SmokAura – Premiere Online Vape Shop Disposable Vapes, Vape Juice, Mods

INTRODUCTION

SmokAura.com (“Company,” “we,” “us,” “our,” or “SmokAura”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains:

• What information we collect

• How we collect and use your information

• How we protect your data

• Your rights regarding your personal information

• How to contact us with privacy concerns

This Privacy Policy applies to SmokAura.com and all associated services. By accessing and using our website, you acknowledge that you have read and understand this Privacy Policy and consent to our collection and use of information as described herein.

---

INFORMATION WE COLLECT

SmokAura collects various types of information from you, including:

Personal Information

• Full name

• Email address

• Phone number

• Date of birth (for age verification)

• Government-issued ID information (for age verification)

• Billing address

• Shipping address

• Account login credentials

Payment Information

• Credit card number (processed and stored securely by Stripe only)

• Expiration date

• Billing address

• Card verification code

• Transaction history and payment history

Shipping Information

• Delivery address

• Recipient name

• Phone number for delivery contact

• Delivery preferences and special instructions

Age Verification Information

• Date of birth

• Government-issued ID details (type, number, state, expiration)

• AgeChecker.net verification data

• Age verification timestamps and results

Communication Information

• Customer service inquiries and communications

• Email correspondence

• Live chat conversations

• Support ticket history

• Feedback and product reviews

Technical Information

• IP address and geolocation

• Browser type and version

• Operating system

• Device type and identifiers

• Website usage patterns and behavior

• Pages visited and time spent on site

• Referring URLs

• Click patterns and navigation data

• Search queries on our site

Location Information

• IP-based geolocation

• State of residence (for product availability)

• GPS data (if you grant permission)

---

HOW WE COLLECT INFORMATION

Information You Provide Directly

• Account registration form

• Age verification affirmations

• Checkout and payment process

• Customer service communications

• Product reviews and ratings

• Feedback surveys

• Contact forms

• Profile settings and preferences

Information Collected Automatically

• Cookies: Small files stored on your device tracking your activity (see Cookies section)

• Web Beacons: Tracking pixels in emails and on web pages

• Log Files: Server logs recording access and activity

• Analytics: Google Analytics and similar services tracking user behavior

• Device Information: Your device’s technical specifications and identifiers

• Session Tracking: Information about your browsing session

Third-Party Collection

• AgeChecker.net: Age verification data integration

• Stripe: Payment processing and fraud detection

• UPS/FedEx: Shipping address and tracking information

• IP Geolocation Services: State and location detection

• Payment Processors: Fraud detection and chargeback information

---

HOW WE USE YOUR INFORMATION

SmokAura uses collected information for the following purposes:

Order Fulfillment & Delivery

• Processing and fulfilling your orders

• Calculating shipping costs and taxes

• Arranging delivery with UPS or FedEx

• Communicating order status and tracking information

• Resolving delivery issues and disputes

Age Verification & Compliance

• Verifying you are 21+ years of age

• Complying with Tobacco 21 federal law

• Compliance with PACT Act requirements

• Detecting and preventing underage sales

• Reporting to state tax authorities (as required by PACT Act)

Payment Processing & Fraud Prevention

• Processing credit card payments through Stripe

• Preventing fraudulent transactions

• Detecting unusual payment patterns

• Protecting against unauthorized access

• Complying with PCI DSS security standards

Account Management

• Maintaining your user account

• Authenticating your identity

• Resetting passwords and account recovery

• Managing account preferences and settings

• Providing account notifications and updates

Communication & Customer Service

• Responding to customer inquiries

• Sending order confirmations and receipts

• Providing shipping and delivery notifications

• Sending customer service updates

• Resolving disputes and complaints

• Following up on feedback

Marketing & Promotional Communications

• Sending promotional emails (if you opt-in)

• Notifying you of special offers and discounts

• Informing you of new products

• Conducting marketing research

• Creating targeted advertising

Website Improvement & Analytics

• Analyzing website usage patterns

• Identifying technical issues and bugs

• Improving website functionality and user experience

• Understanding customer preferences

• Optimizing website performance

• Conducting A/B testing

Legal Compliance & Safety

• Complying with applicable laws and regulations

• Responding to legal requests and court orders

• Protecting against fraud and illegal activity

• Preventing harm to our company or users

• Enforcing these Terms and Conditions

• Establishing, maintaining, or defending legal claims

Product Development

• Improving our products and services

• Conducting market research

• Understanding customer needs and preferences

• Developing new features and offerings

---

AGE VERIFICATION DATA

AgeChecker.net Integration

SmokAura uses AgeChecker.net‘s real-time age verification service to confirm that you are at least 21 years of age. During this process:

