// Privacy Policy page
const PrivacyPage = ({setRoute}) => (
<>
{/* Hero */}
Legal · Privacy Policy
Privacy Policy.
Last updated: January 1, 2026. This policy explains how Smoke Show Labs ("we," "us," "our") collects, uses, and protects your information when you visit our website or engage our services.
{/* Policy body */}
We collect information you provide directly to us, including when you create an account, submit a wholesale application, contact us through our website forms, subscribe to our email list, or place an order.
This may include: name, email address, phone number, business name, business license or resale certificate number, shipping and billing address, and payment information. Payment card data is processed by our payment processor and is not stored on our servers.
We also collect information automatically when you visit our website: IP address, browser type and version, operating system, referring URLs, pages visited, and time spent on pages. This data is collected through cookies and similar tracking technologies.
We use the information we collect to:
- Process and fulfill your orders and wholesale applications
- Communicate with you about orders, programs, and account status
- Send transactional emails (order confirmations, shipping notifications, COA delivery)
- Send marketing communications, if you have opted in
- Improve our website and services
- Comply with legal obligations
- Detect, investigate, and prevent fraudulent or illegal activity
We do not sell your personal information to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
We share your information with third parties only as necessary to operate our business and fulfill your orders:
- Shipping carriers (UPS, FedEx) — name, address, order details for delivery
- Payment processors — billing name, address, and card details for payment processing
- Email service providers — email address for transactional and marketing communications
- Analytics providers — anonymized usage data for website analytics
- Legal and regulatory authorities — when required by law, court order, or regulatory requirement
All third-party service providers are contractually bound to protect your information and use it only for the purposes we specify.
We use cookies and similar technologies to remember your preferences, maintain your session (age verification, cart contents), and understand how visitors use our website.
Types of cookies we use:
- Essential cookies — required for basic site functionality (age gate, session, cart)
- Analytics cookies — help us understand website traffic and usage patterns
- Preference cookies — remember your settings and choices
You can control cookies through your browser settings. Disabling essential cookies may affect site functionality. For California residents, see the CCPA section below.
We retain your personal information for as long as your account is active, as needed to provide our services, or as required by law. Order and business records are retained for a minimum of seven years for tax and regulatory compliance.
You may request deletion of your personal information at any time (subject to legal retention requirements) by emailing info@smokeshowlabs.com.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to know what personal information we collect and how it is used
- Right to access a copy of your personal information
- Right to delete your personal information (subject to exceptions)
- Right to opt out of the sale of your personal information (we do not sell data)
- Right to non-discrimination for exercising your privacy rights
- Right to correct inaccurate personal information (GDPR)
- Right to data portability (GDPR)
To exercise any of these rights, contact us at info@smokeshowlabs.com or visit our setRoute && setRoute("ccpa")}>CCPA page.
We implement industry-standard security measures to protect your information, including TLS encryption for data in transit and access controls for data at rest. No method of electronic transmission or storage is 100% secure. We will notify you in the event of a data breach affecting your personal information as required by applicable law.
Our website and services are intended for individuals who are 21 years of age or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected information from a minor, we will delete it promptly.
For privacy-related questions, requests, or complaints:
>
);
const PolicySection = ({num, title, accent="cyan", children}) => {
const color = accent === "cyan" ? "var(--color-cyan)" : "var(--color-pink)";
return (
);
};
const PolicyPara = ({children}) => (
{children}
);
// Export shared policy components for use by Terms.jsx
Object.assign(window, { PrivacyPage, PolicySection, PolicyPara });