Privacy Policy and How We Handle Your Data

Smoke Shop AUS Pty Ltd handles personal information in line with the Australian Privacy Principles. This page sets out what we collect and what we do with it.

What we collect

To fulfil an order we collect your name, delivery address, email address and phone number, and a record of what you bought. Payment card details are entered with our payment provider and are never stored on our systems or visible to us. We keep a record of the age confirmation given at checkout, because we are required to be able to show that orders were placed by adults.

If you contact us, we keep that correspondence so the next person who picks up the thread has the history. If you browse without ordering, we collect only anonymous, aggregated analytics about which pages are visited.

What we do with it

We use it to pack and send your order, to provide tracking, to answer questions, and to handle returns, warranty claims and spare parts. Your address is shared with Australia Post because a parcel cannot be delivered otherwise, and your order total is shared with the payment provider you choose.

We do not sell, rent or trade personal information, we do not share it with data brokers or advertising networks, and we do not add anyone to a mailing list without being asked. There is no marketing email programme on this site at present.

Cookies and analytics

This site stores your cart and your age confirmation in your own browser using local storage, so that the cart survives moving between pages. That data stays on your device and is not transmitted to us. We use privacy respecting, aggregated analytics to see which pages are used, with no cross site tracking and no advertising pixels.

Clearing your browser storage clears the cart and the age confirmation, which will simply be asked again on your next visit.

Storage, retention and your rights

Order records are retained for seven years because Australian tax law requires it. Correspondence is kept while it is useful and then deleted. Data is held on servers in Australia where the service allows it, and access is limited to the two people who run the shop.

You can ask what we hold about you, ask for a correction, or ask for your data to be deleted where we are not legally required to keep it. Write to us through the contact page and we will respond within a reasonable period. If you are unhappy with how we have handled a request, you can escalate to the Office of the Australian Information Commissioner.