Last updated: July 17, 2026

City Vaper respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how City Vaper, referred to as “City Vaper,” “we,” “us,” or “our,” collects, uses, shares, stores and protects personal information when you:

• Visit cityvaper.com
• Create or use a customer account
• Purchase or attempt to purchase a product
• Contact our customer-support team
• Subscribe to marketing communications
• Participate in promotions, surveys or reviews
• Otherwise interact with City Vaper online or offline

By using our website or providing personal information to us, you acknowledge the practices described in this Privacy Policy. Where consent is legally required, we will obtain it before collecting, using or disclosing personal information.

1. Scope of This Policy

This Privacy Policy applies to personal information collected through:

• The City Vaper website
• Customer accounts
• Online purchases and transactions
• Contact and support forms
• Newsletter subscriptions
• Promotions and surveys
• Product reviews
• Age-verification procedures
• Communications by email, telephone or other channels

This policy does not apply to independently operated third-party websites, applications or services that may be linked from our website.

2. What Personal Information We Collect

The information we collect depends on how you interact with City Vaper.

Contact and identification information

This may include:

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Province, postal code and country
• Date of birth or confirmation that you are of legal age

Account information

When you create an account, we may collect:

• Username
• Email address
• Encrypted account password
• Saved addresses
• Order history
• Wishlist information
• Product preferences
• Account settings

You are responsible for keeping your login information confidential.

Order and transaction information

When you make a purchase, we may collect:

• Products ordered
• Quantity and price
• Discount or promotional-code information
• Billing and shipping details
• Payment status
• Order date
• Delivery status
• Refund, return or warranty information
• Transaction and invoice identifiers

Payment details are generally processed by third-party payment providers. Depending on the payment method, we may receive limited information such as payment confirmation, card type, billing name or the final digits of a payment card. We do not intentionally store complete payment-card information on our own systems unless necessary and permitted through a compliant payment service.

Age-verification information

Because City Vaper sells age-restricted products, we may collect or request information needed to confirm that a customer meets the legal purchasing age.

This may include:

• Date of birth
• Confirmation that you are at least 19 years old
• Details from government-issued identification
• Age-verification results received from a service provider
• Delivery-age-verification results

Where identification is requested, it will be used only for lawful age-verification, fraud-prevention, regulatory or record-keeping purposes.

Customer-support information

When you contact us, we may collect:

• Your name and contact details
• The content of your message
• Order or account information
• Photographs or documents you provide
• Return, refund or warranty details
• Records of our communications with you

Please do not send unnecessary sensitive personal information through a general contact form.

Marketing and preference information

We may collect:

• Newsletter subscription status
• Marketing preferences
• Communication history
• Promotions entered
• Products viewed or selected
• Responses to surveys
• Interests inferred from your interaction with our website

Reviews and user-submitted content

When you submit a review or other content, we may collect:

• Display name
• Rating
• Written review
• Photographs or videos
• Product information
• Submission date

Information submitted for public display may be visible to other website visitors. Do not include private or sensitive information in a public review.

Technical and website-usage information

When you visit our website, we or our service providers may automatically collect:

• Internet Protocol address
• Browser type
• Device type
• Operating system
• Referring website
• Pages viewed
• Products viewed
• Date and time of access
• Session duration
• Shopping-cart activity
• General geographic area inferred from an IP address
• Cookie and similar technology identifiers
• Website errors and performance information

We may combine this information with other information where permitted by law.

3. How We Collect Personal Information

We may collect personal information:

Directly from you

For example, when you:

• Create an account
• Place an order
• Complete a checkout form
• Contact customer service
• Subscribe to our newsletter
• Submit a review
• Request a return or refund
• Participate in a survey or promotion

Automatically

Certain technical and usage information may be collected through:

• Cookies
• Pixels
• Web server logs
• Analytics tools
• Security and fraud-detection technologies
• E-commerce platform functions

From service providers and other parties

We may receive information from:

• Payment processors
• Shipping and courier companies
• Age-verification providers
• Fraud-prevention providers
• Website hosting and e-commerce providers
• Analytics and advertising providers
• Customer-support providers
• Social-media platforms, where you interact with us through those services

4. Why We Use Personal Information

City Vaper may use personal information to:

Process and fulfil purchases

This includes using information to:

• Confirm and process orders
• Process payments
• Send order confirmations
• Prepare orders for shipment
• Deliver products
• Provide tracking information
• Process returns, refunds and warranty requests

Verify age and legal eligibility

We may use personal information to:

• Confirm that customers meet applicable legal-age requirements
• Prevent sales to minors
• Verify identification where required
• Meet regulatory and delivery-verification requirements

Operate customer accounts

We may use information to:

• Create and maintain accounts
• Authenticate logins
• Save account preferences
• Display order history
• Provide wishlist or shopping-cart functionality
• Help recover an account

Provide customer service

We may use information to:

• Respond to questions
• Resolve complaints
• Investigate missing or damaged orders
• Process returns or exchanges
• Provide product compatibility assistance
• Communicate about an account or transaction

Protect City Vaper and its customers

We may use information to:

• Detect suspicious transactions
• Prevent fraud, theft or unauthorized access
• Investigate misuse of the website
• Enforce our Terms and Conditions
• Protect our legal rights
• Maintain website and payment security

Improve our website and services

We may use information to:

• Understand how visitors use the website
• Improve navigation and checkout
• Diagnose technical problems
• Measure website performance
• Develop new features
• Improve product organization and customer service

Where practical, we use aggregated or de-identified information for these purposes.

