Privacy Policy

We may collect and process the following categories of personal information: 1.1. Account Information - Full name - Email address - Date of birth (for age verification) - Phone number - Password (hashed and stored securely) 1.2. Identity Verification - Government-issued ID - Proof of address - Live interview records or images (for KYC) 1.3. Order & Transaction Details - Products ordered - Payment method (tokenized only; we do not store full card details) - Billing and shipping addresses - Order history 1.4. Technical & Usage Data - IP address - Browser type and device - Cookies and session data - Activity logs on the site

We use your information to: - Verify age and identity (legal tobacco compliance) - Process and fulfill orders - Provide customer service and support - Detect and prevent fraud or illegal activity - Manage your account and C-Wallet - Send transactional or promotional messages (with your consent) - Improve our website, services, and customer experience

We process personal data under the following legal grounds: - Contractual necessity – to fulfill your orders - Legal obligation – to verify age and identity, prevent fraud, and comply with anti-money laundering laws - Legitimate interest – to improve services and ensure site security - Consent – for marketing communications (you can opt out at any time)

Our website uses cookies to: - Enable essential site functions (login, cart, checkout) - Remember preferences - Collect analytics to improve performance - Facilitate remarketing campaigns (optional, based on consent) You can manage your cookie preferences via your browser settings or our cookie banner.

We do not sell or rent your personal data. We may share data only with: - Trusted service providers, such as payment processors, shipping partners, or KYC services - Regulatory authorities, when legally required - Logistics partners, for order delivery - Fraud detection and compliance partners All partners are bound by strict confidentiality and data protection agreements.

Your data may be transferred and stored outside the UK or EU (e.g., cloud services), but we ensure adequate safeguards such as: - Standard Contractual Clauses (SCCs) - Data Protection Agreements (DPAs) - Encryption and security protocols

We retain personal data only as long as necessary to: - Fulfill our legal and contractual obligations - Resolve disputes - Comply with regulatory requirements (e.g., 5–7 years for transaction records) You may request deletion of your data, unless we are legally required to retain it.

Under the UK and EU GDPR, you have the right to: - Access your data - Rectify incorrect or outdated data - Erase your data ("right to be forgotten") - Restrict or object to processing - Request data portability - Withdraw consent at any time (for marketing) To exercise your rights, email us at: [email protected]

We apply industry-standard security measures: - SSL encryption - Secure servers - Access controls - Regular audits and penetration testing - Tokenization of payment methods

Our website is intended only for users of legal smoking age. We do not knowingly collect personal data from anyone under the legal age. If we learn that a minor has provided us with personal information, we will delete it immediately.

We may update this Privacy Policy to reflect legal or business changes. The latest version will always be available on our website. Please review it periodically.

If you have questions or concerns about this Privacy Policy or your personal data, contact us at: [email protected]