Who We Are
This Privacy Policy explains how Calm Nic (“we,” “us,” or “our”) collects, uses, discloses, and protects the personal information of visitors and customers of our online store (the “Site”). We are based in Canada, and this policy is written to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). If you are visiting from outside Canada, additional rights available under your local law (for example, the EU/UK GDPR or the California Consumer Privacy Act) are honored on request even where not separately listed below.
By using this Site or placing an order, you agree to the collection and use of information as described in this policy.
Information We Collect at Checkout
When you place an order, we collect the information necessary to fulfill it, including:
- Contact information – name, email address, phone number
- Billing and shipping address
- Order details – items purchased, quantities, order value, order history
- Payment information – processed directly by our payment provider (see below); we do not store your full card number on our servers
- Age attestation – our products are age-restricted. By placing an order, you confirm that you meet the minimum legal age to purchase nicotine products in your jurisdiction. We do not currently collect or verify government ID as part of this process.
- Technical data – IP address, browser type, and device information, collected automatically for fraud prevention and site functionality
If you create an account, contact us for support, or sign up for marketing emails, we also collect the information you provide through those channels (for example, messages sent via live chat, or the email address you submit to a newsletter signup).
How We Use Your Information
We use the information we collect to:
- Process, fulfill, and ship your orders, and communicate with you about them
- Provide customer support and respond to inquiries
- Detect and prevent fraud, abuse, and unauthorized transactions
- Send order confirmations, shipping updates, and (where you’ve opted in) marketing communications
- Understand how visitors use our Site, so we can improve it
- Comply with legal and tax record-keeping obligations
We do not sell your personal information to third parties.
Third-Party Service Providers
We share information with the following categories of third-party providers, only as needed for them to perform their function:
- Website analytics – Google Analytics and Google Site Kit collect information about how visitors use our Site (pages viewed, time on site, general location, device type) to help us understand and improve the shopping experience.
- Shipping carriers – We share your name and shipping address with the carrier used to deliver your order.
These providers are authorized to use your information only as necessary to provide their services to us, and are bound by their own privacy and data protection obligations.
Cookies & Tracking
We use cookies and similar technologies to keep your cart and session working correctly, remember your preferences, and power the analytics tools described above. You can control or disable cookies through your browser settings; doing so may affect some Site functionality, such as your cart.
Data Retention
We retain order and transaction records for as long as required to meet Canadian tax and business record-keeping obligations (generally at least six years). Account information is retained while your account remains active. If you unsubscribe from marketing emails, we stop using your email for that purpose but may retain a record of the unsubscribe request. You may request earlier deletion of your personal information as described below, subject to our legal retention obligations.
Your Rights
Under PIPEDA and applicable provincial privacy laws, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Withdraw consent for uses of your information we don’t need for legal or contractual reasons (such as marketing)
- Request deletion of your personal information, subject to our legal and tax record-keeping obligations
- Ask questions about how your information has been collected, used, or disclosed
Visitors outside Canada may have additional rights under their local law (such as data portability under the GDPR, or the right to opt out of the “sale” or “sharing” of personal information under the CCPA). We will honor applicable requests regardless of where you’re located.
To exercise any of these rights, contact us using the details below.
Data Security
We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Children’s Privacy
Our products are age-restricted and this Site is not directed at, and should not be used by, anyone under the legal age to purchase nicotine products in their jurisdiction. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “Last updated” date at the top of this page will indicate when the most recent changes were made. We encourage you to review this page periodically.
Contact Us
For any questions about this Privacy Policy, or to make a request regarding your personal information, contact us at:
Email: compliance@calmnic.com