Communicate with you

We may send:

• Order confirmations
• Shipping notifications
• Account notices
• Security alerts
• Return or refund updates
• Responses to customer-support requests
• Important changes to our services or policies

These transactional communications are necessary for managing your account or purchase and may still be sent even when you unsubscribe from promotional emails.

Send marketing communications

With your consent where required, we may send:

• Product announcements
• Promotions
• Discount offers
• Newsletter content
• Restock notifications
• Information about City Vaper products or services

You may unsubscribe at any time by using the unsubscribe option in an email or contacting us.

Comply with legal requirements

We may use or preserve information to:

• Meet tax and accounting obligations
• Respond to lawful government or regulatory requests
• Maintain legally required business records
• Investigate legal claims
• Comply with court orders
• Meet age-restricted retail obligations

5. Consent

City Vaper obtains consent in a form appropriate to the sensitivity of the information and the purpose for which it is collected.

Consent may be:

• Express, such as selecting a newsletter checkbox
• Implied, such as providing a shipping address so we can deliver an order
• Otherwise permitted or required by law

We will not require consent for the collection, use or disclosure of information beyond what is reasonably necessary to provide a requested product or service, except where permitted by law.

You may withdraw consent by contacting us. Withdrawal may be subject to legal or contractual restrictions and reasonable notice.

Withdrawing consent may prevent us from:

• Completing an order
• Delivering products
• Maintaining an account
• Processing a return
• Providing certain services
• Meeting legal age-verification requirements

We will explain relevant consequences when reasonably possible.

6. Legal-Age Requirements

City Vaper’s website and products are intended only for individuals who meet the legal age required to purchase vapour products in their jurisdiction.

In British Columbia, customers must be at least 19 years old to purchase vapour products.

We may use:

• An online age gate
• Date-of-birth confirmation
• Account verification
• Government-issued identification
• Third-party age-verification services
• Adult-signature or age-verification delivery services

Passing an online age gate does not guarantee that an order will be approved. Additional age verification may be required before payment, fulfilment or delivery.

We do not knowingly sell products to minors. If we learn that information has been provided by a minor attempting to purchase age-restricted products, we may delete the information, close the account and cancel the transaction, subject to legal record-keeping requirements.

7. Cookies and Similar Technologies

City Vaper may use cookies and similar technologies to operate and improve the website.

A cookie is a small file stored on a browser or device when a website is visited.

Essential cookies

Essential cookies may be used to:

• Keep the website functioning
• Maintain a shopping cart
• Remember an age-gate response
• Secure account logins
• Process checkout
• Prevent fraud
• Maintain user sessions

Disabling essential cookies may prevent parts of the website from working properly.

Preference cookies

Preference cookies may remember:

• Account preferences
• Language or regional settings
• Recently viewed products
• Display preferences

Analytics cookies

Analytics technologies may help us understand:

• How visitors find the website
• Which pages are visited
• How visitors navigate the website
• Whether errors occur
• How website performance can be improved

Advertising and marketing cookies

Where used and where consent is required, marketing technologies may help:

• Measure advertising performance
• Limit repeated advertisements
• Understand campaign results
• Present more relevant promotions

You can manage cookies through your browser settings and, where available, the website’s cookie-preference tool. Blocking certain cookies may affect website features.

8. When We Share Personal Information

City Vaper does not rent personal information. We do not sell personal information for direct monetary payment.

We may disclose information to service providers that help us operate our business.

E-commerce and website providers

These providers may support:

• Website hosting
• Account management
• Online checkout
• Database storage
• Website security
• Technical maintenance

Payment processors

Payment providers may process:

• Payment-card information
• Billing information
• Transaction identifiers
• Fraud-prevention information

Payment providers process information according to their own terms and privacy practices.

Shipping and delivery providers

We may share information such as:

• Recipient name
• Shipping address
• Telephone number
• Email address
• Order or tracking number
• Adult-signature or age-verification requirement

Age-verification and fraud-prevention providers

These providers may receive information necessary to:

• Confirm age
• Verify identity
• Assess suspicious activity
• Prevent fraudulent purchases
• Reduce chargebacks

Analytics, marketing and communications providers

These providers may assist with:

• Website analytics
• Newsletter delivery
• Customer communications
• Advertising measurement
• Promotions
• Website performance

Professional advisers

We may disclose information to:

• Accountants
• Auditors
• Lawyers
• Insurers
• Financial institutions
• Other professional advisers

Such disclosure will be limited to information reasonably necessary for their services.

