Who We Are
This website is operated by Kush & Coil, a South African retailer specialising in vaping products and accessories. Our website address is https://staging.viper-vape.co.za. You can contact us at kushandcoil@gmail.com.
Age Restriction
Our products are intended for persons aged 18 years and older only. By using this website and providing us with your personal information, you confirm that you are 18 years of age or older. We do not knowingly collect personal information from persons under the age of 18. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.
What Personal Information We Collect and Why
Orders and Purchases
When you place an order, we collect your name, billing and shipping address, email address, phone number, and payment details. This information is necessary to process and fulfil your order, send you order confirmations, and handle returns or queries. Payment card details are processed directly by our payment processor and are not stored on our servers.
Account Registration
If you create an account on our website, we store your name, email address, and a hashed password. We also store your order history linked to your account so you can track past purchases. You may update or delete your account information at any time by contacting us.
Comments
When you leave a comment on our site, we collect the data shown in the comment form as well as your IP address and browser user-agent string to assist with spam detection. An anonymised string created from your email address may be sent to Gravatar to check whether you use that service. The Gravatar privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible publicly next to your comment.
Cookies
We use cookies to enhance your experience on our website. If you have an account and log in, we set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal information and is discarded when you close your browser. When you log in, we also set cookies to save your login information and screen display preferences. Login cookies last for two days and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks.
If you edit or publish an article, an additional cookie is saved in your browser containing no personal data; it expires after one day.
We also use cookies for our shopping cart to keep track of your cart contents, and session cookies to maintain your logged-in state across pages.
Analytics
We collect anonymised data about how visitors use our website, including pages visited, time spent on the site, and general geographic location. This information helps us improve our website and product offerings. Analytics data does not identify you personally.
Embedded Content from Other Websites
Pages on this site may include embedded content such as videos or social media posts. Embedded content from other websites behaves in the same way as if you had visited those websites directly. These websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that embedded content if you have an account with them and are logged in.
Lawful Basis for Processing
We process your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). The lawful grounds on which we rely are:
- Contract performance: Processing your order and delivering your purchases requires us to use your contact and delivery information.
- Legitimate interest: We use analytics and spam-detection information to improve our website and protect its integrity.
- Consent: Where we send marketing communications, we do so only with your consent, which you may withdraw at any time.
- Legal obligation: We retain certain records to comply with South African tax and consumer protection legislation.
Who We Share Your Information With
Payment Processor
Your payment details are handled by our payment gateway provider. They process card transactions securely and are subject to their own privacy and security obligations. We do not store full card numbers or CVV codes.
Courier and Logistics
To deliver your order, we share your name, delivery address, and contact number with our courier partner. They use this information solely to fulfil your delivery.
Gravatar
If you leave a comment, your email address may be checked against the Gravatar service to display a profile picture alongside your comment.
Hosting Provider
Our website is hosted on servers operated by our hosting provider. Your data passes through and is stored on their infrastructure, which is bound by contractual obligations to protect your information.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
How Long We Retain Your Information
If you leave a comment, the comment and its metadata are retained indefinitely so we can recognise and approve follow-up comments automatically rather than holding them for moderation each time.
For users who register on our website, we store the personal information they provide in their user profile. Users may see, edit, or request deletion of their personal information at any time (except that we may need to retain certain information for legal or accounting purposes).
Order records are retained for a minimum of five years to comply with South African tax legislation. After this period, order data is securely deleted or anonymised.
Analytics data is retained in aggregated, anonymised form and does not have a fixed deletion schedule.
Your Rights Under POPIA
As a data subject under POPIA, you have the following rights regarding your personal information:
- Right of access: You may request a copy of the personal information we hold about you.
- Right to correction: You may ask us to correct inaccurate or incomplete personal information.
- Right to deletion: You may request that we delete your personal information where we no longer have a lawful basis to process it.
- Right to object: You may object to the processing of your personal information where we rely on legitimate interest as our lawful basis.
- Right to lodge a complaint: If you believe we have handled your personal information unlawfully, you may lodge a complaint with the Information Regulator of South Africa at https://www.justice.gov.za/inforeg/ or by email at inforeg@justice.gov.za.
To exercise any of these rights, please contact us at kushandcoil@gmail.com. We will respond to your request within a reasonable time and in accordance with POPIA.
Security Measures
We take the security of your personal information seriously. Our website uses HTTPS encryption for all data transmitted between your browser and our servers. Access to personal data is restricted to authorised staff only. Passwords are stored using strong one-way hashing. We regularly review our security practices and update them as needed. While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make significant changes, we will notify you by updating the date at the top of this page and, where appropriate, by sending an email notification to registered account holders. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have any questions or concerns about this privacy policy or how we handle your personal information, please contact us at kushandcoil@gmail.com.
Last updated: 30 April 2026