Privacy policy
This Privacy Policy explains how Krem Vape Studio collects, uses, shares, and protects your personal information when you visit kremvape.co.za or buy from us. It is written to align with the Protection of Personal Information Act, 2013 (POPIA).
If anything here is unclear, or you want to exercise any of your privacy rights, contact our Information Officer at info@kremvape.co.za.
1. Who we are
Krem Vape Studio is the Responsible Party for your personal information under POPIA. We are a South African vape retailer based in Cape Town, operating online at kremvape.co.za alongside our branches in Pinelands, Lansdowne, Kuils River, and Plumstead.
- Responsible Party: Krem Vape Studio
- Registration number: 2024/248594/07
- Registered address: 29 Union Avenue, Pinelands, Cape Town, 7405
- Information Officer: info@kremvape.co.za
- Phone: 081 302 1036
Our Information Officer is responsible for making sure we handle your personal information lawfully, for responding to your requests, and for liaising with the Information Regulator when required.
2. Information we collect
We collect information about your device, your interaction with the Site, and the details we need to process your orders. We also collect information when you contact us for support. We refer to any information about an identifiable person as "personal information".
Device information
- Why we collect it: To load the Site correctly for you and to understand how the Site is used so we can improve it.
- How we collect it: Automatically when you access the Site, using cookies, log files, web beacons, tags, and pixels.
- Shared with: Our platform provider Shopify, and the analytics providers listed in section 5.
- What we collect: Browser version, IP address, time zone, cookie data, the pages and products you view, search terms, and how you interact with the Site.
Order information
- Why we collect it: To fulfil your order, process payment, arrange delivery, send invoices and order updates, screen for fraud, and, where you have agreed, send you offers relating to our products.
- How we collect it: Directly from you at checkout.
- Shared with: Shopify, our payment processors, and our courier partner for delivery.
- What we collect: Name, billing address, shipping address, email address, and contact number.
Customer support information
- Why we collect it: To respond to your questions and provide support before, during, and after a purchase.
- How we collect it: Directly from you when you email, call, message us on WhatsApp, or use our contact form.
- Shared with: Only the service providers needed to assist you, such as Shopify and our courier partner.
- What we collect: Your name, contact details, order reference, and the contents of your message.
We never collect or store your card details. Krem Vape Studio does not collect or store credit or debit card numbers, expiry dates, or security codes. All payments are completed through secure, third party payment processors, so your card information is handled by them and never touches our website.
3. How and why we use your information
We use your personal information to run the store and serve you, specifically to:
- display products, process orders, and take payment through our payment partners,
- arrange shipping and keep you updated on your order,
- provide customer support and respond to your requests,
- screen orders for fraud and protect the security of the Site,
- understand how the Site is used so we can improve speed, layout, and content, and
- where you have consented, send you news about new products, restocks, and offers.
Under POPIA we process your information on the basis of performing our contract with you, our legitimate business interests, compliance with the law, and, for marketing and non essential cookies, your consent. You can withdraw consent at any time.
4. Cookies and tracking
A cookie is a small piece of data stored on your device when you visit the Site. Cookies let the Site remember your actions and preferences, keep your cart and checkout working, and help us understand how the Site is used. We use functional, performance, analytics, and advertising cookies.
Where required, we ask for your consent through our cookie banner before setting non essential cookies. You can change your choice at any time, and you can also block or delete cookies through your browser settings. Blocking some cookies may affect how parts of the Site work.
Cookies necessary for the store to function
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _tracking_consent | Stores your tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with your shopping cart. | 2w |
| cart_currency | Used in connection with your shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| checkout_token | Used in connection with checkout. | 1y |
| keep_alive | Used in connection with buyer localization. | 2w |
| secure_customer_sig | Used in connection with customer login. | 20y |
| storefront_digest | Used in connection with customer login. | 2y |
| shopify_pay | Used in connection with checkout. | 1y |
Reporting and analytics cookies
| Name | Function | Duration |
|---|---|---|
| _landing_page | Tracks landing pages. | 2w |
| _orig_referrer | Tracks landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _shopify_ga | Shopify and Google Analytics. | session |
| _ga, _gid | Google Analytics, used to measure and report Site usage. | up to 2y |
| _clck, _clsk | Microsoft Clarity, used to record sessions and build heatmaps so we can improve the Site. | up to 1y |
Session cookies last until you stop browsing. Persistent cookies last until they expire or you delete them. Most of our cookies expire between 30 minutes and two years after they are set.
