Privacy Policy

Introduction

This Privacy Policy explains how Enigma Ltd trading as Vapemart (“we”, “us”, “our”) collects, uses, stores, and discloses personal information when you access our website or purchase products. We are committed to handling personal information in accordance with the Privacy Act 2020 (New Zealand).

By using this website, you acknowledge this Privacy Policy.

Information We Collect

We may collect personal information that is reasonably necessary to operate our retail business, including:

Personal Information

  • Name

  • Billing and delivery address

  • Email address

  • Phone number

  • Order and transaction details

Payment information is processed securely by third-party payment providers. We do not store full payment card details.

Automatically Collected Information

When you visit our website, we may collect limited technical information such as:

  • IP address

  • Browser type and device information

  • Pages visited and interactions with the website

This information is used for security, performance, and operational purposes.

How We Use Your Information

We use personal information only for lawful and necessary purposes, including:

  • Order processing and fulfilment

  • Age verification and legal compliance

  • Customer service and support

  • Account management

  • Fraud prevention and website security

  • Website performance and functionality analysis

We do not use personal information to send promotional or marketing communications relating to regulated vaping products.

Cookies

Our website uses cookies and similar technologies to support core functionality, security, and performance. Cookies may remember preferences such as login status or session activity.

You can disable cookies through your browser settings. Doing so may affect website functionality.

Disclosure of Information

We may share personal information with trusted third-party service providers where necessary to operate our business, including:

  • Payment processing providers

  • Courier and delivery services

  • Website hosting and security providers

These providers are required to use personal information only for the services they provide to us and to protect it appropriately.

We do not sell, rent, or trade personal information.

Data Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, or disclosure through technical and organisational safeguards. While we take data security seriously, no internet transmission can be guaranteed to be completely secure.

Your Rights

Under the Privacy Act 2020, you have the right to:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate or incomplete information

Requests can be made by contacting us using the details below. We may need to verify your identity before responding.

Retention of Information

We retain personal information only for as long as necessary to meet legal, operational, and accounting requirements.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The most current version will always be available on this website. Continued use of the website indicates acceptance of the updated policy.

Contact

If you have any questions about this Privacy Policy or how your personal information is handled, please contact: sales@vapemart.co.nz