Privacy Notice

Introduction and Scope

This Privacy Policy governs how Next Generation Mart (referred to as "NxtGen Mart", "we," "us," or "our") collects, uses, maintains, and discloses information from users of the website (https://www.nxtgenmart.com) and our associated iOS and Android mobile applications (collectively, the "NxtGen Mart Services" or "Services"). This policy applies to the Site and all products and services offered by Next Generation Mart. The Services are intended for customers in the State of Delaware only, within a 25-mile delivery radius of our store at 1114 Ogletown Rd Ste B, Newark, DE 19711.

This policy is designed to comply with applicable US federal and state laws, including the Delaware Personal Data Privacy Act (DPDPA), Delaware Code Title 16 § 2903 (Tobacco 21 Law), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable federal and state privacy laws.

What Information We Collect (Sources and Categories)

We collect various categories of personal information through three primary sources.

Information You Give Us Directly

Identifiers: Name, email address, phone number, account username.

Financial/Commercial: Credit card information, transaction history, and purchase records.

Other: Mailing address, delivery address, feedback, and voice input (if you use any in-app assistant or voice search).

Voluntary Submission: We collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personally identifiable information, except that it may prevent them from engaging in certain site-related activities.

Age Verification Data

Because NxtGen Mart sells tobacco and vaping products regulated under Delaware Code Title 16 § 2903 (Tobacco 21 Law), we collect and process the following age-related information to comply with our legal obligations.

Date of Birth: When you attempt to access or purchase age-restricted products, you will be asked to provide your date of birth. We use this information solely to verify that you meet the minimum age requirement of 21 years. Your date of birth is stored securely and is not used for marketing purposes.

Age Verification Result: We record whether your age was successfully verified, the method used (in-app date-of-birth entry or device-level age signal), and the timestamp of verification. This record is maintained as part of our compliance audit trail as required by applicable law.

Device-Level Age Signals (iOS): On iOS devices, we may query Apple's Declared Age Range API to obtain an OS-level signal indicating whether your Apple ID is associated with an adult account. If the API returns an "adult" classification, we use that signal to streamline the age verification process. This query is performed at app launch on iOS only and does not transmit your date of birth to Apple — it returns only a general age range.

Government-Issued ID at Delivery: Our drivers visually inspect your government-issued photo ID at the time of delivery of age-restricted items to confirm that you are 21 or older. We do not scan, photograph, or retain a copy of your ID. The driver records only that a valid ID was presented and confirmed, along with the delivery timestamp.

Compliance Audit Log: As required by Delaware law, we maintain a log of age-verification events associated with each transaction involving age-restricted products. This data is retained for a minimum of five (5) years and may be disclosed to regulatory authorities upon lawful request.

Information Collected Automatically

Identifiers: IP address, unique device identifiers (e.g., Advertising ID), cookie identifiers.

Internet/App Activity: Browsing history, app usage data, search queries, referral URLs, technical logs, device operating system, and Internet service providers utilized.

Geolocation: Precise Geolocation Data (if you permit the mobile app to access your location). We use your location solely to verify that your delivery address falls within our 25-mile Delaware service area. Your location is not used for background tracking, profiling, or advertising purposes.

Sensory: Information related to cameras, sensors, or computer vision (if such technology is employed).

Cookies: Our Site may use "cookies" to enhance User experience. Cookies are placed on your hard drive for record-keeping and sometimes to track information. You may configure your browser to decline cookies, though some features of our Service may not function properly as a result.

Information from Other Sources

Operational Data: Updated delivery and address information from our delivery management systems and mapping services.

Risk Data: Fraud prevention reports and credit history information from credit bureaus (for fraud and risk assessment).

Business Partners: Information shared by trusted partners to verify identity or improve services.

How We Use Collected Information (Business Purposes)

NxtGen Mart uses your personal information for the following business purposes.

• Fulfilling Transactions: To process payments and provide service to your order.
• Age and Identity Verification: To verify that customers purchasing age-restricted products meet the minimum age requirement of 21 years as mandated by Delaware Code Title 16 § 2903, and to maintain the compliance records required by law.
• Geographic Enforcement: To verify that your delivery address is located within the State of Delaware and within our 25-mile service radius, consistent with our legal authority to operate.
• Customer Service and Support: Information you provide helps us respond to your customer service requests and support needs more efficiently.
• Personalization and Improvement: To personalize user experience, improve our Site and products, and understand how Users as a group use our services.
• App-Specific Features: When you use our voice or camera features, we use your input to respond to your requests and improve service accuracy.
• Security and Fraud Prevention: To prevent and detect fraud, abuse, unauthorized access, and protect the security of our Services and systems.
• Legal Compliance: To comply with applicable federal, state, and local laws and regulations, including Delaware Code Title 16 § 2903, the Delaware Personal Data Privacy Act, and any lawful requests from regulatory authorities.
• Marketing Communications: To send User information and updates, and to respond to inquiries. You may opt out of marketing communications at any time.

