Privacy & Terms
Last updated: January 2025 -- Applies to all users accessing GetVapePuff services across the EU, US, and Australia. Read carefully before use.
Mandatory Age Restriction -- Adults Only
GetVapePuff sells electronic nicotine delivery systems (ENDS) exclusively to adults of legal purchasing age. In the European Union this means 18 years or older; in the United States this means 21 years or older; in Australia this means 18 years or older. By accessing or using our platform, you confirm that you meet the minimum age requirement for your jurisdiction. We reserve the right to request age verification at any time and to cancel orders where age compliance cannot be confirmed. Selling or providing vape products to minors is a criminal offence. We take zero tolerance.
Privacy Policy
01 // Data Controller
GetVapePuff ("we", "us", "our") acts as the Data Controller for all personal data processed through our website, mobile applications, and order fulfilment systems.
Legal Entity: GetVapePuff International Ltd.
Registered Address: [Registered Office Address], China / EU Representative Office: [EU Address]
EU GDPR Representative: Designated representative in the European Union as required under Article 27 of the GDPR. Contact details available upon request.
This Privacy Policy applies to all personal data collected when you browse our site, create an account, place an order, or communicate with our support team.
02 // Data We Collect
Account Data
- ▸ Full name and date of birth (age verification)
- ▸ Email address and password (hashed)
- ▸ Phone number (optional, for delivery)
Order & Transaction Data
- ▸ Billing and shipping addresses
- ▸ Order history and product selections
- ▸ Payment metadata (no full card numbers stored)
Technical Data
- ▸ IP address and browser/device information
- ▸ Cookies and session identifiers
- ▸ Clickstream and navigation data
Age Verification Data
- ▸ Date of birth declaration
- ▸ Government ID data (if enhanced verification required)
- ▸ Verification timestamp and outcome
03 // Legal Basis & Purpose
| Purpose | Legal Basis (GDPR Art.6) |
|---|---|
| Order processing & fulfilment | Art. 6(1)(b) -- Contract performance |
| Age verification (18+ compliance) | Art. 6(1)(c) -- Legal obligation |
| Payment processing & fraud prevention | Art. 6(1)(b) & (f) -- Contract & Legitimate interests |
| Regulatory compliance (TPD, TGA, FDA) | Art. 6(1)(c) -- Legal obligation |
| Marketing communications | Art. 6(1)(a) -- Explicit consent |
| Analytics & site improvement | Art. 6(1)(f) -- Legitimate interests |
| Customer support | Art. 6(1)(b) -- Contract performance |
04 // Third-Party Sharing
We do not sell your personal data. We share data only with trusted processors under binding data processing agreements (DPAs) compliant with GDPR Article 28:
- ▸Payment Processors: Stripe, PayPal, or equivalent PCI DSS Level 1 certified providers. We never store raw card data.
- ▸Logistics Partners: Courier services (DHL, FedEx, local EU carriers) to fulfil shipping obligations.
- ▸Age Verification Services: Third-party age verification providers, processing only minimum necessary data.
- ▸Cloud Infrastructure: Hosting and storage providers operating under Standard Contractual Clauses (SCCs) where data leaves the EEA.
- ▸Regulatory Authorities: We may disclose data to law enforcement or regulatory bodies when legally compelled.
05 // Data Retention
Order & Transaction Records
Retained for 7 years from date of transaction to comply with EU VAT/accounting regulations and national tax laws.
Age Verification Records
Retained for the duration of your account and up to 3 years post-account closure for regulatory audit purposes.
Account Data
Retained while your account is active. Upon account deletion, personal data is anonymised within 30 days unless longer retention is legally required.
Marketing Preferences
Consent records and opt-out requests retained for 3 years as evidence of compliance.
06 // International Transfers
GetVapePuff is headquartered in China and operates infrastructure across the EU, US, and Australia. Personal data may be transferred internationally. We protect such transfers through:
- ▸ Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914/EU) for transfers to non-adequate third countries.
- ▸ Adequacy Decisions where applicable (e.g., transfers to countries the EU Commission has designated as providing adequate protection).
- ▸ Binding Corporate Rules (BCRs) for intra-group transfers where applicable.
- ▸ For Australian users: compliance with the Privacy Act 1988 and the Australian Privacy Principles (APPs).
- ▸ For US users: compliance with applicable state privacy laws including CCPA/CPRA (California).
07 // Your GDPR Rights
Right of Access (Art. 15)
Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
Right to Restriction (Art. 18)
Limit how we use your data in specific circumstances.
Right to Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Right to Object (Art. 21)
Object to processing based on legitimate interests, including direct marketing.
Right to Lodge a Complaint
You have the right to lodge a complaint with your national Data Protection Authority (DPA). In the EU, find your local DPA at edpb.europa.eu. To exercise any of the above rights, contact us at privacy@getvapepuff.com. We respond within 30 days.
