Privacy Policy

At Vapes Castle, your trust means everything to us. We are committed to protecting your personal information and being completely transparent about how we collect, use, and secure your data. This Privacy Policy explains what information we gather when you visit vapescastle.com, why we collect it, how it is used, and the rights you have as our customer.

By accessing our website or placing an order with us, you agree to the terms described in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our site.

Information We Collect

1. Personal Information

When you browse our store, create an account, or make a purchase, we may collect the following personal details:

• Full Name
• Email Address
• Phone Number
• Shipping and Billing Address
• Payment Information (e.g., credit or debit card details – processed securely through encrypted payment gateways)
• Order History and Purchase Preferences

2. Non-Personal Information

We also collect non-identifiable data automatically through cookies and similar tracking technologies, including:

• IP Address and General Location
• Browser Type and Version
• Device Type and Operating System
• Pages Viewed and Time Spent on Site
• Referral Sources and Click Behavior
• Interactions with Website Features and Advertisements

How We Use Your Information

The information we collect is used solely to improve your experience and operate our business effectively. Specifically, we use your data to:

• Process and fulfill orders, and manage payment transactions
• Send order confirmations, shipping updates, and delivery notifications
• Personalize your shopping experience and recommend products you may enjoy
• Respond to customer support inquiries and resolve issues
• Send promotional offers, new product alerts, and newsletters (only with your consent)
• Monitor and improve the performance, security, and usability of our website
• Detect and prevent fraudulent activity or unauthorized access
• Comply with applicable federal and state laws and regulations

How We Share Your Information

Vapes Castle does not sell your personal information. However, in limited circumstances, we may share your data with trusted third parties:

• Payment Processors: Secure gateways such as Stripe or similar providers handle payment data. They are PCI-DSS compliant and do not store your full card details on our servers.
• Shipping & Logistics Partners: We share your name and delivery address with carriers (e.g., USPS, FedEx, UPS) solely to fulfill your orders.
• Service Providers: Trusted vendors who assist with website hosting, email marketing, analytics, and customer support may access limited data under strict confidentiality agreements.
• Legal Compliance: We may disclose information when required by law, court order, or to protect the legal rights, safety, or property of Vapes Castle and our customers.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Cookies and Tracking Technologies

Vapes Castle uses cookies and similar tracking technologies to enhance your shopping experience. Cookies are small text files stored on your device that help us:

• Remember your preferences, saved items, and cart contents
• Keep you logged into your account across sessions
• Personalize product recommendations based on browsing history
• Analyze site traffic patterns and improve page performance
• Deliver relevant advertisements and measure their effectiveness

You can manage or disable cookies through your browser settings at any time. Please note that disabling cookies may limit certain features of our website, such as saved carts or personalized recommendations.

Security of Your Information

Protecting your personal data is a top priority at Vapes Castle. We implement industry-standard security measures including:

• SSL Encryption across all pages of our website
• Secure payment gateways that are fully PCI-DSS compliant
• Access controls that restrict employee access to personal data on a need-to-know basis
• Regular security audits to identify and address potential vulnerabilities

While no online system can be guaranteed 100% secure, we continuously review and strengthen our practices to ensure your information remains protected.

Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal data. These include:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to update or correct inaccurate or outdated data.
• Deletion: Request that we delete your personal data, subject to any legal obligations we must fulfill.
• Opt-Out of Marketing: Unsubscribe from promotional emails at any time by clicking the “Unsubscribe” link in any of our emails.
• Data Portability: Request that your data be transferred in a machine-readable format where applicable.
• Restrict Processing: Request that we limit how we use your data in certain circumstances.

California Residents (CCPA/CPRA): You have the right to know what personal data we collect, request deletion of your data, and opt out of the sale or sharing of your personal information. We do not sell personal data.

EU/UK Residents (GDPR): You have the right to access, correct, delete, or object to the processing of your data. You may also withdraw consent at any time.

To exercise any of these rights, please contact us at:
📧 support@vapescastle.com
📍 Rosemount Ave, New Castle, IN 47362

Age Restriction Policy

Vapes Castle sells nicotine-containing products intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from minors. Age verification is required at checkout.

If you believe a person under the age of 21 has submitted personal information on our website, please contact us immediately at support@vapescastle.com and we will take prompt action to delete that information from our records.

Third-Party Links

Our website may contain links to external websites or social media platforms. This Privacy Policy applies only to vapescastle.com. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any external sites you visit before submitting personal information.

Compliance with Privacy Laws

Vapes Castle is committed to complying with all applicable privacy laws and regulations, including:

• GDPR (General Data Protection Regulation) – for customers in the European Union
• CCPA/CPRA (California Consumer Privacy Act / Privacy Rights Act) – for California residents
• CalOPPA (California Online Privacy Protection Act) – requiring disclosure of data collection practices
• COPPA (Children’s Online Privacy Protection Act) – we do not market to or collect data from anyone under 21

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. Any updates will be posted on this page with a revised effective date. For significant changes, we will notify you via email or a prominent notice on our website.

We encourage you to review this page regularly to stay informed about how we protect your information.