Privacy Policy
Privacy policy
This page sets out what personal information AUVapeClub holds, why we hold it, where it lives, who else handles it, and how you can see it, correct it or have it deleted. We do not sell it and we do not rent it out.
We follow the Australian Privacy Principles, as set out in the Privacy Act 1988.
What we hold, and when we get it
| When | What we hold |
|---|---|
| You place an order | Name, email address, phone number and delivery address, plus what was in your cart, what it came to, and any note you added at checkout. If you upload an image of a transfer receipt, it is stored with the order record. |
| You sign in | Just the email address you use to sign in. A single-use link goes to that address, so no password exists for us to keep. Your orders are filed in an account under that email, carrying the name and phone number from those orders, and signing in simply opens it. Any delivery addresses you choose to save are kept in the account too. |
| You browse | Routine server logs (your IP address, the pages requested and your browser type), a note of how you reached the site, and Google Analytics, which tallies visits and which pages get read. The cookies and browser storage behind that are listed at the foot of this page. |
| You get in touch | Whatever you send by email or WhatsApp. It stays on file so we can sort out the order or question it belongs to. |
| You leave a review | The display name you pick and the words you write, tied to the order they came from so we can check the purchase really happened. |
What we use it for
Packing and posting your order comes first. We also use it to cancel any order that appears to be for a minor or from one, to answer your questions and sort out replacements, and to email you as the order moves along (placed, paid, shipped, cancelled), with a text when it ships if you gave an Australian mobile number. It tells us which pages and links lead to orders, and it feeds the accounting records Australian law requires. Marketing email only ever goes to people who have asked for it.
Who else handles it
| Who | What they handle |
|---|---|
| Australia Post | Your name, address and phone number, which is how the parcel finds you. |
| The packing team | An order-management workspace. Orders land in our database in Sydney first and are then copied across to the workspace, receipt images and all. |
| Our other stores | AUVapeClub is one of several online stores under the same owner. All of them feed one shared order system, where your order may be linked to a customer record that already exists. |
| Fastmail and Twilio | Fastmail delivers the order and sign-in emails. Twilio sends the dispatch text to Australian mobiles. |
| Backups | Copies of order records, kept so they can be restored after a failure. |
| Google Analytics | The page visits it counts. Your order details, and the private links to your orders, never go to it. |
| Anything you message us through it. | |
| Bookkeeping | Orders and payments only, and never your browsing. |
Nobody buys or rents your details from us.
Data held overseas
The order database sits in Sydney. Several of the services above, though, hold or work on personal information outside Australia. Those are the order-management workspace, the backups, Fastmail, Twilio and Google Analytics. Some of your information is therefore held overseas, and we use those services only for the purposes explained here.
How long we keep it
Order records, with any receipt images, stay for as long as accounting, tax and after-sales needs call for. A saved address stays in your account until you remove it or ask us to close the account.
Seeing, correcting or deleting your information
Email orders@auvapeclub.com and we will show you what we hold, correct it, or delete it if you ask. Deletion happens within a reasonable time. The exception is an order record that the law requires us to retain, and if that applies we tell you what was kept and why. If you think we mishandled your information, raise it with us first. If that does not settle it, you can take it up with the OAIC, which is the Office of the Australian Information Commissioner.
What your browser keeps
- Sign-in cookie: only appears once you sign in, and keeps your session going.
- shop_attr cookie: lasts 30 days. It notes the page you first landed on, the website that sent you here and any campaign (UTM) tags attached to the link, and it goes to us with your order so we can tell where the order started. That makes it not anonymous. Details of your latest visit also sit in session storage until the tab is shut.
- Local storage: your cart and the fact that you confirmed your age stay inside your own browser.
- Google Analytics 4: sets cookies of its own to tally visits and pages read. The data is pseudonymous and is never matched to your name.
Clear this site's cookies and data from your browser and all of the above goes. Next visit you will be asked for your age again, and the cart will be empty.