Free EU shipping on orders over €80 Discreet & Secure Packaging 100% Legal & Lab Tested

Privacy Policy

Last updated: April 21, 2025  |  GDPR Compliant

Privacy at a Glance

We collect only what is necessary to process your order and deliver your products.

Your data is encrypted in transit and stored securely. We never sell your data.

We do not share your personal information with third parties for marketing.

You can request deletion of your account and data at any time.

We use minimal functional cookies only β€” no advertising or tracking cookies.

We are fully GDPR compliant and respect all EU/EEA data subject rights.

1. Who We Are

Uptop Delivery ("we", "us", "our") operates the website uptopdelivery.eu and a delivery service across Europe. We act as the data controller for any personal data you provide.

Privacy contact: privacy@uptopdelivery.eu

2. What Data We Collect

We collect the following categories of personal data:

CategoryExamplesPurpose
IdentityFirst name, last name, date of birthOrder processing, age verification
ContactEmail address, phone numberOrder confirmations, delivery coordination
AddressBilling address, delivery address, pack station or meetup locationDelivery fulfilment
TransactionOrder contents, value, payment statusOrder processing, records
TechnicalIP address, browser type, session dataSecurity, fraud prevention
CommunicationsMessages via contact form, Viber, Signal, ThreemaCustomer support

We do not collect or store payment card details. Payment is handled directly via bank transfer, cryptocurrency or cash.

3. How We Use Your Data

  • Order fulfilment β€” to process, confirm and deliver your order
  • Age verification β€” to confirm you are 18 or older as required by law
  • Delivery coordination β€” to communicate delivery times, locations and instructions
  • Customer support β€” to respond to enquiries, complaints and feedback
  • Legal compliance β€” to meet our obligations under EU and local laws
  • Security and fraud prevention β€” to protect our customers and business
  • Newsletter β€” only where you have explicitly opted in

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR)

  • Contract performance (Art. 6(1)(b)): Processing necessary to fulfil your order
  • Legal obligation (Art. 6(1)(c)): Age verification and compliance with applicable laws
  • Legitimate interests (Art. 6(1)(f)): Fraud prevention and website security
  • Consent (Art. 6(1)(a)): Newsletter subscriptions β€” withdraw at any time

5. Data Sharing

We do not sell, rent or trade your personal data to third parties.

We may share limited data only where strictly necessary:

  • Delivery personnel: Name, contact number and delivery location shared with our driver
  • IT infrastructure providers: Hosting and database services, under data processing agreements
  • Legal authorities: Where required by law or valid legal order

6. Data Retention

  • Order records: 7 years (financial/legal compliance)
  • Customer accounts: Lifetime of account, plus 30 days after deletion request
  • Contact messages: 12 months from receipt
  • Newsletter subscribers: Until you unsubscribe
  • Technical / session data: Up to 90 days

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

πŸ”
Right of Access

Request a copy of the personal data we hold about you.

✏️
Right to Rectification

Ask us to correct inaccurate or incomplete data.

πŸ—‘οΈ
Right to Erasure

Request deletion of your personal data ("right to be forgotten").

⏸️
Right to Restriction

Ask us to restrict processing of your data in certain circumstances.

πŸ“¦
Right to Data Portability

Receive your data in a structured, machine-readable format.

🚫
Right to Object

Object to processing based on legitimate interests or for direct marketing.

↩️
Right to Withdraw Consent

Withdraw consent for newsletter/marketing at any time, no questions asked.

To exercise any right, email privacy@uptopdelivery.eu β€” subject: "Data Rights Request". We respond within 30 days as required by GDPR.

8. Cookies

We use only essential, functional cookies strictly necessary to operate the website:

  • Session cookies: Keep you logged in during your visit
  • Age verification: Stores your age confirmation for your browser session
  • Cart data: Stored in your browser's localStorage to preserve your cart between pages

We do not use advertising cookies, third-party tracking cookies, or analytics tools that send your data externally.

9. Data Security

  • SSL/TLS encryption for all data transmitted to and from our website
  • Passwords stored using bcrypt hashing β€” never plain text
  • Restricted access β€” only authorised personnel can access order and customer data
  • Regular security reviews of our systems

In the event of a data breach, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

10. International Transfers

Our website and database are hosted within the European Economic Area (EEA). We do not routinely transfer personal data outside the EEA. Where any transfer is necessary, it will be conducted under GDPR safeguards such as Standard Contractual Clauses.

11. Children's Privacy

Our service is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact privacy@uptopdelivery.eu and we will delete it immediately.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. The updated version will always be published on this page with a revised date. Continued use of our service after any update constitutes acknowledgement of the revised policy.

13. Contact & Complaints

You also have the right to complain to your national data protection authority:

Last updated: April 21, 2025  |  See also our Terms & Conditions.

Your Cart

Your cart is empty 🌿