What personal data vapejnr.com collects.
At checkout we collect: name, billing address, shipping address, email, phone (optional), and a government-issued ID for age verification. The ID image is held only by the third-party verifier (not by us long-term). Payment information goes directly to the payment gateway and is not stored in our system. Order history, support emails, and account login activity are stored in your customer profile until you request deletion.
Cookies: strictly necessary cookies for cart and checkout (cannot be disabled without breaking the site), analytics cookies for traffic measurement (Google Analytics 4, can be disabled in browser settings), and conversion cookies for ad-attribution reporting (used only for our own paid channels, not for third-party retargeting).
Payment cards. ID images. Marketing-list shares.
We do not store payment card numbers or CVV codes on our servers. Payment data is tokenized at checkout by our PCI-DSS-certified payment processor — we receive only an authorization token tied to the order. We do not store ID images. The age-verification image upload goes directly to the federally compliant third-party verifier (e.g., Veratad or equivalent), which retains the verification result for up to 30 days for audit. We retain only a yes/no verified flag and timestamp linked to your account. We do not sell or share customer data with marketing aggregators, data brokers, or social platforms. Period.
Three categories of third parties — operational only.
We share customer data with three categories of third parties, all operationally required: (1) shipping carriers (USPS, UPS, FedEx) — name, address, and phone, for package routing; (2) PCI-DSS-certified payment processor — tokenized card data for transaction processing; (3) federal age-verification provider — government ID for the verification call only. We do not share with marketing aggregators, data brokers, ad-retargeting platforms, or social platforms.
CCPA and GDPR — exercise via privacy@vapejnr.com.
California residents under CCPA: right to know what we have collected, right to delete, right to opt out of sale (we don't sell anyway), right to non-discrimination for exercising rights. EU residents under GDPR: the same rights plus data portability and the right to rectification. Email privacy@vapejnr.com with your request — we respond within 30 days. Data retention: order records 7 years (US tax and regulatory requirement); customer account profiles until you delete the account; age-verification records 30 days at the third-party verifier; marketing email subscription until you unsubscribe; payment data — never stored on our servers.
We post changes here with the effective date.
We post material privacy-policy changes on this page with the effective date. By placing a new order after a change, you agree to the updated policy. Material changes are also sent via email to active accounts at least 30 days before taking effect for existing service relationships. The current version is dated 2026-05-16.
privacy@vapejnr.comCCPA-compliantGDPR-compliantNo card storageNo ID image storage
FAQ
Common Questions
Does JNR Vape sell my personal data?
No. We do not sell, rent, or trade personally identifiable customer data to third parties. We share order data only with the shipping carriers required to deliver packages, the payment gateway required to process transactions, and the federal age-verification provider required by law.
Does JNR Vape store my credit card number?
No. Payment card data is tokenized at checkout by our PCI-DSS-certified payment processor — we receive only an authorization token tied to the order. The card number and CVV never touch our servers.
Does JNR Vape store the ID image I uploaded for age verification?
No. The ID image goes directly to the federally compliant third-party verifier (e.g., Veratad). They retain it for up to 30 days for audit, then delete. We store only a yes/no verified flag and timestamp linked to your account.
How long does JNR Vape keep my order records?
7 years, for US tax and regulatory compliance. Customer account profiles are kept until you delete the account. Marketing email subscription is kept until you unsubscribe.
How do I exercise my CCPA or GDPR rights?
Email privacy@vapejnr.com with your request (right to know, right to delete, data portability, etc.). We respond within 30 days. Include the email address tied to your vapejnr.com account so we can locate your records.
