Privacy Policy
Last Updated: 10 October 2026
At Vape.Sydney, we respect your privacy and are committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, create an account, place an order or contact us.
By using our website, you acknowledge the information practices described in this policy. We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. Information We Collect
We may collect personal information when you interact with Vape.Sydney, including:
Personal details: Your name, email address and telephone number.
Billing and delivery information: Your billing address, shipping address and postcode.
Order information: Products ordered, transaction details, purchase history and order status.
Account information: Login details, saved addresses and account preferences.
Customer enquiries: Information you provide when contacting us about orders, products or services.
Technical information: IP address, browser type, device information, pages visited and website interactions.
Communication preferences: Any preferences you provide regarding updates or other communications.
Where necessary for a lawful pharmacy service, we may also collect relevant identity, age-verification, prescription or health-related information. Such information is handled in accordance with the additional privacy protections applicable to health information.
We aim to collect only the information reasonably necessary to provide our services and operate our business.
2. How We Use Your Information
We may use your personal information to:
Process and manage orders and payments.
Confirm transactions and provide order updates.
Arrange eligible deliveries and provide tracking information.
Respond to enquiries and provide customer support.
Process returns, refunds and disputes.
Manage customer accounts and preferences.
Maintain website security and prevent fraudulent activity.
Analyse website performance and improve user experience.
Meet applicable legal, accounting and regulatory obligations.
Provide communications you have requested or agreed to receive, where legally permitted.
Any health-related information collected in connection with pharmacy services will be used or disclosed only where appropriate for those services or otherwise permitted or required by law. We do not use sensitive health information for unrelated marketing without the necessary authorisation.
3. Payment Processing – Worldpay
Vape.Sydney uses Worldpay, a third-party payment processing provider, to facilitate supported online card transactions.
When you make a payment through Worldpay, information necessary to process the transaction may be collected and handled by Worldpay, including payment card details and transaction-related information.
We generally receive payment confirmation, transaction references and other information required to manage your order, rather than needing to store your complete payment card details on our website.
Worldpay processes personal information in accordance with its own privacy and security practices.
If you choose bank transfer, we may retain the payment reference and relevant transaction records needed to verify payment, reconcile accounts or issue a refund.
For more information about Worldpay’s handling of personal information, please refer to its official privacy notice.
4. Website Analytics – Google Analytics
We use Google Analytics to understand how visitors interact with our website and identify opportunities to improve its functionality.
Depending on the configuration and consent settings, Google Analytics may collect information including:
Pages visited and time spent on our website.
Browser and device information.
Approximate geographic location.
Website traffic sources.
Interactions with pages and website features.
This information helps us understand website performance, identify technical issues and improve the user experience.
Google Analytics may use cookies and similar technologies to collect and process website usage information.
Google handles information collected through its services in accordance with its applicable privacy policies.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support essential website functions and, where enabled, analytics services.
Cookies may be used to:
Maintain shopping cart and checkout functionality.
Remember login sessions and website preferences.
Support website security.
Understand website traffic and usage patterns.
Improve website performance.
Some cookies are necessary for the website to function correctly. Other cookies may be used for analytics or optional features.
You can manage or disable cookies through your browser settings and any cookie preference controls made available on our website.
Please note that disabling certain cookies may affect login, shopping cart or checkout functionality.
6. Shipping and Australia Post
For orders that are legally eligible for postal delivery, Vape.Sydney uses Australia Post for shipping and tracking services.
To arrange delivery, we may provide Australia Post with relevant information, including:
Recipient name.
Delivery address.
Contact telephone number.
Email address, where required for delivery notifications.
Shipment and tracking information.
This information is shared for delivery, parcel tracking and related services.
Once an eligible order has been dispatched, we send an email containing its Australia Post tracking number.
Australia Post handles personal information in accordance with its own privacy practices.
7. Sharing Information With Third Parties
We may share personal information with trusted service providers where reasonably necessary to operate our website and provide our services.
These providers include:
Worldpay: Secure payment processing and transaction management.
Google Analytics: Website traffic analysis and performance measurement.
Australia Post: Shipping, delivery and parcel tracking.
Website hosting and technical service providers: Website operation, maintenance, security and data storage.
Professional advisers and regulatory authorities: Where disclosure is necessary or required by law.
We aim to limit the personal information disclosed to what is reasonably necessary for the relevant purpose.
We do not sell customer personal information to third parties.
8. Overseas Processing and Disclosure
Some third-party service providers, including Google and Worldpay, operate internationally.
Depending on the services used and their configuration, personal information may be processed, accessed or disclosed outside Australia, including in the United States, the United Kingdom or other jurisdictions used by these providers.
Where an overseas disclosure occurs, we take reasonable steps to comply with applicable Australian privacy requirements, including the Australian Privacy Principles.
Our service providers may also have their own privacy notices explaining how and where they process personal information.
9. Marketing and Email Communications
We may send you service-related emails concerning your account, payments, orders, delivery status, refunds or customer enquiries.
Where marketing communications are legally permitted, we will send them in accordance with applicable laws and any required consent or authorisation.
If you receive marketing communications from us, you may opt out using the unsubscribe instructions provided or by contacting info@vape.sydney.
Opting out of marketing communications will not prevent us from sending essential transactional or service-related messages.
10. Protecting Your Personal Information
We take reasonable steps to protect personal information against misuse, loss, interference, unauthorised access, modification and disclosure.
Our security practices may include appropriate access controls, secure systems and the use of established third-party service providers.
However, no website, electronic transmission or data storage system can be guaranteed to be completely secure.
If we become aware of a data breach, we will assess and respond to it in accordance with applicable legal requirements, including notification obligations where required.
11. Accessing or Correcting Your Information
You may request access to personal information that we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.
To submit a request, please email:
We may need to verify your identity before providing access to or changing personal information.
We will consider and respond to requests in accordance with applicable privacy laws.
If we cannot fulfil a request, we will explain the reason where required by law.
12. Data Retention
We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected or to meet applicable legal and regulatory obligations.
This may include retaining relevant records for:
Order processing and transaction history.
Accounting and tax requirements.
Customer service and dispute resolution.
Fraud prevention and security.
Pharmacy-related legal or recordkeeping obligations, where applicable.
When personal information is no longer required, we take reasonable steps to delete or de-identify it, unless retention is required or authorised by law.
13. External Websites
Our website may contain links to third-party websites and services.
These websites operate independently and may have their own privacy policies.
We encourage you to review the relevant privacy policies before providing personal information to external services.
14. Privacy Complaints
If you have concerns about how Vape.Sydney has collected, used, stored or disclosed your personal information, please contact us.
Email: info@vape.sydney
Please provide sufficient information about your concern so we can investigate and respond appropriately.
We will review privacy complaints and respond within a reasonable timeframe.
If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Website: www.oaic.gov.au
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business operations, website functionality, third-party services or applicable laws.
Any updated version will be published on this page, together with a revised “Last Updated” date.
We encourage you to review this page periodically.