Privacy policy

Who is responsible for your information

Gatecrasher Vape House is the responsible party for personal information processed through this website and our ecommerce operations. We process personal information under the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.

Trading name

Gatecrasher Vape House

Email

[email protected]

Telephone

+27645092508

What we collect

Depending on how you use the store, we may collect:

• identity and contact details, including your name, email address, telephone number, and account credentials;
• billing and delivery details, including addresses and delivery instructions;
• transaction details, including products ordered, order history, payment status, refunds, and correspondence;
• age-confirmation information required to restrict access to adult products;
• support, returns, review, and enquiry information you choose to provide;
• technical information such as your IP address, browser, device, session data, and website activity; and
• marketing preferences and records of consent or objection.

We collect information directly from you, automatically from your browser, and where necessary from service providers involved in payments, delivery, fraud prevention, or customer support.

Why we use your information

We process personal information only where there is a lawful reason. This includes:

• creating and managing your account, cart, orders, payments, delivery, returns, and refunds;
• verifying age eligibility and complying with legal duties relating to regulated products;
• responding to enquiries and providing customer support;
• keeping transaction, tax, accounting, security, and compliance records;
• detecting fraud, misuse, security threats, and technical faults;
• improving store performance and understanding how the website is used; and
• sending direct marketing where you consented or where POPIA permits communication with an existing customer about our own similar products.

Information marked as required during checkout or account creation is needed to supply the requested service, comply with law, or protect the transaction. Without it, we may be unable to create an account, accept an order, process payment, or arrange delivery.

Who receives information

We share only what is reasonably necessary with operators and service providers that help run the store, including hosting and IT providers, payment providers, banks, delivery partners, communications providers, professional advisers, fraud-prevention services, and public authorities where the law requires it.

Payment details submitted to an external payment provider are processed under that provider’s own terms and privacy practices. We do not sell personal information.

Some service providers may process information outside South Africa. Where information crosses borders, we take reasonable steps to use a lawful transfer basis and require an appropriate level of protection as contemplated by POPIA.

Cookies and analytics

The website uses necessary cookies and similar technologies to maintain sessions, remember your cart, support security, and keep the store working. Where enabled, analytics technologies such as Google Tag Manager may collect device and usage information to help us understand website performance.

You can restrict cookies in your browser. Blocking necessary cookies may prevent account, basket, age-gate, or checkout functions from working correctly.

Retention and security

We keep personal information only for as long as needed for the purpose collected, to complete transactions, resolve disputes, enforce agreements, and meet tax, accounting, consumer protection, and other legal duties. When retention is no longer authorised or required, we delete, destroy, or de-identify the information where reasonably practicable.

We use reasonable technical and organisational safeguards appropriate to the information and risks involved. No internet service is completely secure. If a security compromise creates a notification duty under POPIA, we will notify affected people and the Information Regulator as required.

Your POPIA rights

Subject to POPIA and applicable procedure, you may:

• ask whether we hold personal information about you;
• request access to that information;
• ask us to correct, update, delete, or destroy information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading, unlawfully obtained, or no longer authorised for retention;
• object to processing where POPIA permits;
• withdraw consent where processing depends on consent; and
• opt out of direct marketing at any time, without charge.

We may request proof of identity before acting on a request. Some records may need to be kept where law requires retention or permits refusal of access.

Contact and complaints

Send privacy requests or objections through our contact page or email [email protected] . Please mark the request for the attention of the Information Officer.

If we do not resolve your concern, you may lodge a complaint with the Information Regulator (South Africa). Visit inforegulator.org.za or email [email protected].

Changes to this policy

We may update this policy when our services, providers, or legal duties change. The effective date above shows when this version took effect. Material changes will be brought to your attention where reasonably practicable.