Legal
Privacy notice
Last updated 25 September 2026
What we collect
Name, delivery address, date of birth and Telegram user ID when you order; the result (pass/fail) of the age check but not the underlying identity data, which is processed by our verification provider; your crypto payment reference; and basic device data such as IP address and browser when you use the site or check a serial (IP addresses are stored only as salted hashes).
Why
To fulfil your order, meet our legal duty to verify age under the Tobacco and Vapes Act 2026 and related regulations, prevent fraud and counterfeiting, and respond to your messages. We do not use your data for advertising and do not send marketing emails.
Sharing
Our age-verification provider (to run the check), our crypto payment processor (to take payment), our courier (to deliver), and our hosting and database providers. All are bound by contract. We do not sell data.
Retention
Order and age-verification records are kept for 6 years to meet legal and tax obligations. Telegram conversation state is deleted 90 days after your last order.
Your rights
You can ask for a copy of your data, correction or deletion (subject to our legal retention duties) by emailing hello@sunnymelts.co.uk. You can complain to the ICO at ico.org.uk.
Template wording for review by your solicitor before launch. Company details are placeholders until set in the environment.