend reviewing the privacy notices of relevant external services.
16. Children's Privacy and Age Restrictions
3DevicesCCELL is intended for adults aged 18 and over.
We do not knowingly market our products to children or intentionally collect their personal information.
If we become aware that personal information has been collected from a child in circumstances that require its removal, we will take appropriate action.
Age confirmation on the website does not replace any additional age-verification obligations imposed by applicable law.
17. Automated Decision-Making
We may use automated tools to support routine business operations, including payment security, fraud detection and website protection.
We do not intend to make decisions based solely on automated processing that have legal or similarly significant effects on individuals without implementing the safeguards required by applicable law.
Where qualifying automated decision-making is used, we will provide any additional information required by law.
18. Data Breaches
We maintain procedures for identifying, investigating and responding to suspected personal data breaches.
Where a breach meets the legal reporting threshold, we will notify the Information Commissioner's Office within the applicable statutory period.
Where required by law, we will also notify affected individuals.
19. Complaints and the Information Commissioner's Office
If you have concerns about how we handle your personal information, please contact us so we can investigate and respond.
You also have the right to complain to the UK's independent data protection regulator:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113
You do not have to contact us before making a complaint to the ICO.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, legal requirements or data processing activities.
The latest version will be published on this page with an updated revision date.
Where legally required, we will provide additional notice before introducing material changes to how we process personal data.
21. Contact Us
For privacy enquiries, data access requests or questions about this policy, please contact:
3Devices Ltd, trading as 3DevicesCCELL
Company number: 13034602
VAT number: 420996581
Registered office: Hamill House, 112-116 Chorley New Road, Bolton, England, BL1 4DH
Email: info@3devicesccell.co.uk
Website: https://3devicesccell.co.uk/
We aim to respond to privacy enquiries promptly and in accordance with applicable UK data protection legislation.