Privacy

PRIVACY POLICY

Last updated 28 September 2026

Big Vape (bigvape.co.nz) is run by IDP International Limited, 5/53 Cavendish Drive, Manukau, Auckland 2104. This policy explains what personal information we collect, why we collect it, who we share it with and how you can see or correct it. We follow the Privacy Act 2020.

What we collect

Your name, email address, phone number, and billing and delivery address when you create an account or place an order.
Your order history.
Your date of birth and the identity details you give us to confirm you are 18 or over (see Age verification below).
Your email address for our newsletter, only if you opt in.

Age verification

New Zealand law (the Smokefree Environments and Regulated Products Act 1990) prohibits selling vaping products to anyone under 18, and we must take reasonable steps to confirm every buyer’s age. A statement that you are over 18 is not enough on its own.

At checkout we ask for your name, date of birth, and the number of your NZ driver licence or NZ passport. With your consent, we send these details to Centrix Group Limited, a New Zealand identity verification provider. Centrix checks them against the NZ Transport Agency (Waka Kotahi) driver licence register or the Department of Internal Affairs passport records, and tells us whether they match and whether you are 18 or over.

We only use these details to confirm your age. We don’t use them for marketing, credit checks or anything else.
We keep the result (verified or not verified) and your date of birth against your account or order. We don’t keep your licence or passport number after the check.
Centrix keeps a copy of each check on our behalf, as our agent, under its own retention policy (centrix.co.nz/historical-reports).
If you have an account, the check runs once and is remembered. Guest orders are checked every time.
If the electronic check can’t confirm your age, or you don’t have one of those documents, you can upload a photo of an accepted ID (such as an 18+ card, Kiwi Access card or overseas passport). Our staff check it before your order is sent, and we delete the image once the check is done.

If you don’t want your details checked, we can’t complete your order.

Payment details

We never store your credit card details, on our servers or on our premises. Card payments are processed in real time by an independent payment gateway authorised by our bank. All transactions on this website are encrypted with SSL.

Who we share your information with

We never sell your personal information. We only share it with the companies that help us run the store, and only what each one needs:

Centrix, to verify your age (as above).
Our payment provider, to process your payment.
Courier companies, to deliver your order.
Our website host and email provider, who store and send information on our behalf.

We may also disclose information where the law requires it, for example to the Ministry of Health.

How long we keep it

We keep account and order records for as long as your account is open and as long as we need them for tax and legal purposes. You can ask us to close your account at any time.

Seeing or correcting your information

You can ask to see the personal information we hold about you, and ask us to correct it. Contact our privacy officer:

Privacy Officer, IDP International Limited
5/53 Cavendish Drive, Manukau, Auckland 2104
Email: [email protected]
Phone: 021 422 566

If you’re not happy with how we handle your request, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

You will only receive our newsletter if you explicitly opt in, and you can unsubscribe at any time.

ELECTRONIC CIGARETTES & THE LAW
Australian residents may purchase nicotine-containing e-cigarettes provided they order from an overseas source, the order is for a 3-month or less supply, and they are intended for personal use. To avoid customs fees, customers should ensure their order does not exceed $ AU 1000 in value. Electronic cigarettes are not subject to GST.