Information Shared with AgeChecker.net:

• Your name

• Date of birth

• Government-issued ID information

• State of residence

• Phone number

Data Handling:

• AgeChecker.net stores verification data according to its own privacy policy

• SmokAura receives only the verification result (pass/fail)

• You should review AgeChecker.net‘s privacy policy at www.agechecker.net

• We retain verification timestamps for compliance purposes

• Failed verification attempts are logged for security

Legal Requirements

• Age verification is required by federal law (Tobacco 21)

• State law may require additional verification

• We are required to report age verification data to state tax authorities

• We retain age verification records for at least 3 years

Your Rights

• You may request your age verification data be deleted (after purchase)

• You may correct inaccurate age verification information

• You have the right to opt-out of future marketing but not age verification

• Age verification data cannot be deleted if required by law

---

PAYMENT INFORMATION & SECURITY

Stripe Payment Processing

SmokAura uses Stripe for all payment processing. Stripe is a PCI DSS Level 1 compliant payment processor.

Important: SmokAura does NOT directly store or access your full credit card information. All payment data is:

• Processed exclusively through Stripe’s secure servers

• Encrypted with industry-standard SSL/TLS encryption

• Handled in compliance with PCI DSS standards

• Protected by Stripe’s security infrastructure

Information Stored

SmokAura stores:

• Last 4 digits of your credit card (for reference only)

• Card type (Visa, Mastercard, etc.)

• Billing address

• Transaction amount and date

• Payment status (authorized, declined, refunded)

Information NOT Stored by SmokAura

• Full credit card numbers

• Card verification codes (CVV)

• Card expiration dates (in full)

• Sensitive personal authentication data

Your Payment Rights

• You have the right to dispute unauthorized charges

• You can request a refund according to our Refund Policy

• You can update payment information in your account

• You can review your transaction history anytime

---

DATA SHARING & THIRD PARTIES

SmokAura shares your information with the following third parties:

Essential Service Providers

Stripe (Payment Processing)

• Receives: Card information, billing address, transaction details

• Purpose: Credit card processing and fraud detection

• Privacy Policy: stripe.com/privacy

AgeChecker.net (Age Verification)

• Receives: Name, date of birth, ID information, state

• Purpose: Real-time age verification

• Privacy Policy: agechecker.net/privacy

UPS & FedEx (Shipping Carriers)

• Receives: Full name, shipping address, phone number, order contents

• Purpose: Order delivery and tracking

• Receives: Driver information for adult signature verification

• Privacy Policies: ups.com/privacy, fedex.com/privacy

Email Service Provider

• Receives: Email address, order information

• Purpose: Sending order confirmations, receipts, and notifications

Legally Required Disclosures

State Tax Authorities (PACT Act Compliance)

• We are required to report sales information to states where customers reside

• Information shared: Customer name, address, purchase date, product type, quantity

• Frequency: Monthly or as required by state law

• Purpose: Tax collection and product tracking

Non-Shared Information

• SmokAura does NOT sell personal data to third parties for profit

• SmokAura does NOT share data with marketing companies

• SmokAura does NOT trade customer lists

• SmokAura does NOT share payment information with unauthorized parties

Business Transfers

If SmokAura is acquired, merged, or undergoes bankruptcy:

• Customer data may be transferred to the acquiring entity

• You will be notified of such transfer

• The acquiring entity must honor this Privacy Policy

---

COOKIES & TRACKING TECHNOLOGIES

What Are Cookies?

Cookies are small text files stored on your device that help us remember information about your visit and improve your experience.

Types of Cookies We Use

Strictly Necessary Cookies

• Purpose: Enable website functionality, login, security

• Required: Yes, site cannot function without these

• Examples: Session tokens, login credentials, CSRF protection

Performance & Analytics Cookies

• Purpose: Analyze website usage and improve performance

• Tools: Google Analytics, similar analytics services

• Data Collected: Pages visited, time on site, traffic sources

• Required: No, can be disabled

Functional Cookies

• Purpose: Remember your preferences and settings

• Examples: Language preference, currency selection, layout preferences

• Required: No

Marketing & Advertising Cookies

• Purpose: Deliver targeted advertising and promotional content

• Examples: Remarketing pixels, Facebook Pixel

• Required: No, requires consent

Cookie Duration

• Session Cookies: Deleted when you close your browser

• Persistent Cookies: Remain on your device for up to 2 years

Cookie Consent

• We comply with cookie consent requirements

• Upon first visit, you will see a cookie consent banner

• You can choose to accept or decline non-essential cookies

• You can change cookie preferences in your browser settings

Your Cookie Rights

• You can disable cookies in your browser settings

• You can delete existing cookies anytime

• Disabling cookies may limit website functionality

• You can opt-out of tracking via Do-Not-Track headers

Tracking Technologies

We may use:

