Privacy Policy

Privacy Policy: Luigi Disposable Carts

At Luigi Disposable Carts, we value and respect your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase from our website. By using our site, you agree to the practices described below.

1. Information We Collect

When you visit our website or place an order, we may collect the following information:

Personal details such as your name, email address, shipping address, and phone number.
Payment information processed securely through trusted third-party gateways.
Non-personal details such as IP address, browser type, and browsing behavior for analytics.

2. How We Use Your Information

We use the information collected to:

Process and fulfill your orders for Luigi disposable carts and products.
Communicate with you regarding order status, promotions, or updates.
Improve our website performance, user experience, and product offerings.
Ensure compliance with applicable laws and regulations.

3. Data Protection and Security

Your data security is our priority. We use advanced SSL encryption, secure servers, and regularly updated firewalls to safeguard your information from unauthorized access, misuse, or disclosure. Payment details are never stored on our servers.

We do not sell, trade, or rent your personal information to third parties. Your data may only be shared with trusted service providers (such as shipping carriers or payment processors) strictly for order fulfillment purposes.

5. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies allow us to:

Remember your preferences for future visits.
Track website traffic and analytics to improve performance.
Personalize content and promotions related to Luigi carts, disposables, and vape products.
You can choose to disable cookies in your browser, but some website features may not function properly.

6. Third-Party Services

We may use trusted third-party tools like Google Analytics or marketing platforms to understand customer behavior and improve services. These platforms may collect non-personal data under their own privacy policies.

7. Age Restriction

Our website and products are intended for adults 21 years and older. We do not knowingly collect information from minors. If you are under 21, please do not use our website or purchase products.

8. Your Rights

As a customer, you have the right to:

Request access to the personal data we hold about you.
Request corrections or updates to inaccurate information.
Request deletion of your data, subject to legal and transactional obligations.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect new regulations, technologies, or business practices. Updates will be posted on this page with the revised effective date.

10. Contact Us

For questions or concerns regarding this Privacy Policy, please contact us at:
Email: support@luigicartsdisposables.com
Website: www.luigicartsdisposables.com

This Privacy Policy in Short

This privacy policy explains what we collect, why, and what we never do with it. The short version: we collect what an order needs and nothing else, we do not sell data, and this privacy policy is written to be read rather than to satisfy a checkbox.

Orders and data covered by the Luigi Carts privacy policy — Order data covered by this privacy policy.

Your rights under this privacy policy

You can ask what we hold, ask for it to be corrected, or ask for it to be deleted where we are not legally required to keep it. Rights differ by state, and the background on information privacy law sets out how much they vary. This privacy policy is updated whenever our processing changes.

What We Collect at Each Stage

Rather than a single list, it is more useful to see what is collected at each point of contact, because most visitors never reach the stages where anything meaningful is gathered.

Stage	What is collected	Why
Browsing pages	IP address, browser type, pages viewed, referring site	Server logs and basic analytics. Not linked to a name
Age gate	A yes or no confirmation stored in your browser	So you are not asked on every page. No date of birth is stored
Adding to cart	Cart contents in a browser cookie	So your basket survives page changes
Placing an order	Name, delivery address, email, phone	Required to fulfil and deliver the order
Payment	Nothing. Card details go directly to the processor	We never see or store full card numbers
Contacting us	Your name, email and the content of your message	To reply and to reference the conversation later
Order tracking	Order reference and delivery status from the carrier	To answer where is my parcel questions

Two points are worth drawing out. Simply reading this site does not require you to identify yourself, and nothing on these pages asks you to create an account before you can read them. And the payment row is the important one: card details are entered on the processor’s infrastructure rather than ours, which means a breach of this website could not expose card numbers because they were never here.

How Long We Keep Things

Data kept indefinitely is data waiting to leak, so retention periods matter as much as collection.

Data	Kept for	Reason
Order records	As long as tax and accounting rules require	Legal obligation. These cannot be deleted on request
Delivery address	With the order record	Needed to resolve delivery disputes
Support messages	Around two years	So a repeat issue has context
Server logs	A short rolling window	Security and troubleshooting
Analytics data	Aggregated, retained in summary form	Understanding which pages are useful
Marketing consent	Until you withdraw it	Withdrawal is immediate and permanent

Cookies in Practical Terms

Cookie notices tend to obscure more than they explain, so here is the plain version of what is set and what each one does.

Strictly necessary cookies keep your cart contents, remember that you passed the age gate, and maintain your session through checkout. The site cannot function without these and they are not used for advertising.

