Privacy Policy

We collect personal information that you voluntarily provide when placing an order or contacting us:

• Identity Information: Full name, date of birth (for age verification)
• Contact Information: Email address, phone number, mailing address
• Order Information: Items purchased, order total, shipping address, coupon codes used
• Payment Information: Processed securely through Clover — we do not store full card numbers
• Technical Information: IP address, browser type, pages visited (via cookies)
• Age Verification Data: Confirmation that you meet the legal age requirement in your province — required by law under the Tobacco and Vaping Products Act (TVPA)

We only collect information that is necessary to process your order, verify your age, and comply with Canadian federal and provincial regulations.

We use your personal information for the following purposes:

• Processing and fulfilling your orders
• Verifying that you meet the legal age requirement in your province (19+ or 18+ in AB/QC)
• Sending order confirmation and shipping notifications to your email
• Providing customer support and responding to inquiries
• Complying with the Tobacco and Vaping Products Act (TVPA) and provincial vaping regulations
• Detecting and preventing fraud or unauthorized transactions
• Improving our website and user experience (anonymized analytics only)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We only share your personal information with trusted third parties when necessary:

• Shipping Carriers: Canada Post and Purolator — to deliver your order and perform adult signature verification
• Payment Processor: Clover Ecommerce — to securely process your payment (PCI-DSS compliant)
• Email Service: Resend — to send order confirmations and notifications
• Cloud Infrastructure: Supabase (hosted in the US) — for secure order and customer data storage
• Legal Authorities: If required by law, court order, or regulatory authority in Canada

All third parties are contractually required to handle your data securely and only for the purposes we specify.

We implement industry-standard security measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted via SSL/TLS (HTTPS)
• Payment processing is handled by PCI-DSS compliant Clover — we never store full credit card numbers
• Access to customer data is restricted to authorized personnel only
• Our database uses row-level security (RLS) and encrypted connections

While we take every reasonable precaution, no internet transmission is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

Our website uses cookies and similar technologies for:

• Essential Cookies: Shopping cart, session management, age gate verification — required for the site to function
• Preference Cookies: Remembering your province selection and display preferences
• Analytics: Anonymized traffic data to improve our site (no personal identifiers)

You can disable cookies in your browser settings, but note that essential cookies are required for checkout to work.

• Order Records: Retained for 7 years as required by the Canada Revenue Agency (CRA) for tax and audit purposes
• Age Verification Records: Retained for the duration of regulatory requirements under the TVPA
• Customer Account Data: Retained for as long as you remain a customer, then deleted within 90 days of a deletion request (subject to legal retention obligations)
• Cookie Data: Session cookies expire when you close your browser; persistent cookies expire within 12 months

As a Canadian resident, you have the right to:

• Know what personal information we hold about you
• Access your personal information upon written request
• Correct inaccurate or incomplete information
• Withdraw consent for non-essential uses of your information (subject to legal obligations)
• Request deletion of your personal information (subject to retention obligations under Canadian law)
• File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe your privacy rights have been violated

To exercise any of these rights, contact us at privacy@freakyvapes.ca. We will respond within 30 days.

For privacy-related questions, concerns, or requests, contact our Privacy Officer:

We may update this Privacy Policy from time to time. The “Last updated” date at the top will always reflect the most recent revision. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.