• Web Beacons: Transparent pixels tracking email opens

• Log Files: Server logs recording access information

• Device IDs: Identifiers for your device

• IP Tracking: Your internet protocol address for geolocation

---

YOUR PRIVACY RIGHTS

You have the following rights regarding your personal information:

Right to Access

• You may request a copy of all personal information we hold about you

• Submit requests to info@SmokAura.com

• We will provide information within 30 days

Right to Correction

• You may correct inaccurate or incomplete information

• Update your account settings anytime

• Contact customer service for assistance with corrections

Right to Deletion

• You may request deletion of your personal information

• We may retain information required by law or for legal claims

• Deletion of age verification data may result in account closure

• Submit deletion requests to info@SmokAura.com

Right to Data Portability

• You may request your data in a portable format

• We will provide data in CSV or JSON format

• Submit requests to info@SmokAura.com

Right to Opt-Out

• You may opt-out of promotional emails anytime

• Click “Unsubscribe” in marketing emails

• Update preferences in your account settings

• You cannot opt-out of essential communications or age verification

Right to Withdraw Consent

• You may withdraw consent for data processing anytime

• Submit withdrawal requests to info@SmokAura.com

• Withdrawal may prevent order fulfillment

How to Exercise Your Rights

Email your request to info@SmokAura.com with:

• Your name and account email

• Specific rights you wish to exercise

• Detailed description of your request

• Supporting documentation if applicable

We will respond within 30 days. If we cannot fulfill your request, we will explain the reason.

---

CALIFORNIA RESIDENTS (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

Right to Know

• You may request what personal information we collect about you

• You may request the purpose for collection

• You may request the sources of collection

• You may request categories of third parties with whom we share data

Right to Delete

• You may request deletion of personal information

• Exceptions: Information required by law, fraud prevention, or legal claims

• We will not delete information necessary to fulfill your order

Right to Opt-Out of Sale/Sharing

• SmokAura does NOT sell personal information for money

• SmokAura does NOT share information for cross-context behavioral advertising

• You have the right to opt-out even though we don’t engage in these practices

Do Not Track Signals

• We honor user requests to disable tracking

• You can send “Do Not Track” signals through your browser

• We will limit tracking as requested

Right to Non-Discrimination

• You will not face discrimination for exercising CCPA rights

• We will not charge different prices or provide different service quality

• We will not deny goods or services based on privacy requests

California Shine the Light

• You may request information about data shared with third parties

• California residents may make one request per year

• Submit requests to info@SmokAura.com

---

DATA RETENTION

SmokAura retains personal information based on the following retention schedule:

Account Information

• Retention Period: For duration of account + 3 years after closure

• Purpose: Maintaining account history, dispute resolution, legal compliance

• Deletion: Deleted after retention period unless required by law

Payment Information

• Retention Period: 7 years (per federal banking regulations)

• Purpose: Tax compliance, chargeback defense, fraud investigation

• Deletion: Automatically purged after retention period

Age Verification Records

• Retention Period: Minimum 3 years (PACT Act requirement)

• Purpose: Legal compliance, preventing underage sales, state reporting

• Deletion: Retained longer if required by state law

Shipping Information

• Retention Period: 2 years for delivery records

• Purpose: Delivery dispute resolution, carrier claims, tracking

• Deletion: Deleted after retention period

Communication Records

• Retention Period: 2 years for customer service records

• Purpose: Quality assurance, dispute resolution, legal claims

• Deletion: Deleted after retention period

Marketing Information

• Retention Period: Until you opt-out

• Purpose: Promotional communications, marketing research

• Deletion: Deleted upon request or after 5 years of inactivity

Analytics & Technical Data

• Retention Period: 13 months (Google Analytics standard)

