Geek Bar Canada — Privacy Policy

1. Introduction

Geek Bar Canada (geekbartech.com) respects your privacy. This policy explains what personal information we collect when you browse or buy from this website, why we collect it, how we protect it, and the rights you have over it.

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using this website you agree to the practices described here.

2. Information we collect

Information you give us

• Name, shipping and billing address, email address and phone number when you place an order.
• Age confirmation, and where required at delivery, verification that you meet the legal vaping age.
• Account credentials if you create an account, stored only as a secure hash.
• Messages, photos and order details you send to our support or wholesale teams.
• Your email address if you subscribe to product drops and restock alerts.

Information collected automatically

• IP address, browser type, device type, operating system and screen size.
• Pages viewed, products browsed, time on site and the referring website.
• Cookie identifiers used to keep your cart and age confirmation in place.

3. How we use your information

• To process, pack, ship and, where necessary, refund your orders.
• To verify that purchasers meet the legal vaping age in their province or territory.
• To provide customer support and handle warranty or authenticity claims.
• To send order confirmations, dispatch notices and tracking updates.
• To send marketing emails, only where you have opted in, and always with a one-click unsubscribe.
• To detect fraud, prevent abuse and secure the website.
• To understand which products and pages are popular so we can improve the store.

We do not use your information for automated decision-making that produces legal effects, and we do not sell personal information to anyone.

4. Our basis for processing

We rely on your consent for marketing communications and non-essential cookies; on the performance of a contract to fulfil your orders; on legal obligation for age verification, tax and excise record-keeping; and on our legitimate interests for fraud prevention and improving the store. You may withdraw consent at any time.

5. When we share information

We share the minimum necessary with a small number of trusted service providers, each bound by contract to protect it:

We may also disclose information where required by law, court order, or a lawful request from a Canadian regulator or law-enforcement agency, and in the event of a business sale or merger — in which case you will be notified.

6. Cookies

Cookies are small files stored on your device. We use four categories:

• Strictly necessary — your cart, checkout session, and your 19+ age confirmation so the age gate does not reappear on every page.
• Functional — remembering your province, currency and preferences.
• Analytics — aggregated statistics about how the store is used.
• Marketing — only set where you have consented, to measure campaign performance.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will prevent checkout from working.

7. How we protect your data

• All traffic is encrypted end to end with TLS (HTTPS) across the whole site.
• Payment data is tokenised and handled entirely by PCI-DSS compliant processors.
• Administrative access is restricted, individually credentialed and protected by multi-factor authentication.
• Systems are patched regularly and backups are encrypted at rest.

No method of transmission over the internet is perfectly secure. If a breach ever affects your personal information and creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

8. How long we keep it

Order and transaction records are retained for seven years to meet Canadian tax and excise requirements. Age-verification records are kept as long as regulation requires. Marketing subscriptions are held until you unsubscribe. Support correspondence is kept for two years. Analytics data is retained in aggregated form for twenty-six months. Anything no longer needed is securely deleted.

9. Your rights

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix anything inaccurate or incomplete.
• Deletion — ask us to erase your data, subject to records we must legally retain.
• Withdraw consent — opt out of marketing at any time using the link in any email.
• Portability — receive your data in a common machine-readable format.
• Complain — raise a concern with us, or with the Office of the Privacy Commissioner of Canada.

Email privacy@geekbartech.com and we will respond within 30 days. We may ask you to confirm your identity before releasing information.

10. Age restriction

This website is strictly for adults who meet the legal vaping age in their province or territory (19+, or 18+ in Alberta, Manitoba, Quebec and Saskatchewan). We do not knowingly collect information from minors. If we learn that we have, the account and its data are deleted immediately.

11. International transfers

Some of our service providers process data outside Canada, including in the United States and the European Union. Where that happens, the transfer is governed by contractual safeguards requiring a level of protection comparable to Canadian law. Data stored outside Canada may be subject to the laws of that jurisdiction.

12. Changes and contact

We may update this policy as our practices or the law change. The revision date at the top of this page always reflects the current version, and material changes are announced on this page.

Privacy Officer — privacy@geekbartech.com
General support — support@geekbartech.com
Or reach us through the contact page.