Privacy Policy | Urban Smoke TX
Privacy Policy
Last Updated: May 2026
Urban Smoke TX (“we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information responsibly and transparently. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website, create an account, place an order, or otherwise interact with us.
By using our Site or services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Site.
1. Information We Collect
We collect the following categories of personal information:
A. Information You Provide Directly
- Identity Information: Name, username, date of birth (required for age verification)
- Contact Information: Email address, phone number, billing address, shipping address
- Account Information: Login credentials, account preferences, order history
- Payment Information: Credit/debit card numbers, billing details (processed by PCI-compliant payment providers; we do not store full card numbers on our servers)
- Communication Records: Emails, chat transcripts, customer service inquiries, and feedback you submit
- Reviews and User Content: Product reviews, ratings, photos, or other content you voluntarily submit
B. Information Collected Automatically
When you visit our Site, we automatically collect certain information through cookies, web beacons, and similar technologies:
- Device Information: IP address, browser type, operating system, device type, screen resolution
- Usage Information: Pages visited, time spent on pages, products viewed, clicks, search queries, referral sources
- Location Information: General geographic location derived from your IP address (not precise GPS location)
- Cookies and Tracking Data: See our Cookie Policy section below for details
C. Information from Third Parties
- Age Verification Services: We share limited information (name, address, date of birth) with third-party age verification providers to confirm you are 21 or older.
- Payment Processors: Transaction confirmation and fraud prevention data.
- Shipping Carriers: Delivery confirmation and signature verification data.
- Analytics Providers: Aggregated, anonymized data about Site usage.
2. How We Use Your Information
We use your personal information for the following purposes:
Table
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your orders | Contract performance |
| Verifying your age (21+) | Legal compliance (federal Tobacco 21 law) |
| Processing payments and preventing fraud | Legitimate business interest / Legal compliance |
| Shipping and delivering your orders | Contract performance |
| Providing customer support and resolving issues | Contract performance / Legitimate business interest |
| Sending order confirmations, shipping updates, and account notifications | Contract performance |
| Sending marketing communications (with your consent) | Consent |
| Analyzing Site usage and improving our services | Legitimate business interest |
| Complying with legal, tax, and regulatory obligations | Legal compliance |
| Enforcing our Terms and Conditions and preventing abuse | Legitimate business interest / Legal compliance |
| Personalizing your experience and recommending products | Legitimate business interest (with opt-out) |
3. Age Verification & Data Sharing
Federal law requires us to verify that every customer is 21 years of age or older. To comply, we share limited personal information (name, billing address, date of birth) with third-party age verification services. These providers:
- Are contractually prohibited from using your data for any purpose other than age verification
- Are contractually prohibited from selling or sharing your data with other parties
- Use secure, encrypted methods to process verification requests
- Do not perform hard credit checks that affect your credit score
If automated verification fails, we may request a copy of your government-issued ID. Any ID submitted is reviewed only by authorized personnel, stored securely, and deleted after verification is complete.
4. Marketing & Communications
Email Marketing: With your explicit consent (opt-in), we may send you promotional emails about new products, special offers, sales events, and vaping news. You can:
- Opt in during account creation or checkout
- Opt out at any time by clicking the “Unsubscribe” link in any marketing email
- Manage preferences in your account settings
Text Message Marketing (SMS): If you opt in to receive SMS messages, you will receive promotional texts and order updates. Message and data rates may apply. You can opt out by replying “STOP” to any message.
We Do NOT:
- Sell your email address or phone number to third-party marketers
- Send marketing communications to anyone under 21
- Use deceptive subject lines or misleading content (CAN-SPAM Act compliance)
Transactional Communications: Even if you opt out of marketing emails, we will still send you transactional emails related to your orders, account, and legal requirements (e.g., order confirmations, shipping updates, password resets).
5. Cookies & Tracking Technologies
Our Site uses cookies and similar technologies to enhance your experience:
Types of Cookies We Use:
Table
| Cookie Type | Purpose | Example |
|---|---|---|
| Essential | Required for Site functionality | Shopping cart, checkout, login session |
| Preference | Remember your settings and preferences | Language, currency, recently viewed products |
| Analytics | Understand how visitors use our Site | Google Analytics, heatmaps |
| Marketing | Deliver relevant advertisements | Facebook Pixel, Google Ads remarketing |
Managing Cookies: You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of our Site, such as the shopping cart or checkout.