• Purpose: Website improvement, usage analysis

• Deletion: Automatically deleted after retention period

Legal Hold

• Information subject to legal holds may be retained indefinitely

• Information required by law will be retained as long as required

• We will notify you if information is subject to legal hold

---

SECURITY MEASURES

SmokAura employs comprehensive security measures to protect your personal information:

Encryption & Data Protection

• SSL/TLS Encryption: All data transmissions use 256-bit SSL encryption

• At-Rest Encryption: Stored data is encrypted using industry-standard algorithms

• Database Security: Encrypted database access with multiple authentication factors

• Secure Protocols: HTTPS-only connections throughout the website

Access Controls

• Restricted Access: Only authorized employees can access personal data

• Role-Based Access: Employees can only access data necessary for their roles

• Authentication: Multiple factor authentication for administrative access

• Audit Logs: All data access is logged and monitored

Network Security

• Firewall Protection: Network firewalls prevent unauthorized access

• Intrusion Detection: Continuous monitoring for malicious activity

• DDoS Protection: Protection against distributed denial-of-service attacks

• Vulnerability Scanning: Regular security assessments and penetration testing

Employee Training

• Employees receive annual privacy and security training

• Confidentiality agreements required for all staff

• Secure data handling procedures implemented

• Incident response protocols established

Stripe Integration

• Payment data handled exclusively by Stripe

• PCI DSS Level 1 compliance by Stripe

• No credit card data stored on SmokAura servers

• Fraud detection by Stripe’s advanced algorithms

Third-Party Security

• Third parties must maintain equivalent security standards

• Third parties must comply with data protection laws

• Regular audits of third-party security practices

• Data processing agreements in place with all vendors

Limitations

• No security system is 100% secure or impenetrable

• You are responsible for maintaining password security

• Using public WiFi increases transmission security risks

• Report suspected breaches immediately to info@SmokAura.com

---

CHILDREN’S PRIVACY

SmokAura does NOT knowingly collect information from individuals under 21 years of age. Our services are intended exclusively for adults 21+.

Prohibited Access

• Individuals under 21 are prohibited from accessing the website

• Accounts created by underage individuals will be immediately terminated

• Age verification data indicates access by minors may result in law enforcement notification

Parental Responsibility

• Parents and guardians are responsible for monitoring minor internet access

• We encourage parents to discuss internet safety with their children

• Resources available at Common Sense Media (commonsensemedia.org)

If We Learn of Underage Access

• We will immediately delete all information collected from the minor

• We will not use the information for any purpose

• We may report the access to appropriate authorities

Questions About Underage Access

• Parents may contact us at info@SmokAura.com with concerns

• We will investigate and respond promptly

• We will take appropriate corrective action

---

INTERNATIONAL USERS

SmokAura currently serves customers in Texas only. However, this Privacy Policy addresses international data transfers where applicable.

Geographic Limitations

• Products are available only to Texas residents

• Age verification is based on U.S. federal law

• Payments are processed in U.S. dollars

• Shipping is available only within the United States

GDPR Compliance (European Users)

• If you are a European Union resident, GDPR may apply to your data

• SmokAura complies with GDPR requirements including:

  • Legal basis for data processing

  • Data processing agreements with vendors

  • Right to erasure and portability

  • Data Protection Impact Assessments

  • Data Protection Officer contact available upon request

Data Transfers

• Data may be transferred to the United States for processing

• SmokAura relies on appropriate safeguards (Standard Contractual Clauses)

• You consent to international data transfer by using the website

Non-U.S. Users

• If you access from outside the U.S., you do so at your own risk

• We may block access from non-Texas residents

• We cannot guarantee compliance with non-U.S. privacy laws

• We are not responsible for non-compliance with foreign regulations

---

CHANGES TO PRIVACY POLICY

SmokAura reserves the right to modify this Privacy Policy at any time. Changes become effective upon posting to the website.

Notification of Changes

• For material changes, we will email registered users

• For minor changes, updates will be posted without specific notice

• Your continued use after changes indicates acceptance

---

CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy and our privacy practices, please contact:

SmokAura Privacy Team
Email: info@SmokAura.com

Response Time:

• We will respond to privacy inquiries within 30 days

• Complex requests may require extended response time

• We will notify you of any delays

---

LEGAL DISCLAIMER

This document is provided for general informational purposes and does not constitute legal advice. SmokAura recommends consulting with independent legal counsel to understand your privacy rights. SmokAura is not responsible for third-party privacy practices. Review third-party privacy policies before providing information to third parties.

---

Effective Date: 1st May, 2026
Version: 1.0