Who we are

Smoke Shop Vault operates this online store, selling hemp-derived CBD products, smoking accessories and related goods to retail customers and approved wholesale accounts. For the purposes of this policy, we are the party responsible for the personal information described below.

You can reach us at info@smokeshopvault.com with any privacy question, or write to us at 9700 N. Kings Hwy. 29572.

What we collect

We collect only what we need to run the store. That falls into four groups.

Information you give us

• Account details — your name, email address, date of birth (used to confirm you meet the minimum age), and the password you choose. Passwords are stored as one-way hashes; we never see them.
• Order details — billing and shipping address, phone number, and the contents of your order.
• Wholesale application details — business name, contact person, business phone and email, tax ID, business type and website. We use these to review and approve wholesale accounts.
• Messages — anything you send through our contact form, product reviews you submit, and any support correspondence.

Information created as you shop

• Items in your cart and products you save to your favourites.
• Your order history and its status.
• Your account type (retail or wholesale), which determines the pricing you see.

Information collected automatically

• IP address, browser type and device information, collected in server logs and used for security, fraud prevention and rate limiting on login and registration.
• Pages viewed and general usage patterns, used to improve the store.

What we do not collect

We do not collect or store full payment card numbers — see Payments below. We do not knowingly collect information from anyone under the minimum age, and we do not sell personal information.

How we use it

• To create and maintain your account, and to sign you in.
• To process, fulfil and deliver your orders, and to handle returns.
• To verify your age and, where a product requires it, to confirm that we may legally ship it to your address.
• To review wholesale applications and apply the correct pricing tier.
• To send transactional email — verification codes, order confirmations, password resets.
• To respond when you contact us.
• To detect and prevent fraud, abuse and unauthorised access.
• To meet our legal, tax and record-keeping obligations.

We only send marketing email if you have asked us to. You can unsubscribe from any marketing message at any time using the link in the message; this does not affect transactional email about orders or account security.

Cookies & local storage

We use a small number of cookies and browser storage entries, and we do not use them to build advertising profiles.

• Session cookies keep you signed in. They are set by our server, marked HTTP-only so page scripts cannot read them, and cleared when you sign out.
• Account-type cookie records whether you are a retail or wholesale customer, so the correct pricing renders. Pricing is enforced on our servers as well — this cookie only affects display.
• Local storage holds your age confirmation, and — while you are signed out — your cart and saved products, so they survive a page refresh. Once you sign in, that data moves to your account.

You can clear this data at any time through your browser settings. Clearing it will sign you out, empty a guest cart and ask you to confirm your age again.

Who we share it with

We share personal information only where it is needed to run the store, and only with parties who are bound to protect it:

• Payment processors, to take payment for your order.
• Shipping carriers, to deliver it — they receive the recipient name, address and phone number.
• Email and hosting providers, who operate the infrastructure that stores our data and sends our email on our behalf.
• Professional advisers and authorities, where we are legally required to disclose information, or where disclosure is necessary to establish or defend a legal claim.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Payments

Payments are handled by our payment providers. Card details are entered directly with the provider and are never stored on our servers — we receive only a confirmation of the result and a reference for the transaction. Each provider handles your payment data under its own privacy policy.

How long we keep it

• Account data — for as long as your account is open. Ask us to close it and we will delete or anonymise your data, except where we must keep records.
• Order records — retained for the period required by tax, accounting and product-compliance rules.
• Verification and reset codes — minutes; they expire automatically.
• Server and security logs — a limited period, then deleted.

Your rights

Depending on where you live, you may have the right to:

• ask what personal information we hold about you and get a copy of it;
• have inaccurate information corrected;
• have your information deleted, where we are not required to keep it;
• opt out of marketing email;
• object to or restrict certain processing.

To exercise any of these, email info@smokeshopvault.com. We may need to verify your identity first, and we will respond within the time frame the law allows. We will not treat you differently for exercising these rights.

Age restriction

This store is intended only for adults who meet the minimum legal age in their jurisdiction, and never below 21. We ask you to confirm your age before browsing and we collect a date of birth at registration. We do not knowingly collect information from anyone underage; if you believe a minor has given us personal information, contact us and we will delete it.

Security

The site is served over HTTPS. Sessions are held in HTTP-only cookies, passwords are hashed, sign-in attempts are rate limited, and administrative access is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we take these measures seriously and review them.

Changes

We may update this policy as the store or the law changes. The date at the top always reflects the current version. If a change materially affects how we use your information, we will make that clear before it takes effect.