Legal

Privacy Policy

Last updated: 30 September 2026

This Privacy Policy explains how Pure Ohms Shop collects, uses, shares and protects personal information when you visit pureohmsshop.com or place an order. We aim to collect the minimum we need and to keep it secure.

1. Information we collect

Information you give us: name, email address, shipping and billing address, telephone number, order history, and any information you submit through our contact form, wholesale application or newsletter signup.

Payment information: card details are entered directly into our payment processor’s secure fields. We receive only a token, the last four digits of the card and the outcome of the transaction. We never store full card numbers.

Information collected automatically: IP address, device and browser type, operating system, referring URL, pages viewed, time on page and approximate location derived from IP. This is collected using cookies and similar technologies.

Age verification: a cookie recording that you confirmed you are 21 or older, and if we request verification, the verification outcome.

2. How we use your information

• To process, pack, dispatch and track your order, and to send order and shipping confirmations.
• To provide customer support and handle returns, refunds and complaints.
• To verify that you are 21 or older and that your delivery address is one we can legally serve.
• To detect and prevent fraud, chargeback abuse and other misuse of the Site.
• To send marketing emails where you have opted in — you can unsubscribe at any time using the link in every email.
• To analyse and improve the performance, content and usability of the Site.
• To comply with legal, tax and regulatory obligations.

3. Legal bases

Where required by law, we rely on: performance of a contract (to fulfil your order), legitimate interests (fraud prevention, site security, service improvement), consent (marketing emails, non-essential cookies), and legal obligation (tax and accounting records).

4. Cookies

We use strictly necessary cookies to run the shopping cart, keep you signed in and record your age confirmation; analytics cookies to understand how the Site is used; and marketing cookies where you have consented. We also set a cache-vary cookie and may store a preference cookie. You can delete or block cookies in your browser settings; blocking strictly necessary cookies may prevent checkout from working.

5. Sharing your information

We share personal information only with parties who need it to deliver our service:

• Payment processors — to authorise and settle payments.
• Shipping carriers and fulfilment partners — to deliver your order and provide tracking.
• Email and hosting providers — to operate the Site and deliver transactional and marketing email.
• Analytics providers — to measure site performance.
• Professional advisers and authorities — where required by law, court order, or to establish or defend legal claims.

We do not sell your personal information. We do not share your data with third parties for their own marketing purposes.

6. International transfers

Our servers and service providers are primarily located in the United States. If you are in Canada, the EU or the UK, your information will be transferred to and processed in the United States, which may have different data protection rules. We use appropriate contractual safeguards where required.

7. Data retention

Order and transaction records are retained for as long as required for tax, accounting and legal purposes (typically seven years). Marketing contact details are retained until you unsubscribe. Analytics data is retained in aggregate form. Age-verification cookies expire after 30 days.

8. Security

The Site is served over TLS/HTTPS. Access to customer data is restricted to staff who need it. Payment data is tokenised and never stored on our servers. No system is completely secure; if a breach affecting your rights occurs we will notify you and any relevant regulator as required by law.

9. Your rights

Depending on where you live you may have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion; object to or restrict certain processing; withdraw consent; and request portability. California residents have rights under the CCPA/CPRA, including the right to know, delete and correct, and the right not to be discriminated against for exercising those rights. Canadian residents may contact the Office of the Privacy Commissioner.

To exercise any right, email [email protected]. We will respond within the timeframe required by applicable law.

10. Children

The Site is intended for adults aged 21 and over. We do not knowingly collect personal information from anyone under 21. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Do Not Track

We do not currently respond to browser Do Not Track signals. Where required, we honour opt-out preference signals recognised by applicable law.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be announced on this page with a revised “last updated” date.

13. Contact

Privacy questions: [email protected] or use our contact form.