Muze Vape

Privacy

Last updated: [DATE]

Muze Vape (“we”, “us”) is a vape shop in Tustin, California, selling nicotine products online and over the counter to adults 21 and over. This policy explains what we collect, why, and what you can ask us to do with it. It applies to muzevape.com and to in-store purchases.

Information we collect

You give us:

Name, email, phone number, billing and shipping address
Account login details and rewards balance
Order history, payment method details (card number is handled by our payment processor, not stored by us)
Date of birth and, where required, government ID details for age verification
Emails, reviews, messages and support requests you send us
Referral information, if you use the rewards program
We collect automatically:
IP address, device and browser type, pages viewed, referring URL
Cart and browsing activity on the site
Cookie and similar identifiers (see section 5)
We receive from others:
Payment confirmation and fraud signals from our payment processor
Delivery and signature status from our shipping carrier
Age-verification results from our verification provider, where used

Why we use it

To process orders, take payment, deliver or prepare pickup, and handle returns
To verify that every buyer is 21 or over — this is a legal requirement, not a marketing choice
To run the rewards program and apply points you have earned
To answer questions and resolve order problems
To send order updates, and — only if you opt in — new arrivals and offers
To detect fraud, prevent resale abuse and keep the site secure
To meet tax, record-keeping and nicotine-product compliance obligations
To understand which pages and products work, so we can improve the store
We do not use your data to make automated decisions that have a legal effect on you, beyond age and fraud checks.

Age verification Because we sell nicotine, we collect date of birth at checkout and may ask for government ID at pickup or on delivery. ID is checked to confirm age and name match, then not retained beyond the verification record required by law. If you fail verification, the order is cancelled and refunded; we keep only the minimum record needed to show we checked.
Legal bases and consent Where consent is required — marketing emails, non-essential cookies — we ask for it and you can withdraw it at any time. Order and compliance messages are sent regardless of marketing consent because they are necessary to fulfil the sale.
Cookies and tracking We use:

Strictly necessary cookies for cart, checkout, login and security — these cannot be switched off
Preference cookies that remember choices such as currency or saved address
Analytics cookies that tell us which pages are used
Marketing cookies, only where you consent, that help measure ads
You can block or delete cookies in your browser; blocking necessary cookies will break checkout.

Who we share with We share only what is needed, and only with:

Payment processors and fraud-prevention providers
Shipping carriers, including adult-signature delivery services
Age-verification providers
Email and SMS platforms that send order and marketing messages
Hosting, CDN and analytics providers
Review platforms, when you submit a review
Professional advisers, tax authorities and law enforcement, where legally required
We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law.

Marketing You can unsubscribe from marketing at any time using the link in any email, or by emailing us. Transactional messages — order confirmation, shipping, refunds and age-verification requests — will still be sent.
How long we keep it

Order and tax records: as long as required by tax and nicotine-retail rules
Age-verification records: the minimum period required by law
Account and rewards data: while your account is active, then deleted or anonymised
Marketing preferences: until you withdraw consent
Analytics data: retained in aggregate, not tied to you

Your California privacy rights If you are a California resident, you have the right to:

Know what personal information we collect, use and disclose
Request a copy of the specific information we hold about you
Correct inaccurate information
Delete your information, subject to records we must keep by law
Opt out of sale or sharing — we do neither, but you may still submit the request
Limit use of sensitive personal information — we use ID data only for age verification
Not be discriminated against for exercising these rights
To exercise any right, email [email protected] with “Privacy request” in the subject. We will verify your identity — usually by matching the request to your order history or account — and respond within 45 days. You may use an authorised agent; we may ask for proof of authorisation.

Security We use HTTPS across the site, tokenised card processing, access controls and least-privilege staff access. No system is perfect; if a breach affects your data we will notify you as required by law.
Children Our site and store are for adults 21 and over. We do not knowingly collect information from anyone under 21. If you believe a minor has provided information, email us and we will delete it.
Third-party links Brand pages and guides may link to manufacturers. Their privacy practices are their own; this policy stops at our site.
Changes We may update this policy. The date at the top shows the current version, and material changes will be announced on the site or by email.
Contact Muze Vape, Tustin, California
Email: [email protected]