Privacy Policy

1. Who we are

PuffGallery is an online store selling disposable vapes to adults. In this policy, “we”, “us” and “our” mean PuffGallery. If you have any question about your data, contact us at muneebhybrid@gmail.com or through our contact page.

2. What information we collect

• Order details: your name, email address, billing and shipping address, phone number (optional) and the products you order.
• Account details: if you create an account, your login email and order history.
• Messages: anything you send us through the contact form or by email.
• Payment information: crypto payments are processed by NOWPayments. We receive the payment status and transaction reference, but we never receive or store your wallet’s private keys or any card details.
• Technical information: basic data your browser sends, such as IP address, device and browser type, used to run and secure the website.

3. How we use your information

• To process, pack, ship and track your order.
• To send order confirmations, tracking numbers and replies to your messages.
• To handle cancellations, replacements and refunds.
• To prevent fraud and keep the website secure.
• To meet our legal obligations, such as keeping order records.

We do not sell your personal information, and we do not send marketing emails unless you ask us to.

4. Who we share it with

We only share the information needed to complete your order:

• Couriers and postal services, so they can deliver your parcel.
• NOWPayments, our crypto payment processor, to handle your payment.
• Our hosting provider, which stores the website and its data securely.
• Authorities, only when the law requires it.

5. Cookies

We use a small number of cookies that the store needs to work:

• Cart and session cookies that remember what is in your cart and keep you logged in.
• Age check cookie that remembers you confirmed you are 18 or over, for 30 days.
• Order source cookies from WooCommerce that record how you reached our store (for example, from a search engine), linked to your order.

We do not use advertising or social media tracking cookies.

6. How long we keep it

We keep order records for as long as the law requires for tax and accounting. Contact messages are kept only as long as needed to help you. You can ask us to delete your account at any time.

7. Your rights

Depending on where you live (for example, under the GDPR in the EU and UK), you can ask to see, correct, download or delete the personal information we hold about you, or object to how we use it. Email us and we will reply within 30 days. You can also complain to your local data protection authority.

8. Security

Our website uses an encrypted (SSL) connection, and access to order data is limited. No system is 100% secure, but we take reasonable steps to protect your information.

9. Age restriction

Our store is only for adults aged 18 or over (21 or over where local law requires it). We do not knowingly collect information from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.