Who is responsible

Premium Puffs is responsible for the personal data processed through this website and connected customer services. Where a payment provider, courier, email service, hosting provider, analytics provider, or professional adviser processes data for its own purposes, it may also have its own privacy responsibilities.

You can contact us through the email address in the footer if you have privacy questions, need to exercise a right, or want more detail about a specific order or service request.

Personal data we collect

We collect information you provide directly, information generated by your use of the website, and information needed to complete lawful adult-only retail fulfilment. This may include your name, phone number, email address, billing details, delivery address, pickup preference, order history, selected products, membership or subscription interests, coupon use, customer notes, support messages, and marketing preferences.

We may also process technical data such as device type, browser, approximate location derived from technical signals, IP address, security logs, basket storage identifiers, page interactions, and payment or checkout status returned by service providers.

• We do not intentionally collect personal data from minors.
• We do not store full card numbers on our own systems.
• If age verification is required, we process only what is reasonably needed to confirm eligibility and comply with law.

Why we use the data

We use personal data to operate the website, maintain your basket, answer enquiries, prepare quotes, accept and fulfil orders, process secure payments, provide order updates, arrange pickup or delivery, manage subscriptions or lounge requests, prevent fraud, protect minors, comply with tobacco and nicotine retail obligations, keep accounting records, and improve the customer experience.

We send account verification, password security and order service emails to support your account and purchases. Marketing emails are optional and require your opt-in. You can change your preference in your account or use the unsubscribe link in a marketing email. Unsubscribing from marketing does not stop order or account security messages.

Legal bases

Depending on the activity, we process data because it is necessary to perform a contract or take steps before a contract, because we must comply with legal obligations, because we have legitimate interests in running a secure adult-only shop, because you gave consent, or because processing is needed to establish, exercise, or defend legal claims.

For example, fulfilment data is needed to complete an order, accounting records may be kept for legal compliance, security logs help prevent fraud and protect minors, and optional marketing depends on your preference and applicable consent rules.

Payments, delivery, and service providers

We use trusted service providers to run the website and complete purchases. These may include hosting, database, email, payment, address validation, courier, fraud prevention, support, accounting, and analytics services. They receive only the data needed for their function and are expected to protect it appropriately.

Card payments are handled through secure payment infrastructure. The payment provider may process payment method details, authentication information, billing data, fraud signals, and transaction status under its own terms and privacy documentation.

We use Google Maps Platform Places API and Geocoding API to suggest and verify delivery addresses. When you use address search, the address text, selected place identifier, and technical request data are sent to Google. Use of this address feature is also subject to the Google Maps Platform Terms of Service and Google Privacy Policy.

• Google Maps Platform Terms of Service
• Google Privacy Policy

Age-restricted retail safeguards

Because the website relates to tobacco, nicotine, cigar, and related adult products, we may process age confirmation, identity, order history, fulfilment notes, refusal records, and compliance messages where reasonably necessary.

If we believe a customer is underage, buying for a minor, using false information, or asking us to fulfil an unlawful order, we may refuse service and retain a limited record of the incident where needed for legal, safety, fraud prevention, or dispute purposes.

Retention

We keep personal data only for as long as reasonably necessary for the purpose collected, including order fulfilment, customer support, legal compliance, tax and accounting obligations, security, dispute handling, and improving the service.

Basket data stored in your browser can be removed by clearing the basket or clearing browser storage. Order, payment, and accounting records may need to be kept for longer periods required by law.

Your privacy rights

Depending on your location and the processing involved, you may have rights to request access to your personal data, correction, deletion, restriction, portability, objection to certain uses, withdrawal of consent, and review of automated decisions if any are used.

We may need to verify your identity before acting on a request. Some requests may be limited where we must keep records for tax, age-restricted retail compliance, fraud prevention, legal claims, or completed order documentation.

International transfers and security

Some service providers may process data outside your country. Where required, we use appropriate safeguards such as contractual commitments, provider security measures, and transfer mechanisms recognized by applicable privacy law.

We use administrative, technical, and organizational measures designed to protect personal data. No online system is perfect, so customers should also keep account details private and contact us promptly if anything appears unusual.

Updates to this policy

We may update this Privacy Policy when our website, shop operations, fulfilment process, payment providers, legal obligations, or customer services change. The updated date at the top tells you when this version began applying.