Privacy Policy

NICOMGB LTD, the operator of this B2B wholesale store, places great emphasis on protecting your privacy. This policy explains how we handle the personal data of our business partners, their representatives, and employees in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

I. Data Controller

The controller of your personal data is:

NICOMGB LTD
Registered office: Dept 6573a, 196 High Road, Wood Green, London, United Kingdom, N22 8HH
Company number: 16917825 (registered in England & Wales)
Email for data protection matters: info@nicomgb.uk

II. What Data We Process and Why

Since our customers are businesses, we predominantly process data regarding companies and other legal entities. This data in itself does not constitute personal data; however, data regarding sole traders and contact details of company representatives or employees are considered personal data and are subject to protection under the UK GDPR.

We process the following categories of data:

  • Identification Data: Name, surname, job title, company name, and company registration number.
  • Age Verification Data: Information confirming that the account holder and order placer meet the minimum legal age for purchasing nicotine products, which we process to comply with UK age-of-sale requirements for nicotine pouches and vaping products.
  • Contact Data: Billing and delivery address, email address, and telephone number of the contact person.
  • Order Data: Purchase history, payment details, and bank account information where relevant.
  • Technical Data: IP address and access logs from the B2B portal, used for security and audit purposes.

III. Purpose and Legal Basis for Processing

We process your data based on the following legal grounds under the UK GDPR:

1. Performance of Contract (Order Fulfilment)
To deliver goods, issue invoices, and communicate regarding order status. Without this data, the trading relationship cannot be carried out.

2. Compliance with Legal Obligations
We must comply with applicable UK law, including:

  • Accounting and tax legislation, including record-keeping requirements under HMRC rules.
  • Age-of-sale legislation applicable to nicotine and vaping products, including the Nicotine Inhaling Products (Age of Sale and Proxy Purchasing) Regulations 2015 and the Tobacco and Vapes Act 2026.
  • Product safety and notification requirements under the Tobacco and Related Products Regulations 2016, as enforced by the Medicines and Healthcare products Regulatory Agency (MHRA).

3. Legitimate Interest
Based on our legitimate interest, we process data for:

  • Recovery of potential claims and protection of our legal rights.
  • Sending trade communications regarding similar goods to our existing business customers. Every such communication contains a link allowing simple and immediate unsubscription from further mailings.

IV. Data Retention Period

We retain personal data only for as long as necessary:

  • Data related to orders and invoicing: retained in line with HMRC record-keeping requirements, generally 6 years from the end of the relevant accounting period.
  • User account data: for the duration of the trading relationship.
  • Marketing data: until you object to processing or unsubscribe from trade communications.

V. Data Recipients and International Transfers

Your data is safe with us. We only share it with verified third parties that we need in order to operate the wholesale store, and we have appropriate data processing agreements in place with each of them.

  • Carriers: Courier and logistics providers used to deliver goods across the UK.
  • IT and Marketing Service Providers: Website hosting, e-commerce platform support, and analytics providers (e.g., Google).
  • Accountants and Tax Advisors: For the processing of accounts and tax filings.
  • Regulatory and Government Bodies: Where required by law, including HMRC and Trading Standards.

International Transfers: Personal data is processed primarily within the United Kingdom. Where we use global IT services (for example, Google Analytics), data may be transferred outside the UK, always on the basis of appropriate safeguards recognised under the UK GDPR, such as the International Data Transfer Agreement or an adequacy decision.

VI. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

  • Right of Access: You can ask us what personal data we hold about you.
  • Right to Rectification: If your data is inaccurate or incomplete, you have the right to have it corrected.
  • Right to Erasure: You can request the deletion of your data where there is no other legal reason for us to keep it. This right may be limited by legal obligations, such as mandatory record-keeping for tax purposes.
  • Right to Object: You have the right to object to processing carried out for direct marketing purposes.
  • Right to Data Portability.

To exercise your rights or to raise a data protection complaint, contact us at: info@nicomgb.uk. We will handle your complaint in accordance with our internal data protection complaints procedure, as required under the Data (Use and Access) Act 2025.

If you believe we are handling your data unlawfully, you also have the right to lodge a complaint with the supervisory authority, the Information Commissioner's Office (ico.org.uk).

VII. Data Security

This website is secured using an encrypted connection (SSL/HTTPS). Passwords for user accounts are hashed (encrypted) in our database. We also apply organisational measures to ensure that personal data is only accessed by authorised personnel to the extent necessary.

VIII. Cookies

Our website uses cookies. We distinguish two types:

  • Essential Cookies: Necessary for the proper functioning of the store (login, basket) and cannot be disabled.
  • Analytics and Marketing Cookies: (e.g., Google Analytics, Meta Pixel) used to measure traffic and tailor advertising. We use these cookies only with your consent, given through the cookie banner. You may change or withdraw your consent at any time via the cookie settings on this website.

This Privacy Policy is effective from 16 June 2026.