Privacy Policy

What this policy covers

This policy sets out what igetvapor collects when you browse or order, what it is used for, who handles it, and how to ask to see or remove it.

This page takes its cue from the Privacy Act 1988 and, inside it, the Australian Privacy Principles. We don't sell or rent personal information to anyone.

What we hold

• Orders. Your name, email, phone number, delivery address, the devices you chose, the order total and any checkout note. A transfer screenshot, if you upload one, is kept with the order record.
• Sign-in. The email address you use for the one-time sign-in link. There is no password.
• Your account. It is created from the email on your order and holds the name and phone number from your orders, plus any addresses you choose to save.
• Visit records. Standard server logs (your IP address, your browser and the pages you asked for), the route that brought you here, and the visit and page figures recorded by Google Analytics.
• Messages. Emails and WhatsApp messages you send us, retained so we can handle whichever order or question prompted them.
• Reviews. The name you choose to show and what you write, tied to your order so that we can check the purchase was real.

Why we collect it

• Boxing up and posting your order.
• Cancelling orders we believe were placed by, or for, someone under 18.
• Answering questions and arranging replacements.
• Emailing order progress (placed, paid, shipped, cancelled), plus a text message at dispatch for Australian mobile numbers.
• Seeing which pages and links lead to orders.
• Keeping the financial records the law requires.

Marketing email goes only to people who ask for it.

Who else handles it

• Australia Post is given a name, address and phone number, which is what it needs to carry the parcel.
• Our order workspace. Each order is first saved in a database hosted in Sydney, then copied into the workspace the packing team works from, transfer screenshots included.
• Other shops with the same owner. igetvapor shares an owner with a few other online shops, and their orders feed one order system, so your order may be matched to a customer record that one of those shops created.
• Twilio texts Australian mobiles when a parcel ships.
• Fastmail is how our order and sign-in emails reach you.
• Backups hold a copy of the order records for recovery.
• Google Analytics receives only the visits it counts. It does not get order details or your private order link.
• Google Maps sees what you type in the street address box at checkout or in your saved addresses, so it can offer matching Australian addresses. Your name, email and phone stay with us.
• WhatsApp carries whatever you choose to send us through it.
• Bookkeeping looks at orders and payments, not at what you browsed.

Where it is stored

The order database sits in Sydney. Google Analytics, Google Maps, Twilio, Fastmail, the backups and the order workspace may all store or process information outside Australia, and that happens only for the purposes listed above.

How long we keep it

Order records, transfer screenshots included, stay on file while bookkeeping, tax and after-sales support still need them. A saved address remains until you delete it from your account page or ask us to close the account.

Cookies and browser storage

• A sign-in cookie appears only at the moment of signing in, and holds your session together afterwards.
• The shop_attr cookie, kept for 30 days, records your first landing page, the site that sent you and any UTM tags in the link, and it travels with an order you place. It is not anonymous. Your latest visit is stored separately in session storage and disappears when you close the tab.
• Local storage keeps the cart and the age confirmation.
• Google Analytics 4 places cookies of its own. They are pseudonymised, and we don't tie them to your name.

Wiping this site's cookies and anything it has stored in your browser brings the age prompt back and empties the cart.

Access, corrections and deletion

Write to orders@igetvapor.com to ask what we hold, to correct it, or to have it removed. Deletion happens within a reasonable time, apart from order records the law makes us keep; for those, we will tell you what stayed and why. If you are unhappy with our answer, your complaint can go to the OAIC, formally the Office of the Australian Information Commissioner, once we have had the chance to put things right.