This policy describes what we collect, why we collect it, and what we do with it. We are the only ones who run this site, and we are the only ones who access your data except for the specific service providers we name below.

We collect your name, shipping address, billing address, email address, phone number, date of birth, and payment information. Payment information is sent directly to Stripe or PayPal. We never store your full card number on our servers. We store a payment token that the processor gives us, which lets us issue refunds without asking you for your card again.

We collect your IP address, browser type, operating system, the pages you visit, the time you spend on each page, and the link you clicked to reach us. That data goes into Google Analytics. We use it to see which products get the most interest, where our traffic comes from, and whether our checkout flow is losing customers. For example, if we see that 40% of visitors drop off on the shipping address page, we know that page needs to be simpler.

We use cookies for essential functions: keeping your cart items as you browse, remembering that you are logged in, and storing your session ID so we can process your order correctly. We also use a cookie to remember that you have seen our age‑gate popup so we don’t show it again on every page. You can disable cookies in your browser settings, but doing so will break the cart and checkout.

We do not sell your personal information. We do not share it with advertisers. We do not give it to data brokers. The only third parties that receive your data are our payment processors (Stripe and PayPal), our shipping carriers (USPS, UPS, and FedEx), our email service provider (Klaviyo or Mailchimp, depending on which we use for order confirmations and marketing), and our age‑verification service (Veratad or AgeChecker). Each of these companies is under contract to use your data only for the service they provide. They cannot sell it, share it, or use it for their own purposes.

We keep your order history for as long as you have an account. If you ask us to delete your account, we remove your personal identifiers from our active database within 30 days. We keep anonymized order data for tax and accounting purposes, because we are legally required to hold sales records for seven years. That anonymized data does not include your name, email, or address.

You can access your personal data at any time by logging into your account. You can correct your shipping address, update your email, or change your phone number. If you want a copy of everything we have about you, email support@switchdisposable.com and we will send it within two weeks. If you want us to delete your account, we do that too. Just ask.

We send order confirmation emails, shipping updates, and occasional promotional offers. You can unsubscribe from promotional emails by clicking the link at the bottom of any such email. We still send order‑related emails even if you unsubscribe from marketing.

We have security measures in place. Our site uses TLS 1.3 encryption. Our database is behind a firewall and accessible only from our application servers. We run automatic vulnerability scans every week. We do not store any credit card data on our own systems. We do not store scanned ID images longer than 30 days.

If we change this policy, we update the date at the top. For significant changes, we email all active account holders. For minor changes, we post the new version and you are considered to have accepted it by continuing to use the site.

If you have questions or concerns, contact us at contact@switchdisposable.com. We respond within one business day.