Privacy Policy.
How Crown Vape collects, uses, and protects your personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Last updated: May 5, 2026
Who we are.
Crown Vape is a brick-and-mortar vape retailer based in Richmond Hill, Ontario, Canada, operating an online store at this domain. This policy applies to any personal information we collect through this site or in connection with online purchases.
What we collect.
- Account information. Name, email, password (stored hashed), phone number if provided.
- Order information. Items purchased, billing address, shipping address, payment metadata (last four digits of card, card brand — we do not see or store full card numbers).
- Age verification. A confirmation that you are 19 or older, recorded as a 30-day cookie. We do not store dates of birth from the site age gate.
- Browsing data. Pages visited, time on site, device and browser type, IP address, referrer. Used for analytics and security.
- Communications. Messages you send through the contact form or via email.
How we use it.
- To process and fulfil your orders.
- To verify legal age for the sale of nicotine products.
- To respond to customer service inquiries.
- To comply with legal obligations (tax records, age-of-majority enforcement, regulatory reporting).
- To improve the site, analyze usage, and detect fraud or abuse.
- To send transactional emails (order confirmations, shipping updates, return notices).
- To send marketing communications — only if you have explicitly opted in. You can opt out at any time via the unsubscribe link in any marketing email.
How we protect it.
The site runs on HTTPS with industry-standard TLS encryption. Payment processing is handled by a PCI-compliant third-party gateway — Crown Vape never sees or stores full card numbers. Account passwords are stored as one-way hashes. Access to customer data is limited to authorized personnel on a need-to-know basis.
Personal information is retained only as long as necessary to fulfil the purposes described above and to meet legal obligations (typically 7 years for tax records). Beyond that retention period, data is deleted or anonymized.
Third-party processors.
To run the store, we share specific information with the following categories of third parties — only the data each one needs:
- Payment gateway. Order total, billing address, card details (handled directly by the gateway).
- Shipping carriers (Canada Post and others). Recipient name, shipping address, phone number for delivery.
- Email service provider. Email address and name, for transactional and (opt-in) marketing emails.
- Analytics provider. Anonymized browsing data.
We do not sell, rent, or trade personal information.
Cookies.
The site uses cookies for essential functions (cart, login session, age-gate confirmation), analytics, and (with consent) marketing. You can manage cookie preferences via the cookie consent banner shown on first visit. Disabling essential cookies may break checkout and login.
Cross-border data.
Some of our service providers (e.g., the analytics platform, certain email infrastructure) operate servers outside Canada, primarily in the United States. While in those jurisdictions, your data may be subject to local laws. We choose providers with strong data protection commitments and contractual safeguards.
Your rights under PIPEDA.
- Access. You can request a copy of the personal information we hold about you.
- Correction. You can request that we correct inaccurate information.
- Withdrawal of consent. You can withdraw consent for marketing communications and most non-essential processing at any time.
- Complaint. If you believe we have mishandled your information, you can file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
To exercise any of these rights, contact our privacy officer (details below).
Children.
This site is intended for adults 19 or older. We do not knowingly collect information from anyone under 19. If we become aware that we have, we will delete that information.
Updates.
We may update this policy from time to time. Material changes will be communicated via a notice on the site and, where appropriate, by email to account holders. The “Last updated” date at the top of this page reflects the most recent change.
Contact our privacy officer.
Privacy questions, access requests, or complaints can be sent to info@crownvape.com, or by mail to our Richmond Hill business address (see Contact page).