08 // Children & Minors
Our services are strictly prohibited for anyone under the legal purchasing age in their jurisdiction.
We do not knowingly collect, store, or process personal data of individuals under the age of 18 (or 21 in applicable US states). Our registration process requires users to affirm their date of birth, and we deploy technical and procedural measures to prevent minors from accessing our platform.
If we discover that personal data of a minor has been collected without verified parental consent, we will immediately delete that data and cancel any associated account. If you believe a minor has provided us with data, contact us immediately at privacy@getvapepuff.com.
Pursuant to GDPR Article 8, processing of data for users under 16 in the EU requires explicit parental or guardian consent. We do not target users under 18 under any circumstances.
09 // Data Security
We implement appropriate technical and organisational measures under GDPR Article 32 to ensure a level of security appropriate to the risk:
Encryption
TLS 1.3 for data in transit. AES-256 encryption for data at rest. Passwords stored using bcrypt hashing.
Payment Security
PCI DSS Level 1 compliant payment processing. We never store card numbers, CVVs, or full payment credentials on our servers.
Access Controls
Role-based access control (RBAC), multi-factor authentication for staff, and regular security audits.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33, and affected individuals without undue delay per Article 34.
10 // Contact & DPO
For all privacy-related requests, questions, or complaints, contact our Data Protection Officer:
Email: privacy@getvapepuff.com
Subject Line: [GDPR Request] -- Your Name -- Request Type
Response Time: Within 30 calendar days of receipt.
EU Representative: Available upon written request for EU data subjects.
Terms of Service
01 // Acceptance of Terms
By accessing or using the GetVapePuff website, mobile application, or any related services (collectively "the Platform"), you agree to be legally bound by these Terms of Service ("Terms"), our Privacy Policy, and all applicable laws and regulations.
If you do not agree to these Terms in their entirety, you must immediately cease using the Platform. We reserve the right to modify these Terms at any time. Continued use of the Platform following notification of changes constitutes acceptance of the revised Terms.
These Terms constitute the entire agreement between you and GetVapePuff and supersede all prior agreements relating to your use of the Platform.
02 // Eligibility & Age Restriction
Strict 18+ Policy -- Zero Tolerance
You must be at least 18 years of age (or 21 where required by local law, including certain US states) to register an account, browse age-restricted content, or purchase any products from GetVapePuff.
By creating an account or placing an order, you represent and warrant that:
- ▸ You are of legal purchasing age in your country or state of residence.
- ▸ You will not purchase products on behalf of any person under the legal age.
- ▸ You consent to age verification checks at our discretion, including document verification.
- ▸ You understand that providing false information regarding your age is a violation of these Terms and may be an offence under applicable law.
Jurisdiction-Specific Age Requirements
Additionally, you must: (a) have the legal capacity to enter into binding contracts; (b) not be prohibited by law from purchasing tobacco or nicotine products; (c) be accessing the Platform from a jurisdiction where the sale of ENDS products is lawful.
03 // Products & Regulatory Compliance
All products listed on the Platform are intended for use by adults as substitutes for conventional tobacco products. They are not medicinal products and are not intended to diagnose, treat, cure, or prevent any disease.
Health Warning: Electronic cigarettes and vaping products contain nicotine, which is addictive. If you are pregnant, nursing, or have a pre-existing medical condition, consult a healthcare professional before use.
EU (TPD Compliance): Products sold in the EU comply with the Tobacco Products Directive 2014/40/EU as transposed into national law. Nicotine concentrations, tank capacities, and packaging meet TPD requirements.
Australia (TGA): Nicotine-containing products for personal therapeutic use require a valid prescription under Australian law. We comply with Therapeutic Goods Administration requirements and the Therapeutic Goods Act 1989.
United States (FDA): Products are compliant with applicable FDA Centre for Tobacco Products regulations. We do not sell products with unauthorised marketing orders in the US market.
Product images, descriptions, and specifications are for informational purposes. We reserve the right to discontinue or substitute products without notice.
04 // Orders & Purchase Contracts
All orders placed through the Platform constitute an offer to purchase. A binding contract is formed only upon our dispatch confirmation email. We reserve the right to decline or cancel any order for reasons including:
- ▸ Failed or suspected fraudulent payment
- ▸ Inability to verify customer age
- ▸ Product unavailability or stock errors
- ▸ Delivery restrictions to your location
- ▸ Suspicion of resale to minors
All prices are displayed in the applicable local currency and are inclusive of VAT where applicable. Prices are subject to change without notice prior to order confirmation.
05 // Payment & Payment Security
Your Payment is Protected
Accepted Payment Methods
We accept major credit and debit cards (Visa, Mastercard, American Express), PayPal, and other payment methods as displayed at checkout. All payments are processed by our certified third-party payment processor partners.
