Running an online vape store means we handle personal data every day — names, addresses, payment info, age records. This page spells out exactly what we collect, why, and what control you have over it. We wrote it in plain language because nobody reads the ones written in legalese.
The Short Version
That covers the essentials. The rest of this page goes deeper into each point.
Your Data from Checkout to Deletion
Instead of splitting "what we collect" and "why we use it" into separate sections, here's the full picture in one place — every data point, where it comes from, what it does, and how long we keep it.
| Data | When You Give It | What We Do With It | How Long We Keep It |
|---|---|---|---|
| Name & email | Account creation or checkout | Ship your order, send tracking, handle support | Until account deletion (or 7 yrs for order records) |
| Phone number | Checkout (optional on some orders) | Carrier delivery notifications, support callbacks | Same as above |
| Shipping & billing address | Checkout | Fulfill orders from our Pomona, CA warehouse; calculate applicable fees | 7 years (tax compliance) |
| Payment details | Checkout | Routed directly to Stripe / PayPal — never touches our servers | We don't store it at all |
| Date of birth / ID | Age gate or manual review | Confirm you're 21+ (PACT Act requirement) | 3 years after last purchase |
| Support messages & videos | When you email us a quality claim | Evaluate and resolve your case | 1 year after case is closed |
| Email (marketing) | Newsletter sign-up | Product launches, deals, restock alerts — opt-in only | Until you unsubscribe |
| IP address & device info | Automatically on every visit | Fraud screening, analytics, geo-checking shipping eligibility | 26 months (analytics default) |
| Browsing behavior | Automatically via cookies | Understand which pages and products get the most attention | 26 months, anonymized |
What We Commit to Never Doing
Some privacy policies bury the important stuff. We'd rather put it in bold:
The Only Third Parties That Touch Your Data
Running an online store requires a handful of external services. Each one receives only the minimum data needed to do its job. No more.
| Partner | What They Receive | Purpose |
|---|---|---|
| Stripe / PayPal | Encrypted payment details | Process transactions securely |
| UPS / USPS / DHL | Recipient name, address, phone | Deliver your package and generate tracking |
| Age verification provider | Name, DOB, address | Confirm 21+ per PACT Act |
| Google Analytics | Anonymized browsing data | Measure site traffic and page performance |
| Email service | Email address | Deliver order confirmations and marketing (if opted in) |
We may also disclose data when legally required — such as a court order, subpoena, or government investigation — or to protect the safety of our customers and staff.
How We Lock It Down
Every page on raz-vape.com loads over HTTPS with SSL encryption, so data in transit can't be intercepted. Payment processing is handled entirely by PCI-DSS certified providers — your card number goes straight to them and never touches our database. Internally, customer records are restricted to the team members who actually need access to pack orders or answer support tickets. Our hosting environment is monitored and patched regularly.
That said, no system on the internet is bulletproof. We take reasonable precautions, but we also recommend you pick a strong password for your account and avoid reusing it on other sites.
Cookies — the Basics
We use three types of cookies. Essential cookies keep your shopping cart alive, maintain your login session, and remember your age-verification status — the store breaks without these. Analytics cookies (Google Analytics) collect anonymized traffic data so we know which pages work and which don't. Marketing cookies power retargeting ads on other platforms — you can block these with any ad-blocker or through your browser's cookie settings without affecting checkout.
Your Data, Your Call
Email service@raz-vape.com with the subject line "Privacy Request" and we'll respond within 30 days. Here's what you can ask for:
- See it — Get a full copy of all personal data we hold on you
- Fix it — Correct any inaccurate information in your account
- Delete it — Request removal of your data (we may need to keep order records for tax compliance)
- Take it — Receive your data in a portable format (CSV)
- Stop marketing — Unsubscribe link is in every promotional email, or just email us
If you're in California, the CCPA gives you a few additional protections:
- Right to know exactly what categories of data we've collected in the past 12 months
- Right to request deletion — same as above, with the same legal-hold exceptions
- Right to opt out of data sales — not applicable, because we don't sell data
- Right to equal service — exercising these rights won't change how we treat your orders
Use subject line "CCPA Request" when emailing us.
Under 21? This Store Isn't for You.
Raz-vape.com is restricted to adults aged 21 and older. We do not knowingly collect data from anyone under 21. Every visitor must pass an age verification gate before browsing products. If we learn that data was collected from a minor, we delete it immediately — no exceptions.
Other Things Worth Knowing
External links — Our site occasionally links to third-party platforms (payment providers, carriers, social media). We have no control over their privacy practices, so check their policies before handing over personal info.
Policy updates — We may revise this page from time to time. The "Effective" date at the top always reflects the latest version. For significant changes, we'll also send a heads-up email to registered accounts. Continuing to use raz-vape.com after an update means you accept the revised terms.
Questions? Email service@raz-vape.com or use our contact form. This policy applies solely to data collected through raz-vape.com.