Privacy Policy

Last Updated: 15 September 2026

At THC Vapes online shop, we respect your privacy and are committed to protecting the personal information you provide when you browse our website, create an account, contact us, place an order, subscribe to communications, or otherwise interact with our services.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information and how you can exercise your privacy rights.

We aim to manage personal information responsibly, transparently, and in accordance with applicable privacy and data protection laws. Where Australian privacy laws apply to our business, this policy is intended to explain our approach to handling personal information consistently with the Australian Privacy Principles.

By using THCVapesOnline.com, you acknowledge that you have read and understood this Privacy Policy.


1. About This Privacy Policy

This Privacy Policy applies to personal information collected through THCVapesOnline.com, including information collected when you:

  • Visit or browse our website
  • Create or use an online account
  • Place an order
  • Request information about our products
  • Contact our customer support team
  • Subscribe to newsletters or promotional communications
  • Complete a contact or enquiry form
  • Participate in promotions, surveys, or competitions
  • Interact with our website through cookies or similar technologies
  • Communicate with us through email, telephone, live chat, or other available channels

This policy also explains how information may be handled by service providers that assist us with website hosting, payment processing, order fulfilment, customer support, analytics, marketing, security, and delivery.

We encourage you to read this policy carefully so that you understand how your information is handled.


2. Our Commitment to Privacy

Your personal information belongs to you, and we take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification, or disclosure.

We seek to follow privacy-by-design principles wherever practical. This means we aim to collect information that is reasonably necessary for legitimate business purposes, use it only for appropriate purposes, limit access to authorised personnel and service providers, and retain information only for as long as reasonably necessary or legally required.

We also aim to keep our privacy practices transparent and our Privacy Policy current when our information-handling practices materially change.


3. What Personal Information We May Collect

Depending on how you interact with THCVapesOnline.com, we may collect different categories of personal information.

This may include:

Contact Information

For example:

  • Full name
  • Email address
  • Telephone or mobile number
  • Billing address
  • Delivery address
  • Other contact details you voluntarily provide

Account Information

If you create an account, we may collect:

  • Username
  • Email address
  • Account preferences
  • Order history
  • Saved addresses
  • Account activity
  • Communication preferences

Order Information

When you purchase from us, we may collect information necessary to process and fulfil your order, including:

  • Products ordered
  • Quantity
  • Order number
  • Order date
  • Delivery information
  • Billing information
  • Order status
  • Customer communications relating to your order

Payment Information

Payments may be processed through third-party payment providers.

Depending on the payment method used, we may receive limited payment-related information, such as:

  • Payment status
  • Transaction reference
  • Payment method
  • Transaction amount
  • Fraud-prevention information

Where payment processing is performed by a third-party provider, your payment information may be subject to that provider’s own privacy policy and terms.

We do not intend to retain complete payment-card information on our website unless our payment systems specifically require and lawfully permit us to do so.

Customer Communications

If you contact us, we may retain information contained in your communication, including:

  • Your name
  • Email address
  • Telephone number
  • Message contents
  • Order details
  • Customer-service history
  • Attachments or information you voluntarily provide

We use this information to respond to enquiries and maintain appropriate customer-service records.

Technical Information

When you visit our website, certain technical information may be automatically collected.

This can include:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Screen characteristics
  • Website pages visited
  • Referring website
  • Approximate geographic information derived from technical data
  • Date and time of visits
  • Website interactions
  • Error and diagnostic information

This information may be collected through website technologies, server logs, analytics services, cookies, and similar technologies.


4. How We Collect Personal Information

We may collect personal information directly from you when you:

  • Register an account
  • Place an order
  • Complete a form
  • Contact customer support
  • Subscribe to communications
  • Request information
  • Participate in a promotion
  • Submit a review or feedback
  • Communicate with us through email or other channels

We may also collect certain information automatically when you use our website.

For example, our website infrastructure may automatically record technical information relating to your device, browser, website activity, and interactions.

