Privacy Policy
How Online Vape Shop USA handles your information
This Privacy Policy describes how Online Vape Shop USA (“we”, “us”, “our”) collects, uses, discloses, and safeguards information when you visit onlinevapeshopusa.com or purchase from us. By using the Site you consent to this Policy.
1. Age Restriction (21+)
Our Site, products and services are intended solely for adults aged 21 or older. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected information from a minor, we will delete it promptly.
2. Information We Collect
- Account data: name, email, password hash, phone, shipping/billing addresses.
- Order data: products purchased, order totals, tracking, and customer support history.
- Age-verification data: date of birth, ID document metadata, and verification result (we do not retain ID images longer than required by law).
- Payment data: handled by our PCI-compliant payment processors; we do not store full card numbers.
- Marketing data: email preferences, opt-in status, and engagement.
- Technical data: IP address, device/browser type, pages visited, referrer, cookies, and similar identifiers.
- Communications: contact form submissions, chat messages, and email correspondence.
3. How We Use Information
- To verify your age and identity before fulfilling orders.
- To process, fulfill, ship, and support your orders.
- To operate, secure, and improve the Site, prevent fraud, and enforce our Terms.
- To send transactional emails (order confirmations, shipping, account notices).
- To send marketing emails when you opt in (you can unsubscribe at any time).
- To comply with legal obligations, tax, and regulatory reporting.
4. Cookies & Analytics
We use strictly necessary cookies (cart, session, security) and optional analytics/marketing cookies to understand site usage and improve performance. You can manage cookies in your browser settings. See our Cookie Policy for details.
5. Sharing
We share data only with service providers necessary to operate our business: payment processors, age verification providers, shipping carriers, email/SMS providers, hosting, analytics, and fraud prevention. We may disclose data to comply with law, lawful requests, or to protect rights, safety, and property. We do not sell your personal information.
6. Data Retention
We retain personal data only as long as needed for the purposes described, to comply with legal obligations (including tax and age-verification recordkeeping), resolve disputes, and enforce agreements.
7. Security
We use industry-standard administrative, technical and physical safeguards, including TLS encryption in transit and access controls. No system is 100% secure; you use the Site at your own risk.
8. Your Rights (CCPA/CPRA, GDPR & State Laws)
- Right to access, correct, delete, or port your personal data.
- Right to opt out of targeted advertising and “sale/sharing” of personal information.
- Right to non-discrimination for exercising your privacy rights.
- EEA/UK residents: lawful bases include consent, contract, legitimate interests, and legal obligation.
To exercise rights, email support@ebvapes.com. We may verify your identity before responding.
9. California “Shine the Light” & Do Not Track
California residents may request information about disclosures of personal information for direct marketing. Our Site does not currently respond to Do Not Track signals.
10. Children
The Site is not directed to children under 21. We will delete any data inadvertently collected from minors.
11. International Users
The Site is operated in the United States. By using it, you consent to processing of your data in the U.S.
12. Changes
We may update this Policy at any time. Material changes will be posted on this page with an updated date.
13. Contact
Privacy questions: support@ebvapes.com.
Last updated: January 1, 2026. Questions? Email support@ebvapes.com.
