Lost Mary Vape Privacy Policy

This policy explains exactly what data Lost Mary Vape collects, how we use it, who we share it with, and the rights you have over your own data. Written in plain English — no boilerplate.

Last updated 2026-05-23.

1. Information Lost Mary Vape Collects

Information Provided Directly

When you place an order, create an account, subscribe to the newsletter, or contact support, we collect:

Name (billing + shipping if different)
Email address
Phone number (for delivery notifications)
Shipping address + billing address
Payment information (handled by our payment processor — see §3)
Date of birth (for age verification only — not stored after verification)
Order history (kept tied to your account if logged in)

Information Collected Automatically

IP address
Browser type and version
Device type (mobile vs desktop)
Pages viewed and time on site (Google Analytics 4)
Referring URL (where you came from before landing here)
Cookie-based session identifier (see §5)

2. How Lost Mary Vape Uses Collected Information

To process orders — name, address, and payment info are required to fulfill purchases.
To verify age (21+) — required by federal and state law for nicotine product sales.
To send order confirmations and shipping updates — transactional emails.
To respond to support requests — when you email service@lostmary-vape.com.
To send marketing emails — only if you opted in via the newsletter (you can unsubscribe with one click in any email).
To improve the site — aggregated analytics (no individual tracking).
To prevent fraud — flag duplicate / suspicious orders for manual review.

We do not use your data to train AI models, build behavioral advertising profiles, or sell to third-party data brokers.

3. Information Sharing & Third Parties

We share data only with vendors that directly support running the business:

Payment processor: Receives card data via tokenization — we never see or store full card numbers
Age verification provider: Receives name + address to confirm 21+ status; result is yes/no
Shipping carriers (USPS, UPS): Receive name, shipping address, phone number
Email marketing platform: Receives email address only if you opted in
Google Analytics 4: Receives anonymized usage data — no personally identifying information

We do not sell, rent, or trade your personal information to any third party.

4. Data Security

Site is served over HTTPS (TLS 1.3) end-to-end
Database access restricted to authenticated employees on a need-to-know basis
Payment card data is never stored on our servers (handled by payment processor via tokenization)
Password hashing uses industry-standard bcrypt
Backups encrypted at rest

No security system is 100% perfect, but these are the basics we maintain. If we ever experience a breach affecting your data, we'll notify you within 72 hours of detection.

5. Cookies & Tracking Technologies

We use the following cookies:

Session cookie: Required — keeps you logged in and your cart contents across pages
Cart-Token: Required — stores your active cart so it persists across browser sessions
Age verification: Optional — remembers you've already verified 21+ so you don't have to confirm again
Google Analytics: Optional — anonymized site usage analytics

You can disable cookies in your browser settings — required cookies will reset every session, which means you'll need to log in again and rebuild your cart each visit.

6. Customer Rights & Data Control

You can at any time:

Request a copy of all personal data we have on you (email service@lostmary-vape.com)
Request deletion of your account and all associated data (subject to legal record-keeping for finished orders)
Correct or update incorrect information via your /my-account/ profile
Unsubscribe from marketing emails via the one-click link in every email
Opt out of analytics tracking via browser cookie settings or by enabling "Do Not Track"

7. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal data we have collected about you
Right to delete that personal data (with legal-record exceptions)
Right to opt out of the "sale" of personal information (we don't sell, so this is automatically satisfied)
Right to non-discrimination — exercising these rights won't affect your service or pricing

To exercise CCPA rights, email service@lostmary-vape.com with subject "CCPA Request." We respond within 45 calendar days.

8. Children's Privacy

lostmary-vape.com is restricted to users aged 21 and older. We do not knowingly collect data from anyone under 21, and we discard any data that we identify as belonging to a minor. If a parent or guardian discovers that we have collected data from someone under 21, email service@lostmary-vape.com and we'll remove it.

9. Policy Updates

If this policy changes substantially, we'll update the "Last updated" date above and email registered account holders with a summary. Minor clarifications (typo fixes, link updates) are made silently.

10. Contact

Privacy questions, data requests, or concerns:

service@lostmary-vape.com
Lost Mary Vape · 24300 Nandina Ave · Moreno Valley, CA 92551

This policy applies to all device purchases on the store — the Lost Mary MT35000 Turbo, the coil-free Lost Mary Ultrasonic 35K, the daily-carry Lost Mary MT15000 Turbo, and the full Lost Mary Flavors catalog. Order history and shipping data is retained per the schedule in §4 above, scoped to your account regardless of which device family you ordered. If you've been searching Lost Mary Vape Near Me and bought from a third-party local shop, this policy does not cover their data handling — only direct orders on lostmary-vape.com.