Privacy Policy

Last updated: 6 November 2026

Wala Vapes (“Wala Vapes”, “we”, “us” or “our”) operates the online store at https://walapop-vapes.com/. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website, create an account, place an order or contact us.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where relevant, we also comply with the privacy legislation of Australian states and territories, such as the Privacy and Data Protection Act 2014 (Vic), the Information Privacy Act 2009 (Qld) and the Privacy and Personal Information Protection Act 1998 (NSW).

1. Who we are

Wala Vapes is an Australian online retailer of disposable vaping devices and related products, operating from our Australian warehouse and distribution facility. Our store is built on WooCommerce and we accept payment through Stripe and Afterpay.

• Trading name: Wala Vapes
• Website: https://walapop-vapes.com/
• ABN: [YOUR ABN]
• Business address: [STREET ADDRESS, SUBURB VIC POSTCODE]
• Privacy enquiries: hi@walapop-vapes.com

When you contact us, we may need to confirm which company or trader you are dealing with. In most cases this will be Wala Vapes trading on behalf of itself.

2. Scope of this policy

This policy applies to all personal information we collect through:

• Our website, including the shop, product pages, cart, checkout and order tracking pages;
• Our customer accounts and the registration, login and password reset functions;
• Our contact, email and WhatsApp support channels;
• Order confirmations, dispatch notifications and delivery updates we send to you.

It does not apply to third-party websites, platforms or applications that we link to or that host content on their own servers (for example, our payment providers, courier partners or the manufacturer’s website). Those organisations have their own privacy policies, and we are not responsible for them.

3. The Australian Privacy Principles

The APPs in the Privacy Act 1988 (Cth) are the rules we follow when we collect, use, disclose and store personal information. In summary, we:

• collect personal information only for a clear, stated purpose (APP 3);
• collect only what is reasonably necessary for that purpose (APP 5);
• use and disclose personal information consistently with our stated purposes and with your consent where required (APP 6, APP 8);
• keep personal information accurate, complete and up to date (APP 3);
• take reasonable steps to protect it (APP 8);
• give you access to it and allow you to correct it (APP 12, APP 13);
• never sell personal information or disclose it for a materially different purpose without your consent.

Some provisions of the Privacy Act 1988 do not apply to smaller businesses, and a small business exception may apply to us depending on our turnover. Regardless, we choose to handle your personal information in accordance with the APPs and this policy.

4. Information we collect

4.1 Information you provide to us

• Contact and delivery details — your name, email address, phone number, delivery address and, where required, billing address. We need these to pack, dispatch and deliver your order and to contact the courier if there is a delivery issue.
• Order details — the products you purchase, the value of your order, any delivery instructions you provide, and your order and payment history.
• Payment information — we receive confirmation from our payment providers (Stripe and Afterpay) such as the last four digits of your card, the card type, the billing postcode and whether a payment was approved. We do not store complete card numbers, security codes or full card details on our servers. Card details are entered directly into the payment provider’s secure payment page, which is encrypted and certified to the Payment Card Industry Data Security Standard.
• Account information — if you create a customer account, your username, encrypted password, and any preferences you save. You can view and update most of this yourself in the My Account area.
• Support correspondence — the content of emails, WhatsApp messages and contact form submissions, including your name, email address and any attachments you send us.
• Age verification information — because our products are restricted to adults, we may ask you to confirm that you are 18 years or older. Depending on the verification method used, this may involve your date of birth or a confirmation result supplied by an age verification provider. We do not intentionally collect a copy of your photographic identification for age verification, and we do not retain identification documents.
• Marketing preferences — whether you have chosen to receive our marketing emails, and the date you made that choice.

4.2 Information we collect automatically

When you visit our website or use your account, our servers and hosting provider may record:

• your IP address (which may also be used to derive an approximate city or state for delivery estimates);
• device and browser information, such as device type, operating system, browser, screen resolution and language;
• the pages you visit, the pages you came from, and general browsing behaviour on our site;
• cart contents and the contents of your shopping basket;
• server and security logs, including timestamps, error reports and the resources requested.

We use this information to run the website securely, to remember your cart and preferences between visits, to understand which pages are most useful, and to identify and block fraudulent activity.

4.3 Information we receive from third parties

• Payment providers — Stripe and Afterpay confirm whether a payment succeeded, and may pass us fraud-screening signals such as a risk rating or a billing address mismatch.
• Courier partners — our courier (such as Australia Post, StarTrack, Aramee or a similar provider) sends us delivery status updates and, in some cases, proof of delivery.
• Age verification providers — if an age check is triggered at checkout, the provider may return a pass or fail result rather than your underlying identity document.
• Professional advisers — our accountants, lawyers and IT service providers may receive information in the course of their work for us.

5. How we use your information

We use your personal information for the following purposes:

• to process, pack, dispatch and deliver your order, and to provide delivery tracking;
• to process payment and to prevent fraud, including verifying that a payment is genuine and that orders are being placed from an authorised payment method;
• to create and manage your customer account, and to let you view your order history and track your order;
• to respond to your questions, handle complaints and provide customer support;
• to verify that you are 18 years or older, to comply with our legal obligations as a seller of age-restricted products, and to decline or cancel any order we are not permitted to fulfil;
• to send you order confirmations, dispatch notices, delivery updates and other service messages (these are transactional messages, not marketing, and do not require marketing consent, but you can still unsubscribe from non-essential emails at any time);
• to send you marketing about products, offers and promotions, where you have consented or where otherwise permitted by the Spam Act 2003;
• to maintain the security, integrity and availability of our website, including preventing abuse, detecting bots and investigating suspicious activity;
• to understand how our website is used so we can improve our products, our content and your shopping experience;
• to comply with our legal obligations, including tax and accounting record-keeping requirements, product safety and regulatory obligations, and responding to legitimate requests from regulators, courts and law enforcement.