In some circumstances, we may receive information from third-party service providers involved in payment processing, fraud prevention, website analytics, advertising, delivery, hosting, customer support, or other business functions.


5. Why We Collect Personal Information

We collect and use personal information for legitimate business and operational purposes.

These purposes may include:

  • Processing and managing orders
  • Confirming purchases
  • Arranging delivery
  • Providing customer support
  • Responding to enquiries
  • Managing customer accounts
  • Processing payments
  • Preventing fraud and suspicious activity
  • Improving website functionality
  • Maintaining website security
  • Understanding how visitors use our website
  • Improving products and services
  • Managing customer communications
  • Sending marketing communications where permitted
  • Administering promotions or competitions
  • Maintaining business and financial records
  • Meeting legal and regulatory obligations
  • Resolving disputes
  • Protecting our business, customers, website, and systems

We seek to use personal information only for purposes that are reasonably connected with our business activities or otherwise permitted by applicable law.


6. Information Required to Place an Order

When you place an order through THCVapesOnline.com, we may need certain information to process and fulfil that order.

This can include your name, contact information, billing information, delivery information, and other details necessary to complete the transaction.

If you choose not to provide information that is reasonably necessary to process your order, we may be unable to accept, process, or deliver the order.

We do not ask customers to provide unnecessary personal information simply for the purpose of collecting it.


7. Payment Processing

We may use independent payment providers to process transactions.

When you select a payment method, you may be redirected to or interact with a third-party payment service.

These providers may collect and process payment information according to their own privacy policies, security practices, and terms.

We may receive information confirming whether a transaction has been authorised, declined, completed, refunded, or otherwise processed.

For security reasons, customers should never send complete payment-card numbers, passwords, authentication codes, or other sensitive payment credentials to us through ordinary email or customer-support messages unless specifically requested through a secure process.


8. Delivery and Shipping Information

To fulfil an order, we may need to provide relevant information to delivery, logistics, fulfilment, or courier providers.

Information shared for delivery purposes may include:

  • Recipient name
  • Delivery address
  • Contact telephone number
  • Email address
  • Order or tracking reference
  • Delivery instructions

We seek to limit information shared with delivery providers to information reasonably necessary for fulfilment and delivery.


9. Customer Support

We may use information you provide to respond to customer-service enquiries and resolve issues.

For example, if you contact us about an order, we may use your name, order number, email address, delivery information, and previous communications to verify the enquiry and provide appropriate assistance.

Customer-service records may be retained for legitimate business, legal, security, and dispute-resolution purposes.


10. Cookies and Similar Technologies

THCVapesOnline.com may use cookies and similar technologies.

Cookies are small files or pieces of information stored on your device that can help websites recognise returning visitors, remember preferences, maintain sessions, and understand website usage.

Cookies may be used for purposes such as:

  • Keeping products in your shopping cart
  • Maintaining login sessions
  • Remembering preferences
  • Improving website performance
  • Measuring website traffic
  • Understanding visitor behaviour
  • Detecting security issues
  • Supporting advertising or marketing activities
  • Improving user experience

Some cookies may be placed by third-party service providers operating on our behalf.

You can generally control or disable cookies through your browser settings. However, disabling certain cookies may affect website functionality.


11. Analytics

We may use analytics services to understand how visitors use THCVapesOnline.com.

Analytics information may help us understand:

  • Which pages receive visits
  • How visitors navigate the website
  • Which features are used
  • Website performance
  • General visitor behaviour
  • Technical problems
  • Marketing performance

Analytics information may be collected using cookies, pixels, server logs, or similar technologies.

Where practical, we seek to use analytics information in an aggregated or otherwise privacy-conscious manner.


12. Advertising and Marketing

Where permitted by applicable law, we may use personal information to communicate with customers and prospective customers about products, services, promotions, updates, or other information that may be relevant to them.

Marketing communications may be sent through:

  • Email
  • SMS
  • Website notifications
  • Other communication channels that you have agreed to receive

You may unsubscribe from marketing communications by following the unsubscribe instructions included in the relevant communication or by contacting us.

Please note that even if you unsubscribe from marketing communications, we may still send essential transactional or service-related messages, such as order confirmations, delivery updates, security notices, or responses to customer enquiries.


13. Third-Party Service Providers

We may work with trusted third-party providers that help us operate our website and business.

These providers may include:

  • Website hosting providers
  • Payment processors
  • Delivery and logistics providers
  • Customer-support platforms
  • Email providers
  • Analytics providers
  • Marketing platforms
  • Fraud-prevention services
  • Cybersecurity providers
  • IT service providers
  • Website development providers
  • Cloud storage providers

Where a third party processes information on our behalf, we seek to take reasonable steps to ensure that the information is handled appropriately and for legitimate purposes.

Third-party providers may have their own privacy policies governing information they collect directly.


14. When We May Disclose Personal Information

We do not sell personal information simply as a routine business practice.

We may disclose personal information where reasonably necessary for purposes such as:

  • Processing and fulfilling orders
  • Processing payments
  • Delivering products
  • Providing customer support
  • Operating and maintaining our website
  • Preventing fraud
  • Protecting website security
  • Providing analytics
  • Managing marketing communications
  • Obtaining professional advice
  • Meeting legal requirements
  • Responding to lawful requests from authorities
  • Protecting our rights, property, customers, or business
  • Managing disputes or legal proceedings

We aim to disclose only information that is reasonably necessary for the relevant purpose.


15. Overseas Disclosure of Personal Information

Some of our service providers may operate outside Australia or may store or process information in another country.

As a result, personal information may potentially be disclosed to or handled by overseas recipients depending on the providers and services we use.

The countries involved may change as our service providers and technology infrastructure change.

Where applicable, we will take reasonable steps to manage overseas disclosures in accordance with relevant privacy obligations.

If you require specific information about where your personal information is processed or stored, you may contact us using the details provided at the end of this policy.


16. How We Protect Personal Information

We take reasonable measures designed to protect personal information from:

  • Unauthorised access
  • Unauthorised disclosure
  • Misuse
  • Loss
  • Interference
  • Unauthorised alteration
  • Destruction

Security measures may include appropriate access controls, secure website technologies, authentication procedures, monitoring, backups, restricted staff access, and security measures provided by our technology partners.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should also take reasonable steps to protect your own information, including using strong passwords, keeping account credentials confidential, and avoiding sending sensitive information through unsecured channels.


17. Data Breaches and Security Incidents

If we become aware of a data breach involving personal information, we will assess the incident and take appropriate steps based on the circumstances.

Where applicable law requires notification, we will make the necessary notifications to affected individuals and/or relevant authorities.

Our response may include:

  • Investigating the incident
  • Containing the breach
  • Securing affected systems
  • Assessing potential risks
  • Taking corrective action
  • Notifying relevant parties where legally required
  • Reviewing our security procedures

18. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, maintain appropriate business records, resolve disputes, prevent fraud, comply with legal obligations, or otherwise fulfil legitimate business requirements.

Retention periods may vary depending on the type of information and the reason it was collected.

When information is no longer reasonably required, we may securely delete, destroy, de-identify, or otherwise dispose of it in accordance with applicable requirements.

Some information may remain in secure backups for a limited period after deletion from active systems.


19. Accessing Your Personal Information

You may have rights to request access to personal information we hold about you.

If you wish to request access, please contact us using the contact information below.

Your request should, where possible, include enough information for us to identify you and locate the relevant records.

We may need to verify your identity before providing access to personal information.

In certain circumstances, applicable law may allow or require us to refuse access to some information.

If we cannot provide access, we will generally explain the reason where permitted to do so.


20. Correcting Your Personal Information

We aim to maintain personal information that is accurate, complete, and up to date for the purposes for which it is used.

If you believe that information we hold about you is inaccurate, incomplete, outdated, or incorrect, you may contact us and request a correction.

Depending on the circumstances, we may ask you to provide additional information to verify the requested correction.

Once a correction is made, we may take reasonable steps to ensure that relevant third parties receiving the information are appropriately notified where required or appropriate.


21. Privacy Complaints

If you believe that we have mishandled your personal information or breached an applicable privacy obligation, we encourage you to contact us first.

Please provide:

  • Your name
  • Contact details
  • A description of your concern
  • Relevant dates
  • Any supporting information
  • The outcome you are seeking

We will review your complaint and take reasonable steps to investigate and respond.

We aim to handle privacy complaints fairly, respectfully, and as efficiently as reasonably possible.

If your concern is not resolved and Australian privacy law applies to the matter, you may also be able to contact the Office of the Australian Information Commissioner (OAIC) or another relevant privacy regulator.

The OAIC explains that organisations covered by the Australian Privacy Principles should have a process for receiving and handling privacy complaints.


22. Children’s Privacy

Our website is not intended to encourage children to provide personal information.

We do not knowingly seek to collect personal information from children where doing so would be unlawful or inappropriate.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us so that we can investigate and take appropriate action.

We may take reasonable steps to verify age or eligibility where required by law or where appropriate for our products and services.


23. Age and Legal Requirements

Certain products and services available through online businesses may be subject to age restrictions, identity requirements, advertising restrictions, import restrictions, possession restrictions, or other legal requirements depending on the customer’s location.

Where age or identity verification is required by applicable law or by our policies, we may request information necessary to complete that verification.

We may refuse, cancel, or restrict an order where we reasonably believe that a transaction would breach applicable law, our terms, or relevant eligibility requirements.

Any information collected for verification purposes will be handled in accordance with this Privacy Policy and applicable law.


24. Sensitive Information

We generally seek to avoid collecting sensitive information unless it is reasonably necessary and permitted by applicable law.

You should not provide sensitive personal information to us through ordinary website forms, email, live chat, or other channels unless we specifically request it through an appropriate process.

If you voluntarily provide sensitive information, we will handle it in accordance with applicable privacy obligations.


25. Direct Marketing Preferences

You have choices regarding promotional communications.

If you no longer wish to receive marketing emails, you can use the unsubscribe function included in the communication.

You may also contact our support team to request changes to your marketing preferences.

We will endeavour to process your request within a reasonable period.

Unsubscribing from promotional communications does not necessarily stop essential communications associated with your account or orders.


26. Third-Party Websites and Links

Our website may contain links to third-party websites, platforms, social-media services, payment providers, delivery services, or other external websites.

When you leave THCVapesOnline.com and visit a third-party website, that website’s privacy policy and terms may apply.

We are not responsible for the privacy practices, content, security, or policies of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.


27. Social Media

We may maintain or interact with social-media accounts and platforms.

If you communicate with us through a social-media platform, the platform may collect information about your interaction independently of us.

Your use of social-media services is governed by the relevant platform’s terms and privacy policies.

We may retain information that you voluntarily provide to us through social-media communications where reasonably necessary to respond to your enquiry or manage our relationship with you.


28. Reviews and Customer Feedback

If you voluntarily submit a product review, testimonial, rating, photograph, or other customer feedback, we may use that information for legitimate business and promotional purposes where you have provided the necessary permission or where otherwise permitted by law.

Before publishing customer information publicly, we will seek to respect applicable privacy requirements.

You should avoid including sensitive personal information, financial information, passwords, or other confidential information in a public review.


29. Business Transfers

If THCVapesOnline.com or part of our business is sold, transferred, reorganised, merged, or otherwise undergoes a change in ownership, personal information may form part of the business assets transferred to the relevant successor.

Any such transfer will be handled in accordance with applicable privacy and data-protection requirements.

Where appropriate, we may notify affected customers of significant changes.