How We Protect Your Information (Security Measures)

We prioritize data security and implement industry-standard practices.

Encryption: Sensitive and private data exchange happens over an SSL-secured communication channel and is encrypted and protected with digital signatures.

PCI Compliance: When processing payment card information, we maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS).

Access Control: We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. Access to age-verification records is restricted to authorized personnel and regulatory authorities only.

Data Retention: Age-verification compliance records are retained for a minimum of five (5) years as required by applicable Delaware regulations. Other personal data is retained only as long as necessary to fulfill the purposes described in this policy or as required by law.

Sharing Your Personal Information

We do not sell, trade, or rent Users' personal identification information to others. We may disclose your information to the following categories of recipients.

Service Providers: Third-party companies that perform functions on our behalf (e.g., payment processors, mapping services, cloud hosting providers). We do not share payment information with outside parties except as necessary to provide the payment service.

Regulatory and Law Enforcement Authorities: We may disclose personal information, including age-verification records and compliance logs, to the Delaware Division of Public Health, the Delaware Department of Justice, law enforcement agencies, or other regulatory bodies when required by law, pursuant to legal process, or in connection with an investigation of suspected violations of Delaware Code Title 16 § 2903 or any other applicable law.

Business Transfers: Information may be transferred as a business asset in the event of a merger, acquisition, or sale of assets. Any successor entity will be required to comply with this Privacy Policy.

Legal Protection and Compliance: We may disclose information when required to comply with law, enforce our Terms and Agreements, or protect the rights, property, or safety of NxtGen Mart or others.

Advertisers: We may share generic aggregated demographic information not linked to any personal identification information with our business partners, trusted affiliates, and advertisers.

Your Choices and Legal Rights (Delaware DPDPA and US State Laws)

As a Delaware resident, you have specific rights under the Delaware Personal Data Privacy Act (DPDPA) regarding your personal information.

Right to Know/Access: The right to request information about the specific pieces and categories of personal information we have collected about you, including any age-verification records.

Right to Delete: The right to request the deletion of your personal information, subject to certain legal exceptions. Note that age-verification compliance records required to be retained by Delaware law cannot be deleted prior to the end of the mandatory retention period.

Account Deletion: You may initiate the deletion of your account at any time through the Account Settings section of the NxtGen Mart app. If you no longer have access to the app, you may submit a request via our Account & Data Deletion page.

Data Retention Exception: Per Delaware Code Title 16 § 2903, we are legally required to maintain an audit log of age-verification events for five (5) years. This specific data will be moved to a restricted secure archive and will not be used for any other purpose.

Right to Correct: The right to request correction of inaccurate personal data we hold about you.

Right to Opt-Out of Sale/Sharing: The right to direct us not to "sell" or "share" your personal information for cross-contextual behavioral advertising.

How to Exercise Your Rights — Deletion/Access/Correction Requests: Submit your request by email to support@nxtgenmart.com, or by calling Customer Support at +1-302-294-6979. We will verify your request and respond within 45 days as required by the DPDPA.

Marketing Opt-Out: You can unsubscribe from marketing emails using the unsubscribe instructions at the bottom of each email, or by contacting us directly.

Children's Privacy

NxtGen Mart Services are intended for adults aged 18 and older. Tobacco and vaping products on this platform are available to adults aged 21 and older only, consistent with Delaware Code Title 16 § 2903. We do not knowingly solicit or collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a minor has registered on our platform, please contact us immediately at support@nxtgenmart.com.

Changes to This Privacy Policy

Next Generation Mart has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the top of this page. Material changes affecting the processing of age-verification or compliance data will be communicated to users via email or prominent in-app notice prior to taking effect. Your continued use of the Site following the posting of changes will be deemed your acceptance of those changes.

Your Acceptance of These Terms

By using this Site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

Contacting Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with NxtGen Mart, please contact us.

Next Generation Mart 1114 Ogletown Rd Ste B, Newark, DE 19711, USA Email: support@nxtgenmart.com Customer Support: +1-302-294-6979