Privacy Policy - Smart Spark Vapor

1. Introduction

Smart-Spark Vapor (“we,” “us,” or “our”) is deeply committed to safeguarding your privacy and ensuring your personal information is handled responsibly and transparently. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or interact with our website, smart-spark-vapor.com (the “Website”), or otherwise engage with our services. We prioritize your privacy rights and adhere rigorously to the requirements of applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of this Policy and Our Role as Data Controller

This Privacy Policy applies to all personal information processed through smart-spark-vapor.com and associated services. Smart-Spark Vapor is the data controller responsible for determining the purposes and means of processing your personal data. This Privacy Policy governs only data processed by Smart-Spark Vapor and does not extend to third-party platforms, websites, or services that may be linked on our Website.

3. Categories of Data We Process

We may collect and process the following categories of personal data:

a. Usage Data
Includes data about how you use our Website and services, such as your IP address, browser type and version, time zone setting and location, operating system and platform, pages viewed, session duration, and clickstream behavior.

b. Account Data
Includes identifying and contact information submitted during account registration such as your full name, billing and shipping addresses, phone number, and email address.

c. Profile Data
Includes information tied to your user profile, including purchase history, saved items, product preferences, and behavior patterns on smart-spark-vapor.com.

d. Communication Data
Includes records of correspondence with customer support, feedback submissions, and contact history initiated through email, contact forms, or other channels.

e. Technical Data
Includes information about your devices and software used to access our Website, such as hardware type, device identifiers, language settings, screen resolution, browser plug-in types, and device configuration details.

f. Transaction Data
Includes details necessary to complete purchases or process payments, including product orders, payment methods, billing information, delivery instructions, and transaction confirmations. Sensitive payment details (e.g., full card numbers) are processed by our secure payment providers and not stored by us.

g. Preference Data
Includes your marketing preferences, consent selections, survey responses, product wishlists, and other self-reported interests.

4. Legal Bases for Processing Personal Data

We rely on the following legal bases under the GDPR and comparable standards under the CCPA to process your personal data:

– Consent: When you provide your explicit permission (e.g., for receiving marketing communications).
– Contractual Necessity: Where processing is required to fulfill a purchase or other contractual obligation.
– Legal Obligation: For compliance with legal or regulatory requirements.
– Legitimate Interests: For purposes such as fraud prevention, improving the Website experience, supporting Website functionality, and ensuring the security of systems and data, provided such interests are not overridden by your individual rights.

5. Your Rights

Subject to applicable law and data residency, you have the following privacy rights:

– Right of Access: You have the right to request access to the personal data we hold about you.
– Right to Rectification: You may request correction of any inaccurate or incomplete personal information.
– Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, subject to certain legal obligations we may be required to retain.
– Right to Restriction: You may request limited processing of your data under certain conditions.
– Right to Data Portability: You have the right to receive a copy of your data in a structured, commonly used format.
– Right to Object: You may object to processing based on our legitimate interests or for marketing purposes.
– Right to Non-Discrimination (CCPA): You are entitled to exercise your rights without receiving less favorable treatment.

To exercise any of these rights, please contact us using the information in Section 13 below.

6. Security Measures

We implement and maintain robust technical and organizational measures to ensure the security of personal data. These include:

– End-to-end encryption and SSL connections during data transmission
– Multi-factor authentication and strict role-based access controls
– Secure data storage, including encrypted backups
– System monitoring and logging of access attempts
– Regular security audits and employee training on privacy best practices

7. International Transfers

We may store or process your data outside of your home country, including in jurisdictions that may not provide the same level of data protection. Where personal data is transferred outside the European Economic Area (EEA) or other regions with similar data protections, we use approved mechanisms such as EU Standard Contractual Clauses or ensure the receiving party is certified under accepted frameworks to safeguard your information.

8. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law.

– Usage and Technical Data: Retained for up to 12 months for performance analysis.
– Account and Profile Data: Stored until you delete your account or request erasure.
– Communication and Support Data: Retained for up to 3 years following the last interaction.
– Transaction Data: Retained for 7 years for tax and accounting requirements.
– Preference and Consent Records: Maintained until revoked or updated by you.

9. Cookie Policy

Our Website uses cookies and similar technologies to ensure a functional, user-oriented experience. Categories of cookies used include:

– Essential Cookies: Required for core site functionalities such as login and shopping cart features.
– Functional Cookies: Enable personalization and enhanced user experience (e.g., language settings).
– Analytics Cookies: Allow us to understand Website performance and optimize content (e.g., Google Analytics).
– Performance Cookies: Monitor key usage metrics to improve usability and infrastructure performance.

10. Cookie Management and Compliance

In accordance with GDPR and CCPA requirements, we obtain user consent before placing non-essential cookies. Cookie preferences can be updated via the Cookie Settings panel found on smart-spark-vapor.com. Most browsers also allow you to control cookies via default settings; however, disabling essential cookies may limit certain Website features.

11. Children’s Privacy

We do not knowingly collect or process data from children under the age of 13. If we become aware that data has been collected from a minor without verified parental consent, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information should contact us immediately.

12. Policy Updates

This Privacy Policy may be amended or updated periodically to reflect changes in law, technology, or business operations. If any material changes are made, we will notify users via the Website and, where required, seek renewed consent. We encourage you to review this page regularly to stay informed of our practices.

13. Contact Us

For questions about this Privacy Policy, your rights, or our handling of personal data, you may contact us at:

Smart-Spark Vapor
Email: [email protected]
Website: https://smart-spark-vapor.com

We are committed to protecting your privacy and ensuring your data is handled in compliance with all applicable data protection laws and regulations. If you have concerns, please do not hesitate to reach out using the contact details above.