Privacy Policy - Ecigavenue

1. Introduction

At ecigavenue.com (“we,” “us,” or “our”), we are firmly committed to safeguarding your privacy and processing your personal information with the utmost transparency, security, and accountability. This Privacy Policy outlines how we collect, use, disclose, and store your personal data when you interact with our website and services. By accessing or using ecigavenue.com, you acknowledge and agree to this Privacy Policy, which has been prepared in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller

This Privacy Policy applies to all users of ecigavenue.com, including visitors, registered users, and customers. We are the data controller responsible for your personal information under applicable data protection laws. If you have any questions about our data practices, please contact us at [email protected].

3. Categories of Data Processed

We only collect and process data that is necessary for the specific purposes set out in this policy:

a. Usage Data
We collect information automatically when you interact with our website, including your browser type, IP address, device identifiers, referral source, session duration, pages visited, error logs, and general usage patterns.

b. Account Data
When you register an account or make a purchase, we may collect your full name, billing and shipping address, email address, phone number, and any other relevant information necessary to manage your account and fulfill transactions.

c. Profile Data
We process data related to your preferences, purchase history, saved products, and behavioral trends to personalize your experience with ecigavenue.com.

d. Communication Data
If you contact us via email or through support channels, we collect the content of your message, contact information, and records of communication for support and quality assurance purposes.

e. Technical Data
We may collect information related to your device and configuration, such as your operating system, browser version, screen resolution, system language, and plug-ins.

f. Transaction Data
We collect transaction-related data such as order details, payment method (excluding full payment card information, which is processed securely via third-party payment processors), delivery tracking, and purchase fulfillment metadata.

g. Preference Data
Marketing and subscription preferences, product or service interests, and consent records are processed to manage communications and promotional offers based on your expressed choices.

4. Legal Bases for Processing

We rely on the following lawful bases to process your personal data:

– Consent: Where legally required, we obtain your explicit consent before processing data (e.g., marketing emails or optional cookies).
– Contractual Necessity: We process necessary data to fulfill our obligations to you, including order processing, account management, and customer service.
– Legitimate Interests: We may process data where it is in our legitimate business interest and not overridden by your rights (e.g., analytics, fraud detection, product development).
– Legal Obligations: We process your data to comply with applicable legal and regulatory requirements.

5. Your Rights

Subject to applicable laws, you have the following rights regarding your personal data:

– Right of Access: You can request access to your personal data and receive a copy.
– Right to Rectification: You may correct or update any inaccurate or incomplete personal information.
– Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data under certain circumstances.
– Right to Restriction of Processing: You can request that we limit how we process your data.
– Right to Data Portability: You can request that we export your data in a structured, commonly used, and machine-readable format.

To exercise these rights, please contact us at [email protected]. We will respond in accordance with applicable law.

6. Security Measures

We implement and maintain appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These include:

– SSL/TLS encryption for secure data transmission
– Access control and authentication protocols for system users
– Regular data backups and disaster recovery mechanisms
– Staff training on data protection and security best practices

7. International Transfers

Your information may be transferred to and processed in jurisdictions outside your country of residence, including countries that may not offer the same level of data protection. When we do so, we rely on adequate safeguards such as Standard Contractual Clauses approved by the European Commission and other mechanisms as required by applicable law to ensure the protection of your data.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it is collected or required to comply with legal, regulatory, or contractual obligations. Generally:

– Account and profile data: Retained for the life of the account + 12 months
– Transaction data: Retained for 6 years to comply with tax and financial reporting obligations
– Communication data: Retained for up to 24 months post-interaction, unless requested otherwise
– Cookie and analytics data: Retained based on cookie type, typically up to 13 months

9. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience on ecigavenue.com. Cookies are categorized as follows:

– Essential cookies: Required for website operation and functionality
– Functional cookies: Enable personalization, user preferences, and enhanced features
– Analytics cookies: Help us understand visitor behavior and site performance
– Performance cookies: Monitor technical behavior, site load times, and errors

10. Cookie Management and Compliance with GDPR & CCPA

You may control cookies through your browser settings or use on-site cookie consent tools to opt into or out of non-essential cookies. Where required, we seek your explicit consent before placing analytics or marketing cookies on your device. Under the CCPA, California residents may also opt out of the “sale” of their personal information through available tools on ecigavenue.com or by contacting us.

11. Special Protections for Children Under 13

ecigavenue.com does not knowingly collect, solicit, or process personal data from children under the age of 13. If you are a parent or legal guardian and believe your child has provided us with any personal information, please contact us immediately at [email protected] so that we can investigate and take appropriate action, including deletion.

12. Policy Updates & User Notifications

We reserve the right to revise this Privacy Policy to reflect changes in our practices, legal requirements, or website functionality. Any material changes will be communicated to users through appropriate means on ecigavenue.com, and continued use of our services constitutes acceptance of such updates.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection Officer at:

Email: [email protected]

We are committed to ensuring your data is handled with transparency and integrity and will strive to promptly address and resolve all privacy-related concerns.

This Privacy Policy is maintained in accordance with GDPR, CCPA, and other applicable data protection laws, ensuring your rights and information remain protected when using ecigavenue.com. For any further clarification, please don’t hesitate to reach out.