This is general template content to help you launch. Please have it reviewed by a qualified professional for compliance with applicable Alberta and Canadian privacy law (including PIPEDA and Alberta's Personal Information Protection Act) and update the date below before relying on it.
Last updated: [add date when you publish your final policy]
Golden Vape Smokes ("we", "us", "our") respects your privacy. This policy explains what information we collect through this website, why we collect it, and the rights you have over it.
WHO WE ARE
This website is operated by Golden Vape Smokes, a retail vape and smoke shop with locations in Calgary, Alberta. See our Contact page for how to reach us.
WHAT PERSONAL DATA WE COLLECT AND WHY
- Contact form submissions: your name, email address, phone number (if provided) and the message you send us, so we can respond to your inquiry.
- Age verification: your confirmation that you are 18 years of age or older is stored in your own browser (locally, on your device) for a limited time so you are not asked again on every visit. No personal information is collected or transmitted to us as part of age verification.
- Basic technical information collected automatically by our hosting provider (such as browser type, device type and pages visited), used only in aggregate to keep the website running securely and to understand general site usage.
This website does not have public user accounts, does not accept comments, and does not use a Gravatar-style avatar service. The only accounts on this website belong to Golden Vape staff who manage its content, and those are separately secured.
COOKIES AND LOCAL STORAGE
This website uses a small amount of browser local storage to remember that you've passed the age verification screen, and (for staff signing into the admin dashboard) to keep them signed in — including an optional "Remember me" choice that determines how long that sign-in is kept on that device. We do not currently use third-party advertising or analytics cookies. If that changes in the future (for example, if we add website analytics), this policy will be updated to describe what's added and why.
CONTACT FORMS
When you submit our contact form, the information you provide is sent to us and stored securely so our staff can respond to you. We do not use contact form submissions for any other purpose, and we do not use them for automated marketing without your separate consent.
WHO WE SHARE YOUR DATA WITH
We do not sell or rent your personal information. The only parties involved in handling data collected through this website are:
- Supabase, our database and hosting infrastructure provider, which stores contact form submissions and admin account data on our behalf, secured with access controls restricting it to authorized Golden Vape staff.
- Service providers we use to run this website (such as our web hosting provider), only to the extent necessary to operate the site.
We do not share your information with third parties for their own marketing purposes.
WHERE WE SEND YOUR DATA
Your information is stored with the infrastructure providers named above and is not knowingly transferred beyond what's necessary to operate this website and respond to your inquiries.
HOW LONG WE RETAIN YOUR DATA
We keep contact form submissions for as long as reasonably necessary to respond to your inquiry and for our internal records, after which they may be deleted. You can ask us to delete your information sooner at any time — see "Your Rights" below.
HOW WE PROTECT YOUR DATA
Contact form submissions and other data collected through this website are stored using industry-standard access controls (database-level Row Level Security) that restrict access to authorized Golden Vape staff only. Our admin dashboard requires a secure sign-in. This website does not process or store payment card information — all in-store purchases are handled directly at checkout, not through this website.
DATA BREACH PROCEDURES
If we become aware of a breach involving your personal information that poses a real risk of significant harm, we will notify affected individuals and, where required, the Office of the Privacy Commissioner of Canada, in accordance with our obligations under PIPEDA.
THIRD PARTIES WE RECEIVE DATA FROM
We do not purchase, rent or otherwise receive personal information about you from data brokers or other outside sources. The only personal information we hold about you is what you provide to us directly, such as through our contact form.
AUTOMATED DECISION-MAKING
We do not use automated decision-making or profiling based on your personal information on this website.
YOUR RIGHTS
You may request access to, correction of, or deletion of the personal information we hold about you by contacting us using the details on our Contact page. This does not include information we are required to keep for legal, tax or security purposes.
INDUSTRY & REGULATORY DISCLOSURE
As a business operating in Alberta, Canada, we aim to handle personal information in accordance with:
- The federal Personal Information Protection and Electronic Documents Act (PIPEDA);
- Alberta's Personal Information Protection Act (PIPA), which applies to private-sector organizations operating in Alberta; and
- Canada's Anti-Spam Legislation (CASL), if we ever send marketing communications by email or messaging — we will only do so with your consent, and you may withdraw that consent at any time.
Separately, our retail sale of vape and tobacco-related products is governed by Alberta's Tobacco, Smoking and Vaping Reduction Act and related municipal bylaws — see our Age Restriction Policy and Store Policy pages for details on age verification and in-store sale requirements.
CHANGES TO THIS POLICY
We may update this policy from time to time. The most current version will always be posted on this page.