Analytics cookies record which pages are visited and how people move between them, in aggregate. This is how we know which guides are useful and which are not being found. This data is not used to build a profile of you as an individual.

What we do not do. We do not sell personal data, we do not share customer lists with third parties for their own marketing, and we do not attempt to identify individual visitors from browsing behavior.

You can clear or block cookies in your browser settings at any time. Blocking strictly necessary cookies will break the cart and the age gate. Guidance on managing cookies is available from the FTC consumer privacy pages.

Age Verification and What It Stores

This site sells regulated products and carries an age gate on entry. The gate stores a simple confirmation in your browser so that you are not asked repeatedly. It does not store a date of birth, it does not verify your identity against any database, and it does not create a record tied to you.

That is worth being explicit about because some age verification systems do collect identity documents. This one does not. The trade off is that a browser level gate is a deterrent rather than a proof, which is why the underlying obligation not to purchase if you are under the legal age in your jurisdiction rests with you.

How Information Is Protected

Transport encryption. The whole site is served over HTTPS, which means data moving between your browser and the server is encrypted in transit. You can confirm this from the padlock in your address bar on any page, including this one.

Payment isolation. As above, card data never touches this server. This is the single most effective security control available to a small retailer, because the safest way to protect payment data is not to hold it.

Access limits. Order data is accessible only to the people who need it to fulfil orders and answer support messages.

Honest limits. No website can promise absolute security, and any that does is overstating. What we can say is that the categories of data most attractive to an attacker, meaning payment credentials, are not stored here at all.

Your Rights and How to Use Them

Privacy rights in the United States are set at state level rather than federally, so what you are entitled to depends on where you live. Residents of states with comprehensive privacy legislation, California among the first, generally have the right to know what is held, to have it corrected, to have it deleted, and to opt out of any sale of personal information. We do not sell personal information, so that last right has nothing to act on here.

To exercise any of these, contact us with enough detail to locate your records, which usually means the email address used on the order. We will confirm receipt and respond within a reasonable period. Where a request conflicts with a legal obligation, most commonly the requirement to retain financial records, we will tell you which part we cannot action and why rather than simply refusing.

If you are unhappy with how a request was handled, your state attorney general’s office is the usual route for a complaint, and the FTC reporting portal handles wider consumer complaints.

Changes to This Policy

This policy is revised in place rather than replaced, so the URL stays stable and links to it continue to work. Material changes, meaning anything that alters what is collected or who it is shared with, will be reflected in the effective date at the top. Continued use of the site after a change constitutes acceptance of the revised policy.

Questions about anything here can go through the contact page. Related policies are set out in our refund and returns policy and terms.

Third Parties That Necessarily See Some Data

No online retailer operates alone, and pretending otherwise would make this policy dishonest. A small number of service providers handle data on our behalf, each limited to what their function requires.

The payment processor receives your card details directly and the order amount. They do not receive the contents of your order beyond what is needed to process the transaction, and we receive only a confirmation and a masked reference.

The delivery carrier receives your name, delivery address and phone number, because a parcel cannot be delivered without them. They do not receive the contents of the order in any itemized form.

The hosting provider necessarily stores the site and its database on their infrastructure, which means they hold order data in the same sense that any landlord holds what is in the building.

Analytics receives page view data in aggregate.

Each of these is a processor acting on instructions rather than an independent party free to use the data for its own purposes. We do not pass customer information to advertisers, data brokers, or other retailers, and there is no arrangement under which anyone pays us for access to it.

Discretion and Packaging

Privacy in this category is not only about databases. Given what is being purchased, the physical handling of an order matters as much to most customers as the data policy.

Orders are dispatched in plain outer packaging with no branding, no product imagery and no indication of the contents on the exterior. The sender information required by the carrier is minimal. Nothing on the outside of a parcel identifies what is inside or which retailer it came from.

Correspondence follows the same principle. Emails about an order use a neutral subject line, and we do not send unsolicited marketing to anyone who has not asked for it. If you have opted into updates and change your mind, the unsubscribe link works immediately rather than after a processing period.

Details of how dispatch and tracking work in practice are on the order tracking page.

This Policy in One Paragraph

We collect what an order needs and nothing more. Card details never touch this server because they go directly to the payment processor. The age gate stores a yes or no in your browser, not a date of birth or an identity document. Order records are kept as long as tax rules require and support messages for about two years.

We do not sell personal data, we do not share customer lists, and the only third parties involved are the processor, the carrier, the host and analytics, each limited to what their function needs. Parcels go out in plain packaging with nothing on the outside identifying the contents. You can ask what we hold, ask for it to be corrected, or ask for it to be deleted where no legal obligation requires us to keep it.