Privacy Policy

PRIVACY POLICY

Texas Cloud Distro
texasclouddistro.com
Effective Date: June 1, 2026 | Last Updated: June 1, 2026

Introduction and Who We Are

Texas Cloud Distro ("Company," "we," "us," or "our") is a wholesale distributor of nicotine products, vaping devices, hemp-derived products, and related accessories, operating from the state of Texas. Our website, texasclouddistro.com (the "Site"), is intended exclusively for licensed retail businesses, smoke shops, convenience stores, and other commercial buyers who are authorized to purchase and resell age-restricted products in their respective jurisdictions.

This Privacy Policy explains how Texas Cloud Distro collects, uses, discloses, retains, and protects information obtained through the Site. By accessing or using our Site, you represent that you are a duly authorized representative of a licensed business entity and that you are at least 21 years of age. This Site is not intended for individual consumer use.

IMPORTANT: This is a Business to Business (B2B) platform. We do not knowingly permit access by minors or unlicensed individuals. All account registrations are subject to verification of business licensing.

Age Verification and Legal Compliance (21+)

Because Texas Cloud Distro sells nicotine products, electronic nicotine delivery systems (ENDS), smokeless tobacco, and hemp-derived products, this section is of critical legal importance. Our operations are governed by several federal and state laws that mandate strict age verification and data handling obligations.

Tobacco 21 (T21) — Federal Law

Under the federal Tobacco 21 (T21) law, the minimum age to purchase tobacco and nicotine products in the United States is 21 years old. No person under the age of 21 may purchase, or attempt to purchase, any nicotine or tobacco product from Texas Cloud Distro. By creating an account or placing an order on our Site, you confirm that you are at least 21 years of age and represent a licensed business entity.

PACT Act — Federal Compliance Requirements

The Prevent All Cigarette Trafficking (PACT) Act, as amended by the Consolidated Appropriations Act of 2021 (15 U.S.C. § 376a), governs all online sales and shipments of tobacco products and electronic nicotine delivery systems (ENDS), including vaping devices, e-liquids, nicotine pouches, and related products. Our compliance obligations under the PACT Act include:

Age Verification: We are required to verify the age and identity of all buyers through commercially available databases before fulfilling any order involving ENDS or tobacco products.
ATF Registration: Texas Cloud Distro is registered with the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) as a distributor of ENDS and smokeless tobacco products.
State Tax Reporting: We file monthly delivery sales reports with the tax administrators of each state to which we ship regulated products, as required by federal and applicable state law.
Carrier Compliance: All shipments of regulated products are made only through carriers operating in compliance with the PACT Act. USPS is prohibited from carrying these products.
Adult Signature on Delivery: All shipments of nicotine and tobacco products require an adult (21+) signature and presentation of valid government-issued photo ID upon delivery.
Package Labeling: All packages containing ENDS or tobacco products bear the federally mandated warning label: "CIGARETTES/NICOTINE/SMOKELESS TOBACCO: FEDERAL LAW REQUIRES THE PAYMENT OF ALL APPLICABLE EXCISE TAXES, AND COMPLIANCE WITH APPLICABLE LICENSING AND TAX-STAMPING OBLIGATIONS."

Data collected for PACT Act compliance — including name, business address, date of birth, and identity verification records — is used solely for legal compliance with the ATF, USPS, and applicable state tax authorities. This data is retained for a minimum of four (4) years as required by federal law. We do not sell or share this data for marketing or commercial purposes.

Tobacco 21 State Laws

In addition to federal T21 requirements, many states have enacted their own regulations governing the sale, distribution, and taxation of vaping and tobacco products. Texas Cloud Distro complies with all applicable state laws in jurisdictions where we operate or ship. Buyers are solely responsible for ensuring their purchases comply with the laws of their state and locality, including any applicable licensing, taxation, or flavor restrictions.

Information We Collect

Texas Cloud Distro collects information in the following categories, limited to what is necessary to operate our platform, fulfill orders, and comply with applicable law.

Business and Account Information

Legal business name and DBA (if applicable).
Federal Employer Identification Number (EIN) or Tax ID.
State business license number and/or tobacco retail license.
Business address, phone number, and email address.
Name and date of birth of the authorized account representative (for age verification purposes).
Government-issued ID information (for PACT Act verification).

Transaction and Order Data

Products ordered, quantities, pricing, and order history.
Shipping address and delivery instructions.
Payment information (processed through PCI-DSS compliant payment processors; we do not store full card numbers).
Invoices and purchase records.

Automatically Collected Technical Data

IP address and approximate geolocation (city/state level).
Browser type, operating system, and device identifiers.
Pages visited, time spent, click patterns, and referral source.
Cookie identifiers and session data (see Section 9 for cookie details).

Communications

Emails, support tickets, and chat messages sent to us.
Responses to surveys or feedback requests.

We do not collect sensitive personal data such as Social Security Numbers, biometric identifiers, health information, race, ethnicity, religion, or sexual orientation. We do not target, market to, or knowingly collect data from individuals under the age of 21.

How We Use Your Information

We use the information we collect for the following purposes:

Order Processing: To fulfill, ship, and track wholesale orders placed through our Site.
Account Management: To create and manage your business account and purchasing history.
Age and Identity Verification: To verify that all buyers are 21+ and represent a licensed business, as required by T21, the PACT Act, and applicable state laws.
Legal and Regulatory Compliance: To file required reports with the ATF and state tax authorities, maintain mandatory transaction records, and respond to lawful requests from regulatory agencies.
Payment Processing: To charge for orders and process refunds through our payment processors.
Customer Support: To respond to inquiries, resolve disputes, and provide technical assistance.
Site Improvement: To analyze usage patterns and improve the functionality, security, and content of our Site.
Marketing Communications: To send product updates, promotions, and industry news to registered business customers who have opted in. You may opt out at any time (see Section 7).
Security and Fraud Prevention: To detect and prevent unauthorized access, fraud, and misuse of our platform.

We do not sell your personal data to third party advertisers. We do not use your data to build consumer profiles for resale.

How We Share Your Information

Texas Cloud Distro does not sell personal information. We share data only in the following circumstances:

Required by Law — Regulatory Authorities

We are legally required to share certain transaction and buyer information with government agencies, including:

The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) — PACT Act registration and compliance.
State tax administrators — Monthly delivery sales reports for states where regulated products are shipped.
Law enforcement agencies — When required by a valid court order, subpoena, or legal process.

Service Providers and Processors

We work with trusted third-party vendors who assist us in operating our business. These vendors are contractually bound to use your data only for the services they provide to us:

Age Verification Providers: Third-party services that verify buyer age and identity against commercial databases, as mandated by the PACT Act.
Payment Processors: PCI-DSS compliant payment gateways that handle transaction data.
Shipping and Logistics Carriers: Carriers authorized to ship PACT Act-compliant packages and who collect adult signatures upon delivery.
Email and CRM Platforms: Services used to manage business communications and marketing (only for opted-in contacts).
Analytics Providers: Tools that help us understand how our Site is used (data is aggregated and/or anonymized where possible).

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your business information may be transferred to the acquiring entity as part of the transaction. We will notify affected account holders via email or a prominent Site notice prior to any such transfer.

Data Retention

We retain personal and business information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

PACT Act Transaction Records: Minimum four (4) years, as required by 15 U.S.C. § 376a and ATF regulations.
Age Verification Records: Retained for the duration required by applicable federal and state law, and no longer than necessary for compliance purposes.
Account Information: Retained for the lifetime of your active account, plus three (3) years following account closure, unless a longer period is required by law.
Financial and Payment Records: Retained for seven (7) years for tax and accounting purposes.
Support Communications: Retained for three (3) years following resolution of the inquiry.

When data is no longer required, we securely delete or anonymize it in accordance with our internal data management procedures.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data. Texas Cloud Distro respects and honors these rights as described below.

Texas Residents — Texas Data Privacy and Security Act (TDPSA)

Under the Texas Data Privacy and Security Act (effective July 1, 2024), Texas residents have the following rights:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Correct: You may request that we correct inaccurate or incomplete personal data.
Right to Delete: You may request deletion of your personal data, subject to legal retention obligations (e.g., PACT Act records cannot be deleted).
Right to Data Portability: You may request your personal data in a portable, machine-readable format.
Right to Opt Out of Sale or Targeted Advertising: You may opt out of the sale of your personal data and the use of your data for targeted advertising purposes.

To exercise any of these rights, please contact us at texasclouddistro@gmail.com. We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.

Universal Opt-Out Mechanism (Global Privacy Control)

As required by the TDPSA (effective January 1, 2025), Texas Cloud Distro honors Global Privacy Control (GPC) signals. If your browser or device is configured with a GPC signal indicating an opt-out preference for data sales or targeted advertising, our Site will recognize and honor that signal automatically. No separate opt-out request is required when a valid GPC signal is detected.

California Residents — CCPA

If you are a California resident and your data is subject to the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA), you have the right to know what personal information we collect, to request deletion, to opt out of data sales, and to non discrimination for exercising your rights. Please contact us at texasclouddistro@gmail.com to submit a CCPA request.

Marketing Opt-Out

If you have opted in to receive marketing communications from Texas Cloud Distro, you may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by contacting us at texasclouddistro@gmail.com. Transactional communications related to your orders and account are not subject to marketing opt out.

Data Security

Texas Cloud Distro implements administrative, technical, and physical safeguards designed to protect your personal and business information against unauthorized access, disclosure, alteration, and destruction. These measures include:

Encryption of data in transit (SSL/TLS) and at rest for sensitive records.
Access controls limiting employee access to personal data on a need to know basis.
Regular security assessments and monitoring of our platform.
PCI-DSS compliant payment processing — full payment card numbers are never stored on our systems.

No method of data transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that may affect your information, we will notify you as required by applicable law.

Cookies and Tracking Technologies

Texas Cloud Distro uses cookies and similar tracking technologies to operate our Site and understand how it is used. The types of cookies we use include:

Essential Cookies: Required for the Site to function (e.g., session management, cart, login). These cannot be disabled.
Analytics Cookies: Help us understand traffic patterns and user behavior on the Site (e.g., Google Analytics). Data collected is aggregated and used only to improve our platform.
Preference Cookies: Remember your settings and preferences across visits.

You may control cookie settings through your browser. Disabling non-essential cookies will not affect your ability to place orders. For users sending a Global Privacy Control signal, advertising and tracking scripts are suppressed in compliance with the TDPSA.

Children's Privacy (COPPA)

Texas Cloud Distro's Site is intended exclusively for authorized business representatives who are at least 21 years of age. We do not knowingly collect personal information from anyone under the age of 13, and we do not direct any marketing or content toward minors. Our age verification process is designed to prevent access by underage individuals.

If we become aware that we have inadvertently collected personal information from a person under 13, we will promptly delete that information. If you believe we may have collected information from a minor, please contact us immediately at texasclouddistro@gmail.com.

Our Site may contain links to third party websites or resources. Texas Cloud Distro is not responsible for the privacy practices, content, or security of third-party sites. We encourage you to review the privacy policies of any third party sites you visit.

Changes to This Privacy Policy

Texas Cloud Distro reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this document and post a notice on our Site. For significant changes that affect how we handle your personal data, we will notify registered account holders by email at least 30 days before the changes take effect.

Your continued use of the Site after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how Texas Cloud Distro handles your information, please contact us:

Texas Cloud Distro

Website: texasclouddistro.com
Email: texasclouddistro@gmail.com
State of Operations: Texas, United States