5. Analytics and session recording
To understand how visitors use the Site and to improve it, we use the following tools. Where required, these run only after you have given consent through our cookie banner.
Microsoft Clarity
We use Microsoft Clarity to understand how visitors interact with the Site through session recordings and heatmaps. Clarity captures pages viewed, clicks, scrolling, and similar interaction signals. This data is used only to improve the layout and usability of the Site, is aggregated for analysis, and is never sold. Sensitive input fields are masked by default. You can read how Microsoft handles this data in the Microsoft Privacy Statement.
Google Analytics
We use Google Analytics to understand how customers use the Site. You can read more in Google's Privacy Policy, and you can opt out using the Google Analytics opt out add on.
Shopify analytics
Our store runs on Shopify, which provides built in analytics about Site usage and sales. You can read more in the Shopify Privacy Policy.
6. Behavioural advertising
Where you have consented, we may use your information to show you advertisements or marketing that we believe is relevant to you. We may share information about your use of the Site, your purchases, and your interaction with our ads with advertising partners, in some cases through cookies and similar technologies. We may also use Shopify Audiences to show ads on other websites to buyers who may be interested in what we offer.
You can opt out of targeted advertising through:
7. Sharing your information
We share personal information only with the service providers we need to run the store and fulfil your orders, and where the law requires it. These include:
- Shopify, which powers our online store.
- Payment processors, which securely handle your payment. We do not see or store your card details.
- Our courier partner, which uses your name, address, and contact number to deliver and track your order.
- Analytics providers, Microsoft Clarity and Google, as described in section 5.
We may also disclose your information to comply with applicable laws, to respond to a lawful request such as a subpoena or warrant, or to protect our rights. We do not sell your personal information.
8. International transfers
Some of our service providers, including Shopify, Microsoft, and Google, may store or process your personal information on servers located outside South Africa. When that happens, we take reasonable steps to ensure the recipient is bound by privacy protections broadly in line with POPIA, whether through the provider's own commitments, contractual safeguards, or the laws of the recipient country.
9. How we protect your data
We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, and misuse. Our store and checkout run over encrypted connections, payments are handled by secure third party processors, and access to customer information is limited to what is needed to serve you. If a security compromise is likely to affect you, we will notify you and the Information Regulator as required by POPIA.
10. Retention
When you place an order, we keep your personal information for our records for as long as needed to provide our services, meet our legal and accounting obligations, and resolve disputes. After that, or when you ask us to erase it, we will delete or anonymise your information unless we are required to keep it by law. See section 11 for how to request erasure.
11. Your rights
Under POPIA you have the right to:
- ask what personal information we hold about you and request access to it,
- ask us to correct or update information that is inaccurate or incomplete,
- ask us to delete information we no longer have a lawful reason to keep,
- object to the processing of your information in certain circumstances,
- withdraw your consent to marketing or non essential cookies at any time, and
- lodge a complaint with the Information Regulator.
To exercise any of these rights, contact our Information Officer at info@kremvape.co.za. We may need to verify your identity before we act on your request, and we will respond within the time frames required by law.
12. Minors and age restriction
Strictly 18 and over. Our products are intended for adults aged 18 and over, and the Site is not intended for anyone under 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has given us personal information, please contact us at info@kremvape.co.za and we will delete it.
13. Do Not Track
Because there is no consistent industry standard for how to respond to "Do Not Track" browser signals, we do not change our data collection practices when we receive one. You can still manage tracking through our cookie banner and your browser settings.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the date at the top of this page.
15. Complaints and the Regulator
If you have a concern about how we handle your personal information, please contact us first at info@kremvape.co.za so we have the chance to put it right. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa.
- Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
- Phone: +27 10 023 5200
- Complaints email: POPIAComplaints@inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
- Website: inforegulator.org.za
16. Contact us
For any privacy question, request, or complaint, reach our Information Officer:
- Business: Krem Vape Studio (Reg 2024/248594/07)
- Address: 29 Union Avenue, Pinelands, Cape Town, 7405
- Email: info@kremvape.co.za
- Phone: 081 302 1036
