Privacy Policy

This is what IGetYourVape keeps about you, what it's for, where it sits, who else touches it, and how to get a copy, a correction or a deletion. Nothing here is sold or rented, ever. We've written it to the Australian Privacy Principles, which come under the Privacy Act 1988.

What we keep

• Your order: name, email, phone and delivery address, the items, the totals and any note from checkout, plus the image of your transfer receipt if you upload one.
• Your sign-in: the email address. Signing in uses a one-time link sent to it, so there's no password on file. Each order is filed under an account for the email address used, which keeps the name and phone number from that order; signing in just opens the account. Any delivery addresses you save there are kept too.
• Your visits: ordinary server logs (IP address, browser type, pages requested), how you arrived here, and visit and page counts from Google Analytics.
• Your messages: what you send us by email or WhatsApp.
• Your reviews: the name you choose to display and the review text, linked back to the order so we can check the purchase was real.

What we do with it

• Pack and send the order.
• Cancel any order we judge was placed by or for someone under 18.
• Answer questions and arrange replacements.
• Email you as an order goes from placed to paid to shipped, or to cancelled, and text you at dispatch if you gave us an Australian mobile.
• See which pages and links lead to orders.
• Keep the financial records Australian law requires.

We email marketing only to those who request it.

Who else is involved

• Australia Post is passed what it needs to find you: your name, address and phone.
• Packing happens from an order-management workspace. Each order lands first in our Sydney-hosted database and is then copied across, receipt images included.
• Sister stores: IGetYourVape is one of several shops under shared ownership, and their orders feed one shared system. Yours may be matched with a customer record that was created through another store.
• Fastmail carries our order and sign-in emails, while Twilio handles the dispatch text for Australian mobile numbers.
• Backups keep spare copies of order records for recovery.
• Google Analytics only sees the visits it counts; order details and private order links never reach it.
• WhatsApp handles whatever you message us on it.
• Bookkeeping sees orders and payments, never your browsing.

What goes overseas

The order database is in Sydney, yet some of the services above store or process information outside Australia: the workspace, Google Analytics, Fastmail, Twilio and our backups. We use them for the jobs described here and for nothing else.

How long it stays

Order records and receipt images stay while accounting, tax and after-sales duties call for them. Addresses you've saved remain until you delete them or ask us to close the account.

Your rights

Email orders@igetyourvape.com to see what we hold, fix it, or have it deleted. Deletion happens within a reasonable time, unless the law obliges us to hold an order record, and then we'll tell you what we kept and why. If you're unhappy with how we've handled your information, tell us first. If that doesn't resolve it, the next step is a complaint to the Australian Information Commissioner's office.

Cookies and local storage

• Sign-in cookie: set when you sign in and at no other time, which keeps your session going.
• shop_attr cookie: lives for 30 days and records your first landing page, which site referred you, plus any campaign (UTM) tags the link carried. It goes along with your order so that each order carries its origin, which means it isn't anonymous. Details of your latest visit are also kept in session storage, which clears when the tab closes.
• Local storage: your browser holds your cart and your age confirmation.
• Google Analytics 4: its own cookies, used to count visits and page views. The data is pseudonymous, and we never link it to your name.

If you clear the cookies and stored data for this site in your browser, all of that goes. You'll be asked your age again, and the cart starts empty.