30. Legal and Regulatory Disclosures

We may disclose personal information where reasonably necessary to:

  • Comply with applicable laws
  • Respond to lawful requests
  • Comply with court orders
  • Respond to government authorities
  • Investigate suspected fraud
  • Prevent illegal activity
  • Protect our website and systems
  • Protect customers or other individuals
  • Establish, exercise, or defend legal claims

We will seek to limit disclosures to what is reasonably necessary for the relevant purpose.


31. Data Quality

We aim to ensure that personal information we collect and use is reasonably accurate, complete, relevant, and current for the purpose for which it is used.

You can help us maintain accurate records by informing us when your contact details, delivery information, account information, or other relevant details change.

Australian Privacy Principle 10 addresses reasonable steps to ensure personal information is accurate, up to date, complete, and relevant for the purposes for which it is collected, used, or disclosed.


32. Anonymous or Pseudonymous Interactions

Where practical and where applicable law permits, you may be able to interact with us without identifying yourself or by using a pseudonym.

However, anonymous or pseudonymous interactions may not be possible where identification is reasonably necessary to:

  • Process an order
  • Process a payment
  • Arrange delivery
  • Verify an account
  • Meet legal requirements
  • Prevent fraud
  • Resolve a customer-specific request
  • Protect the security of our services

33. Your Privacy Choices

Depending on the circumstances and applicable law, you may have choices regarding:

  • Whether to create an account
  • Whether to receive marketing communications
  • Browser cookie settings
  • Analytics technologies
  • Providing certain optional information
  • Accessing personal information
  • Requesting correction of personal information
  • Making a privacy complaint

Some information is necessary to provide particular services. For example, refusing to provide a delivery address may prevent us from delivering an order.


34. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be necessary because of:

  • Changes to our business
  • Changes to website functionality
  • New service providers
  • Changes to technology
  • Changes to information-handling practices
  • Changes to applicable privacy laws
  • Changes to security practices
  • Regulatory developments

When we make changes, we may update the “Last Updated” date displayed at the beginning of this policy.

We recommend checking this page periodically so that you remain informed about how we handle personal information.

The OAIC recommends that privacy policies be reviewed and updated when information-handling practices change.


35. Contact Us About Privacy

If you have a question about this Privacy Policy, want to request access to or correction of your personal information, or wish to make a privacy complaint, please contact us.

Website: THCVapesOnline.com

Privacy Contact: [Insert privacy contact name or department]

Email: [Insert privacy email address]

Phone: [Insert phone number]

Business Address: [Insert business address]

When contacting us, please provide sufficient information for us to understand and respond to your request.


36. Important Notice

This Privacy Policy is intended to provide a clear explanation of how THCVapesOnline.com may handle personal information.

It should be tailored to the actual practices, technology, payment providers, analytics tools, advertising platforms, delivery providers, and legal obligations applicable to your business.

If our website uses specific third-party services, such as Google Analytics, Meta Pixel, Google Ads, Shopify, WooCommerce, Stripe, PayPal, Mailchimp, Klaviyo, or other platforms, those services should be accurately reflected in this Privacy Policy where they collect or process personal information.

Likewise, if your business operates across multiple countries, additional privacy requirements may apply.

Nothing in this Privacy Policy is intended to limit any rights that cannot lawfully be excluded under applicable privacy or consumer-protection laws.


Summary of Your Privacy Rights

In simple terms, depending on the laws that apply to you, you may have rights to:

Know — understand what personal information we collect and why.

Access — request access to personal information we hold about you.

Correct — ask us to correct inaccurate or incomplete information.

Choose — manage certain marketing and communication preferences.

Complain — raise a concern if you believe your privacy has not been handled appropriately.

Ask questions — contact us for clarification about our privacy practices.

We believe privacy should be understandable, accessible, and transparent. We therefore encourage customers to contact us whenever they have questions about how their information is handled.

Last Updated: 15 September 2026