Do Not Track: Our Site does not currently respond to “Do Not Track” signals from browsers. However, you can opt out of targeted advertising through the Digital Advertising Alliance at www.aboutads.info.
6. How We Share Your Information
We do not sell your personal information. We only share it with trusted third parties as necessary to operate our business:
Table
| Third Party | Purpose | Data Shared |
|---|---|---|
| Payment Processors (Stripe, PayPal, Square) | Process transactions securely | Payment details, billing address |
| Shipping Carriers (UPS, FedEx, etc.) | Deliver your orders | Name, shipping address, phone number, package contents |
| Age Verification Services | Confirm you are 21+ | Name, address, date of birth |
| E-commerce Platform (Shopify, WooCommerce, etc.) | Host and operate our Site | Account data, order history |
| Email Marketing Service (Klaviyo, Mailchimp, etc.) | Send marketing emails | Email address, name, purchase history |
| Analytics Providers (Google Analytics) | Analyze Site traffic | Anonymized browsing data |
| Fraud Prevention Services | Detect and prevent fraud | Transaction data, IP address, device info |
| Legal & Regulatory Authorities | Comply with legal obligations | Information required by subpoena, court order, or law |
All third-party service providers are contractually bound to:
- Use your data only for the specified purpose
- Maintain appropriate security measures
- Not sell or disclose your data to unauthorized parties
7. Data Security
We implement industry-standard technical and organizational measures to protect your personal information:
- SSL/TLS Encryption: All data transmitted between your browser and our Site is encrypted using 256-bit SSL/TLS.
- PCI DSS Compliance: Payment processing is handled by PCI DSS Level 1 compliant providers. We never store your full credit card number.
- Access Controls: Employee access to customer data is restricted to authorized personnel only and protected by role-based permissions.
- Secure Storage: Customer data is stored on secure servers with firewalls, intrusion detection, and regular security audits.
- Regular Updates: We maintain up-to-date security patches and software updates.
Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.
8. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:
Table
| Data Type | Retention Period | Reason |
|---|---|---|
| Order and transaction records | 7 years | Tax compliance, legal obligations, fraud prevention |
| Account information | Until account closure or deletion request | Account management, order history, customer service |
| Age verification records | 3 years | Federal compliance, dispute resolution |
| Marketing consent records | Until consent is withdrawn | Proof of consent for regulatory compliance |
| Customer service communications | 2 years | Dispute resolution, quality improvement |
| Website analytics data | 26 months | Site improvement (anonymized after 26 months) |
After the retention period expires, we securely delete or anonymize your data.
9. Your Privacy Rights
Depending on your state of residence, you may have the following rights regarding your personal information:
For All US Residents:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Opt-out of Marketing: Unsubscribe from promotional emails and SMS at any time
For California Residents (CCPA / CPRA): Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following additional rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it
- Right to Delete: Request deletion of personal information, subject to certain exceptions
- Right to Opt-Out of Sale: We do not sell personal information. However, you have the right to opt out of any future sale if our practices change.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights (e.g., by denying services, charging different prices, or providing a different level of quality)
- Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of sensitive personal information (e.g., government ID numbers, precise geolocation) to only what is necessary to provide our services
For Virginia, Colorado, Connecticut, and Utah Residents: If you reside in a state with comprehensive privacy legislation (VCDPA, CPA, CTDPA, UCPA), you may have rights similar to California residents, including access, correction, deletion, and opt-out rights. Contact us for state-specific disclosures.
How to Exercise Your Rights: To exercise any of these rights, contact us at:
- Email: [privacy@urbansmoketx.com] or [support@urbansmoketx.com]
Please include “Privacy Rights Request” in the subject line. We will verify your identity before processing your request and will respond within 45 days as required by applicable law. If we need more time, we will notify you.
Authorized Agents: You may designate an authorized agent to make requests on your behalf. The agent must provide written authorization signed by you, and we may require you to verify your identity directly.
10. Children’s Privacy
Our Site is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If we become aware that we have collected personal information from a person under 21, we will delete that information immediately. If you believe we have collected information from a minor, please contact us immediately.
11. International Users
Our Site is intended for users in the United States. If you access our Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. We will post the updated Privacy Policy on this page with a revised “Last Updated” date. Material changes will be notified via email or a prominent notice on the Site. We encourage you to review this page periodically.