Government authorities and legal processes

We may disclose information where we reasonably believe disclosure is:

• Required by law
• Necessary to respond to a court order or lawful request
• Required by a regulator
• Necessary to investigate fraud or illegal activity
• Necessary to protect customers, City Vaper or the public
• Necessary to establish, exercise or defend legal claims

Business transactions

If City Vaper is involved in a proposed or completed:

• Merger
• Acquisition
• Financing
• Reorganization
• Sale of assets
• Business transfer
• Insolvency proceeding

Personal information may be disclosed to relevant parties, subject to appropriate confidentiality and legal safeguards.

9. Service Providers Outside Canada

Some service providers may store or process personal information outside British Columbia or outside Canada.

As a result, information may be accessible to courts, law-enforcement agencies or regulatory authorities under the laws of the jurisdiction where it is processed.

City Vaper uses contractual, organizational and technical safeguards where appropriate to require service providers to protect information and use it only for authorized purposes.

You may contact us to ask questions about the use of service providers outside Canada.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to:

• Complete the purpose for which it was collected
• Operate customer accounts
• Fulfil orders
• Provide support
• Process refunds or warranties
• Prevent fraud
• Resolve disputes
• Meet tax, accounting and regulatory requirements
• Enforce agreements
• Protect legal rights

Retention periods vary depending on the type of information and applicable requirements.

When information is no longer required, we may:

• Securely delete it
• Destroy it
• Anonymize it
• Remove identifying details

Backup copies may remain for a limited period until they are securely overwritten or deleted through normal system processes.

11. How We Protect Personal Information

City Vaper uses reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information.

Safeguards may include:

• Secure website connections
• Access controls
• Password protection
• Payment-provider security
• Limited employee or contractor access
• Security monitoring
• Software updates
• Backups
• Confidentiality requirements
• Fraud-prevention controls

Only individuals who reasonably require access for business purposes should be permitted to access personal information.

No website, database or electronic transmission is completely secure. Although we take reasonable steps to protect information, we cannot guarantee absolute security.

Customers should use a unique password and immediately notify us if they believe their account has been compromised.

12. Privacy Breaches

If City Vaper becomes aware of unauthorized access, loss, use or disclosure of personal information, we will investigate and take reasonable steps to contain and address the incident.

Where required by applicable law, we may:

• Notify affected individuals
• Notify the appropriate privacy regulator
• Maintain records of the incident
• Recommend protective actions
• Cooperate with payment providers, law enforcement or other relevant parties

13. Your Privacy Rights

Subject to applicable law, you may request:

• Confirmation of whether we hold personal information about you
• Access to your personal information
• Information about how it has been used
• Information about organizations to which it has been disclosed
• Correction of inaccurate or incomplete information
• Withdrawal of consent
• Closure of your customer account
• Deletion of information that is no longer legally or operationally required

Requests should be submitted in writing to our Privacy Officer.

We may need to verify your identity before processing a request. Please do not send copies of identification until we ask for them through an appropriate method.

Access may be limited where permitted or required by law, including where disclosure would:

• Reveal another person’s personal information
• Reveal confidential commercial information
• Interfere with a legal investigation
• Violate legal privilege
• Create a serious safety risk
• Conflict with a lawful retention obligation

When we cannot fulfil a request, we will explain the reason where legally permitted.

14. Correcting Your Information

You are responsible for providing accurate and current information.

You may update certain account details through your customer account. You may also contact us to request a correction.

We may ask for documentation where reasonably necessary to confirm a requested change.

15. Marketing Choices

You may unsubscribe from promotional emails by:

• Selecting the unsubscribe link in a marketing email
• Updating available account preferences
• Contacting City Vaper

Unsubscribe requests may take a reasonable period to process.

Even after unsubscribing, we may continue to send non-promotional messages related to:

• Active orders
• Delivery
• Account security
• Refunds
• Returns
• Warranty requests
• Legal or policy notices
• Customer-support inquiries

16. Third-Party Websites and Services

Our website may contain links to websites or services operated by other organizations.

City Vaper does not control and is not responsible for the privacy, security or content of independently operated third-party websites.

Before providing information to another organization, review its privacy policy and terms.

17. Social Media

When you communicate with City Vaper through a social-media platform, that platform may collect and use information according to its own privacy policy.

Information posted publicly on social media may be visible to other users. Do not submit order numbers, identification documents, payment information or other sensitive information in public comments.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our business
• Changes to our website
• New service providers or technologies
• Changes in legal or regulatory requirements
• Improvements to our privacy practices

The updated policy will be posted on this page with a revised “Last updated” date.

Where changes are material, we may provide additional notice through the website, customer account or email where appropriate.

Continued use of the website after an updated policy is posted will be subject to the updated policy, but we will obtain additional consent where legally required.

19. Privacy Questions and Complaints

City Vaper has designated a Privacy Officer who is responsible for overseeing privacy-related inquiries and complaints.

To ask a question, request access or correction, withdraw consent or make a privacy complaint, contact:

Privacy Officer
City Vaper
585 West Pender Street
Vancouver, British Columbia
V6B 1V5
Canada

Email: Contact.cityvaper@gmail.com

Please include “Privacy Request” in the subject line and provide enough information for us to understand and respond to the request.

We will review privacy complaints and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, as applicable.