We do not use your personal information for automated decision-making that has a significant effect on you, and we do not build behavioural advertising profiles of our customers.

6. Cookies and online tracking

Cookies are small text files placed on your device when you visit a website. Wala Vapes uses cookies and similar technologies mainly to make the site work — for example, to remember what is in your cart and to keep you logged in. We use a cookie notice on our site so that you can see what is being set.

We do not currently run third-party advertising pixels or cross-site tracking pixels. If that changes, we will update this section and obtain any consent required before activating such technologies.

6.1 Managing cookies

You can accept, reject or clear cookies through the cookie notice on our site and through your browser settings. Blocking strictly necessary cookies may stop your cart and checkout from working correctly. Most browsers also support a “Do Not Track” signal, although there is currently no consistent legal requirement to honour it.

7. When we disclose your information

We share personal information only where it is necessary to run our business and deliver your order, or where the law requires it. Our key recipients are:

We do not sell your personal information, rent it, trade it or disclose it to third parties for their own marketing purposes. Where we disclose information to a service provider, we require them to handle it only for the purpose we specify and to protect it appropriately.

8. International transfers

Some of the service providers we use — including our hosting provider, payment processors and support tools — store or process information on servers located outside Australia. By using our website, you consent to your information being transferred to those locations.

Where information is transferred outside Australia, we take reasonable steps to ensure it is handled with a similar level of protection, which may include contractual safeguards such as standard contractual clauses. You can contact us to ask what safeguards apply to information we hold about you.

9. How we protect your information

We take reasonable security precautions to protect your personal information from loss, misuse, unauthorised access or disclosure. These include:

• encryption of data in transit using SSL/TLS across the whole website;
• payment card details handled only by PCI DSS compliant providers, with no card numbers stored on our servers;
• passwords stored as one-way hashed values, never as plain text;
• role-based access to customer records for our staff, with access limited to what each person needs;
• regular backups, software updates and security monitoring.

No method of transmission or storage is completely secure. If we become aware of a breach of personal information that is likely to cause serious harm, we will take remedial action and notify you and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

10. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this policy, or as long as the law requires.

11. Accessing and correcting your information

Under APP 12 you have the right to ask us for a copy of the personal information we hold about you, and under APP 13 you have the right to ask us to correct information that is inaccurate, incomplete or out of date.

To make a request, email hi@walapop-vapes.com with the subject line “Privacy request”. Tell us which information you are asking for and, if you are asking us to correct something, what it should say.

We will respond within 30 days. We may need to verify your identity before we release information, and we will only ask for the information we reasonably need to confirm who you are. We do not charge a fee for an access or correction request unless it is unreasonable, in which case we will explain the cost before proceeding.

If we cannot give you access to information, we will explain why. We also cannot give you access to information that relates to another person, but we will remove that person’s information from the copy we provide where we can.

If we refuse to correct information, we will tell you, and you can ask us to note the correction on our records so that it appears in any future communication we send you.

12. Making a complaint

If you have a concern about how we have handled your personal information, please raise it with us first so we can put it right. Contact hi@walapop-vapes.com or write to us using the details in section 18. We will acknowledge your complaint, investigate it, and give you a written response.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Complaints: www.oaic.gov.au/privacy/privacy-complaints
• Phone: 1300 363 992
• Post: OAIC, GPO Box 7013, Canberra ACT 2601

You are welcome to complain to the OAIC at any time. If you are in Victoria, Tasmania or the Northern Territory, you may also contact the relevant state or territory privacy commissioner. We would, however, appreciate the opportunity to resolve the issue with you first.

13. Marketing, email and the Do Not Call Register

We only send marketing emails and SMS messages to people who have consented to receive them, in line with the Spam Act 2003. We will always identify our emails as coming from Wala Vapes and include an unsubscribe link. You can unsubscribe at any time by clicking the link in the message, or by emailing us.

We do not sell, rent or trade your email address, phone number or any other personal information to unrelated companies for their marketing.

Where we contact you by phone or SMS about a product or offer, we do so in line with the Australian Do Not Call Register and the associated legislation, and we identify the caller and provide an opt-out. You can also register on the Do Not Call Register to reduce unsolicited calls.

14. Age-restricted products

Our products contain nicotine and are intended for adults aged 18 years and over. We do not knowingly sell to, or collect personal information from, anyone under 18. We may use age verification steps at checkout, and we may decline or cancel an order where we cannot satisfy ourselves that the purchaser is 18 or over, or where we believe an order has been placed by a minor or for a minor.

15. Reviews, comments and website content

Where you post a product review or comment on our website, the information you submit — your name, display name, review text, star rating and the date of your post — is published and visible to the public. If you would like a review or comment removed, or your personal information corrected in a published post, contact us and we will action your request.

Our website also contains editorial articles and product information. We take care to ensure this content is accurate, but we cannot guarantee that every statement about a third-party product is complete or up to date at all times.

16. Children

Our website and products are not directed at children or anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

17. Changes to this policy

We review this policy periodically and may update it to reflect changes in our business, our practices or the law. The “Last updated” date at the top of this page shows when it was last revised. If we make a material change that affects how we handle your information, we will notify you by email or by a notice on the website before the change takes effect.

18. Contact us

If you have any questions about this Privacy Policy, or about the way we handle your personal information, please contact us: