1) Controller & Scope

USVapeWholesale is the data controller for information it processes in connection with B2B relationships. This Policy covers information relating to companies, their personnel, and other professional contacts that engage with us for wholesale transactions, compliance checks, shipping, and customer support. Our products are intended for adults of legal age only; we do not knowingly collect information from minors.

We comply with applicable U.S. federal and state requirements relevant to vapor products and commerce (e.g., tax, import/export, age and shipment restrictions). Where we act as a service provider/processor on behalf of another business, we will follow that business’s lawful instructions and our contractual obligations.

2) Information We Collect

• Business & Account Information: legal entity name, tax ID (EIN), resale permits, business license details, addresses, website, primary locations, account credentials.
• Professional Contact Information: names, roles/titles, departments, business emails, phone numbers, shipping/billing addresses.
• Transactional Information: quotes, orders, invoices, payment method metadata (e.g., last 4 digits, card type or bank name), shipping and returns, product selections, support tickets.
• Compliance & Risk Information: KYC/AML data, authorization letters, import/export and carrier restrictions, credit checks (where permitted), attestations and certificates.
• Website & Technical Data: IP address, device and browser data, access logs, and data collected via cookies and similar technologies.
• Marketing & Preference Data: subscription status, communication preferences, survey responses, trade show leads, product interest categories.

3) How We Use Information

• Provide, operate, and improve our wholesale services, website, and support.
• Process orders, fulfill shipments, handle payments, and manage returns/warranties.
• Verify business eligibility, conduct KYC/AML and other due diligence, and comply with legal/industry obligations.
• Maintain customer relationships, respond to inquiries, and provide technical assistance.
• Conduct analytics to improve products, logistics, and site performance.
• Send service communications and (with your consent or as permitted by law) marketing about products, flavors, and promotions relevant to your business.
• Detect, prevent, and investigate fraud, abuse, security incidents, and violations of our terms and policies.

Legal bases: performance of a contract, compliance with legal obligations, and our legitimate interests in operating a secure and effective B2B business. Where required, we obtain consent (e.g., for certain marketing or cookie categories).

4) Disclosure of Information

We do not sell or rent your information. We may disclose information to:

• Service providers and partners involved in payments, logistics/carriers, customs/brokerage, IT hosting, security, analytics, and professional advisors—bound by confidentiality and data protection obligations.
• Governmental, regulatory, or law enforcement authorities where legally required or to protect rights, safety, and compliance.
• Corporate transactions such as mergers, acquisitions, financing, or asset transfers, subject to continued protection of the information.

Information may be processed across state lines and, where applicable, outside the United States, with appropriate safeguards in place.

5) Data Retention & Security

• We retain information for as long as necessary to fulfill the purposes described above, comply with legal/accounting/recordkeeping obligations, and resolve disputes.
• We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.
• When retention is no longer required, we delete or de-identify information consistent with applicable laws and our policies.

6) Your Privacy Rights (U.S. States)

Depending on your state, you may have rights to request access, correction, deletion, portability, or to opt out of certain processing (e.g., targeted advertising, sale, or profiling). We honor applicable rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), Virginia (VCDPA), Colorado, Connecticut, and others.

To exercise these rights, you may use the request mechanisms we make available through our website or other business channels. We will take steps to verify your request consistent with applicable laws.

We will not discriminate against you for exercising a privacy right. Certain information may be retained or processed as required for contracts, security, fraud prevention, or legal obligations.

7) Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the site, remember preferences, analyze traffic, and (where permitted) support marketing. You can control cookies through your browser settings. Blocking some cookies may impact site functionality.

For more details (e.g., cookie categories, purposes, and retention), see our Cookie Policy. If required by law, we will display a consent banner and honor your choices.

8) Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via our website or other appropriate means. Please review this page periodically for the latest information.