Privacy Policy
Last updated: June 30, 2026
This Privacy Policy explains how VirtualGoodiez ("we," "us," or "our") collects, uses, shares, and protects personal information when you use virtualgoodiez.com (the "Site"). We serve adults 21 and over in the United States only. By using the Site, you agree to this Policy.
What We Collect
We collect the following categories of information:
- Account information: your email address, used for passwordless sign-in via one-time code.
- Order and shipping information: items purchased, billing and shipping address, recipient name, and contact details.
- Age and identity verification data: the government-issued ID document you submit and your date of birth, collected to verify that you are 21 or older. This is sensitive information; see the dedicated section below.
- Payment information: processed by Stripe. We do not store full payment card numbers. We may retain limited transaction metadata such as the last four digits, payment method type, and a Stripe token or identifier.
- Device, usage, and cookie data: IP address, browser and device type, pages viewed, and similar analytics, plus the session cookie and local storage described in our Cookie Notice.
How We Use It
We use personal information to: verify your age and identity; create and secure your account session; process, fulfill, and ship your orders; calculate taxes and process payments; communicate order updates and respond to inquiries; prevent fraud and underage purchases; comply with legal obligations; and improve and secure the Site. We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising.
Age and Identity Verification
Because we sell vaporizer and smoking accessories restricted to adults, every order requires successful government-issued ID and age (21+) verification before payment. Verification documents and date of birth are processed by our third-party ID and age-verification provider. Where feasible, the provider returns only a pass/fail result and minimal confirmation data. We keep age and ID-verification images only as long as needed to verify your age and meet our legal obligations, after which they are permanently deleted within 90 days.
How We Share Information
We share personal information with service providers and as required by law, including:
- Stripe, to process payments;
- our ID-verification provider, to confirm your age and identity;
- shipping carriers, to deliver your orders;
- other service providers that support the Site (for example, hosting and email delivery), under contracts limiting their use of the data; and
- legal and compliance recipients, where we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, and property, or in connection with a merger, acquisition, or sale of assets.
We do not sell your personal information for money.
Cookies and Sessions
We use an essential session cookie to keep you signed in after one-time-code authentication, and browser local storage to maintain your cart. We do not currently use third-party advertising or analytics cookies. See our Cookie Notice for details and choices.
Data Retention
We retain personal information for as long as needed to provide the Site, fulfill the purposes described in this Policy, and meet legal, tax, accounting, and compliance obligations, after which we delete or anonymize it. Account and order records are generally kept for up to 7 years to satisfy tax and legal-compliance requirements. Age and ID-verification images are kept only as long as needed to verify your age and meet our legal obligations, after which they are permanently deleted within 90 days.
Your Privacy Rights
If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), including the right to: know and access the personal information we collect; request deletion; request correction; opt out of the "sharing" of personal information for cross-context behavioral advertising; limit the use of sensitive personal information; and not be discriminated against for exercising these rights. We do not sell personal information. To exercise a right, contact us using the details below; we will verify your request and respond within 45 days.
Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and restricted access to sensitive data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The Site is intended only for adults 21 and over. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected such information, we will delete it.
Changes to This Policy
We may update this Policy from time to time. Material changes will be posted here with a revised "Last updated" date.
Contact and Data Protection
For privacy questions or to exercise your rights, contact us at privacy@virtualgoodiez.com.