Privacy Policy

When you use our website or purchase from VAP, we may collect the following types of information:

Personal Information

• Full name, email address, and phone number provided during registration or checkout
• Billing and delivery address within the UAE
• Date of birth for age verification purposes (you must be 18 or older)
• Payment information (card details are encrypted and processed securely — we do not store full card numbers)

Usage & Technical Data

• IP address, browser type, device information, and operating system
• Pages visited, time spent on site, and click-through behavior
• Referring URLs and search terms used to find our store
• Cookies and similar tracking technologies (see Section 5)

Communications

• Messages sent through our contact form, email, or live chat
• Order enquiries and customer support interactions
• Reviews and feedback you choose to submit

We use your information strictly for legitimate business purposes. We will never sell your personal data to third parties.

• Process and fulfill your orders, including coordinating delivery to your address in the UAE
• Verify your age before allowing the purchase of age-restricted vape products
• Send order confirmation, shipping updates, and delivery notifications via SMS and email
• Respond to your enquiries, complaints, and support requests promptly
• Send promotional offers and newsletters — only with your explicit consent
• Improve our website experience, product range, and customer service
• Comply with UAE laws, regulations, and regulatory requirements
• Detect and prevent fraud, unauthorized access, and security threats

As a responsible vape retailer operating in the UAE, we are legally required to verify that all customers are 18 years of age or older before purchasing any vaping products, e-liquids, or related accessories.

We process date-of-birth data solely for age verification and do not use it for any other profiling or marketing purposes. This data is handled in compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

We do not sell, trade, or rent your personal information. We may share data only with trusted partners who help us operate our business:

• Payment Processors: Secure gateway providers (e.g., Stripe, Telr, PayTabs) to handle transactions — they are PCI-DSS compliant
• Logistics & Delivery Partners: UAE courier companies to fulfill and deliver your orders to your address
• Email & SMS Platforms: Communication tools used to send order notifications and marketing (with consent)
• Analytics Providers: Google Analytics and similar services that help us understand website usage in anonymized form
• Legal Authorities: When required by UAE law, court order, or to protect the rights and safety of our customers and business

All third-party partners are contractually bound to handle your data securely and only for the specified purpose.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide personalized content.

• Essential Cookies: Required for the website to function — shopping cart, login sessions, age verification state
• Performance Cookies: Analytics data that helps us improve site speed and user experience (anonymized)
• Functional Cookies: Remember your preferences such as language, currency, and recently viewed products
• Marketing Cookies: Used to show you relevant ads on other platforms — only active with your consent

You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect site functionality.

We take the security of your personal information seriously and implement industry-standard measures to protect it:

• All data is transmitted over SSL/TLS encrypted connections (HTTPS)
• Payment data is processed through PCI-DSS compliant payment gateways — we never store full card numbers
• Access to customer data is restricted to authorized personnel on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Our store is hosted on Shopify, which maintains enterprise-grade security infrastructure

While we take every reasonable precaution, no transmission over the internet is 100% secure. Please safeguard your account password and notify us immediately if you suspect unauthorized access.

Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), you have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@vapuae.com. We will respond within 30 days. You may also lodge a complaint with the UAE Data Office.

We retain personal data for as long as necessary to fulfill the purposes described in this policy, or as required by UAE law:

• Order & transaction records — retained for 5 years to comply with UAE commercial and tax regulations
• Account information — retained while your account is active and for 2 years after last activity
• Age verification data — retained for the duration required by UAE law and deleted securely thereafter
• Marketing consents — retained until you withdraw consent or 3 years of inactivity
• Support communications — retained for 2 years to handle any disputes or follow-up requests

Our website may contain links to third-party websites, social media platforms, or partner pages. These sites operate under their own privacy policies, which we do not control.

We encourage you to review the privacy policy of any external site you visit. VAP is not responsible for the privacy practices or content of third-party websites.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to registered customers for significant changes
• Display a prominent notice on our website for a reasonable period

Continued use of our website after updates constitutes acceptance of the revised policy. We encourage you to review this page periodically.