Privacy Policy

How Vape Store Delivery collects, uses, and protects your personal information. Last updated: January 2026. Compliant with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. What We Collect

When you place an order or create an account, we collect:

Name, email, phone number, shipping address
Date of birth (for age verification)
Payment information (processed by PCI-compliant gateways — we do not store credit card numbers)
Order history
IP address, browser type, device info (for fraud prevention + site optimization)

2. How We Use It

Process and ship your orders
Verify your age (19+/18+ depending on province)
Communicate order status, tracking, and delivery updates
Respond to support inquiries
Send marketing emails (only if you opt in — unsubscribe any time)
Improve our site, product selection, and customer service

3. Who We Share With

We share data only with parties necessary to fulfill your order:

Couriers (Canada Post, UPS, GTA same-day partners) — name, address, phone for delivery
Payment processors (Shopify Payments, Stripe, PayPal) — payment info via secure tokenized transmission
Email service provider (transactional + opt-in marketing) — name, email

We do not sell, rent, or trade your personal information to third parties.

4. Cookies & Tracking

We use essential cookies (cart, checkout) and analytics cookies (Shopify Analytics, Google Analytics) to understand site usage. You can disable non-essential cookies via your browser settings or our cookie banner.

5. Data Retention

Order records: retained 7 years for tax/audit compliance. Marketing email subscribers: retained until you unsubscribe. Account data: retained while your account is active + 7 years for compliance after deletion.

6. Your Rights (PIPEDA)

You have the right to:

Access your personal data on file
Correct inaccurate information
Delete your account (subject to compliance retention requirements)
Opt out of marketing communications at any time
File a complaint with the Office of the Privacy Commissioner of Canada

Email info@vapestoredelivery.ca to exercise any of these rights.

7. Data Security

We use industry-standard security: TLS 1.3 encryption for all site traffic, PCI-DSS-compliant payment processing, encrypted database storage, regular security audits. We don't store credit card numbers.

8. Children's Privacy

Our site is for adults of legal vape age (19+/18+ depending on province). We do not knowingly collect data from anyone under that age. If you believe a minor has submitted information to us, contact us immediately and we will delete it.