Fraud Prevention
We employ automated fraud detection systems. Transactions flagged as potentially fraudulent may be subject to additional identity verification. We reserve the right to refuse, hold, or reverse any transaction where fraud is suspected. Fraudulent activity will be reported to relevant law enforcement authorities.
Chargebacks & Disputes
Before initiating a chargeback with your bank, please contact our support team at support@getvapepuff.com. Fraudulent chargebacks may result in account suspension and legal action to recover costs.
Strong Customer Authentication (SCA)
In compliance with EU Payment Services Directive 2 (PSD2), transactions within the European Economic Area may require Strong Customer Authentication (two-factor authentication). Please ensure your payment method supports SCA to avoid transaction failures.
06 // Shipping & Delivery
GetVapePuff ships from regional warehouses located in the EU, US, and Australia, or directly from our facilities in China, depending on product availability and your delivery address.
Estimated delivery times are provided at checkout and are non-binding estimates. We are not liable for delays caused by customs authorities, carrier disruptions, or force majeure events.
Age verification at delivery: Our logistics partners may require proof of age upon delivery. Failure to provide adequate proof of legal purchasing age may result in non-delivery without refund.
Customs & Import Duties: Orders shipped internationally may be subject to customs duties, taxes, or import fees imposed by the destination country. These costs are the buyer's sole responsibility.
Restricted destinations: We do not ship to countries or regions where the sale or import of electronic cigarettes or nicotine products is prohibited by law.
07 // Returns & Refunds
EU Statutory Rights: Consumers in the European Union are entitled to a 14-day right of withdrawal under the Consumer Rights Directive (2011/83/EU), starting from the day you receive your order. Exceptions apply to consumable products (e-liquids, pods) that have been opened or unsealed for hygiene reasons.
Defective Products: If you receive a defective or incorrectly supplied product, contact us within 30 days of delivery at support@getvapepuff.com with your order number and photographic evidence. We will offer a replacement or full refund.
Non-returnable items: Opened e-liquids, pods, and consumable cartridges cannot be returned for hygiene and safety reasons, except where defective.
Refund Processing: Approved refunds will be credited to the original payment method within 14 business days of us receiving and verifying the returned goods.
08 // Limitation of Liability
To the maximum extent permitted by applicable law, GetVapePuff's total aggregate liability to you for any claim arising out of or related to these Terms or your use of the Platform shall not exceed the total amount paid by you in the 12 months preceding the claim.
We are not liable for: (a) indirect, consequential, incidental, or punitive damages; (b) loss of profits, data, or goodwill; (c) health effects arising from the use of vaping products beyond statutory consumer rights; (d) failure to comply with jurisdiction-specific regulations that you were not informed about at purchase.
Health Disclaimer: Nicotine is an addictive substance. Electronic cigarettes are not risk-free. They are intended exclusively for adult smokers seeking an alternative to conventional cigarettes and are not recommended for non-smokers, pregnant women, or individuals with cardiovascular conditions.
Nothing in these Terms limits our liability for: death or personal injury caused by our negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be excluded or limited under applicable EU consumer protection law.
09 // Intellectual Property
All content on the Platform, including but not limited to text, graphics, logos, product images, brand names, and software, is the property of GetVapePuff or our licensors and is protected by applicable intellectual property laws.
Third-party brand names (ELFBAR, VOZOL, VAPSOLO, ALFAKHAR, RANDM, JNR, MESII, et al.) are the trademarks of their respective owners. Our use of these names is solely for descriptive and commercial purposes as an authorised distributor.
You may not reproduce, distribute, modify, or create derivative works from any Platform content without our prior written consent.
10 // Governing Law & Dispute Resolution
These Terms are governed by and construed in accordance with applicable law, determined by your jurisdiction of residence:
European Union
Subject to the laws of the EU Member State of your residence. EU consumer protection laws apply and cannot be waived by contract.
United States
Governed by the laws of the State of [State], without regard to conflict-of-law principles. Federal arbitration rules may apply.
Australia
Governed by the laws of [State/Territory], Australia. Australian Consumer Law (ACL) rights cannot be excluded by contract.
EU Online Dispute Resolution: EU consumers may use the European Commission's Online Dispute Resolution platform at ec.europa.eu/odr for resolving disputes with traders.
Before initiating formal proceedings, we encourage you to contact our support team to seek an amicable resolution.
Age Policy
We strictly enforce 18+ (21+ in the US) age restrictions. All users are subject to age verification. We do not sell to minors.
© 2025 GetVapePuff International Ltd. All rights reserved. | These documents were last updated January 2025. | Vaping products contain nicotine, which is addictive. For adult smokers only.