Last updated: May 15, 2026
Vape On Main ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit vapeonmain.ca (the "Site") or shop with us in person at 5819 132 Ave NW, Edmonton, AB. We comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
1. Information We Collect
Information you give us
- Contact & identity information — your full legal name (as it appears on government-issued photo ID), email address, phone number, billing and shipping address, and date of birth (for age verification).
- Order information — products purchased, order amounts, pickup or delivery preferences.
- Account information — if you create an account: login credentials and preferences.
- Payment information — handled by our payment processors (Shopify Payments / Stripe). We do not store full credit card numbers on our servers.
- Identity verification at delivery — drivers visually verify your photo ID matches the order name. We do not photocopy, photograph, or store images of your ID. Only the fact that ID was verified is recorded.
- Communications — messages sent via our contact form, email, or social media.
- Age verification — your date of birth is used to confirm you are 18 or older. We store only the verification result, not your full DOB, in your browser.
Information collected automatically
- Device & usage data — IP address, browser type, operating system, pages visited, time spent, referring URL.
- Cookies and similar technologies — see Section 4 below.
2. How We Use Your Information
We use personal information to:
- Fulfill and deliver your orders, including in-store pickup notifications.
- Verify your age and identity at the time of online checkout, in-store pickup, and at-the-door delivery.
- Send order confirmations, shipping updates, and customer service responses.
- Send marketing emails or SMS — only with your explicit consent. You can unsubscribe any time.
- Operate, maintain, and improve our Site and store experience.
- Detect and prevent fraud, abuse, and security incidents (including chargeback investigations and age-verification fraud).
- Comply with legal obligations under Health Canada vaping regulations, Alberta tobacco/vaping laws, and tax law.
3. Sharing of Information
We do not sell your personal information. We share it only with trusted service providers and only as needed to operate the business:
- Shopify Inc. — our ecommerce platform.
- Payment processors (Shopify Payments, Stripe, Apple Pay, Google Pay) — to authorize and complete payment.
- Delivery drivers and shipping carriers (in-house drivers, Canada Post, couriers) — to deliver your order and verify your ID at delivery.
- Email/SMS providers (e.g. Klaviyo, Shopify Email) — only if you opt in to marketing.
- Analytics providers (Google Analytics, Shopify Analytics) — aggregate, anonymous data only.
- Law enforcement or regulators — when required by Canadian law, court order, or to protect rights, safety, and property.
4. Cookies & Tracking
We use cookies and similar technologies to keep your cart contents, remember your age verification status, measure traffic, and improve the Site. You can disable cookies in your browser, but parts of the Site (including checkout) may not work correctly without them.
5. Marketing Communications
If you sign up for our newsletter or SMS alerts we'll only send messages you've consented to receive. Every email contains an unsubscribe link, and you can reply STOP to any SMS. You can also email us via the contact page to be removed from marketing lists.
6. Data Retention
We keep personal information only as long as needed for the purposes outlined above and to meet legal, accounting, and tax obligations. Order records are typically retained for seven (7) years per Canadian tax requirements. Marketing contacts are kept until you unsubscribe.
7. Security
We use industry-standard security measures (TLS encryption, PCI-DSS-compliant payment processing, restricted staff access) to protect your information. No system is 100% secure, but we take reasonable steps to safeguard your data.
8. Your Rights
Under PIPEDA and PIPA, you have the right to:
- Access the personal information we hold about you.
- Request corrections to inaccurate or incomplete information.
- Withdraw consent for marketing or non-essential uses.
- Request deletion of your personal information (subject to legal retention requirements).
- File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
To exercise any of these rights, contact us through the contact page with proof of identity.
9. Children's Privacy
Our Site and Services are restricted to adults 18+ only. We do not knowingly collect information from anyone under 18. If you believe we have collected information from a minor, contact us and we will delete it immediately.
10. Third-Party Links
Our Site may link to third-party websites (brand pages, social media, payment providers). We are not responsible for the privacy practices of those sites.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be communicated by notice on this page or by email if you have an account.
12. Contact Us
Reach us through the contact page or visit us in-store at 5819 132 Ave NW, Edmonton, AB T5A 1C3.