This GDPR/CCPA Statement (“Statement”) is intended to inform users located in the European Union and the State of California, USA, about how our company processes personal data in connection with the provision of our online cigar sales service (“Service”), in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Scope of Data Collection
Our company may collect the following categories of personal data:
- Identity data (name, contact details, delivery address).
- Account and transaction data (login credentials, purchase history, payment information).
- Technical data (IP address, Cookies, browser and device information).
2. Purpose of Data Use
The data collected by our company will be used for:
- Providing and maintaining the Service.
- Processing orders, payments, and logistics.
- Customer service and after-sales support.
- Marketing and promotion (only with prior consent).
- Compliance with legal and regulatory requirements.
3. User Rights under GDPR
Users located in the EU have the following rights:
- Right of Access: Request a copy of their personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of personal data under applicable legal conditions.
- Right to Restrict Processing: Request limitation of data processing.
- Right to Data Portability: Request transfer of their data to another service provider.
- Right to Object: Object to data processing based on legitimate interests or direct marketing purposes.
4. Consumer Rights under CCPA
Consumers located in California have the following rights:
- Right to Know: Request disclosure of categories of personal data collected, used, and shared by our company.
- Right to Deletion: Request deletion of personal data (subject to legal exceptions).
- Right to Opt-Out of Sale: Refuse the sale of personal data to third parties.
- Right to Non-Discrimination: Exercise CCPA rights without being subject to discriminatory treatment.
5. Data Sharing and Cross-Border Transfers
- Our company does not sell or rent customer data.
- Where necessary, data may be shared with payment platforms, logistics providers, or regulatory authorities.
- In cases of cross-border data transfers, our company will ensure that the recipient provides adequate data protection standards in compliance with GDPR/CCPA requirements.
6. Policy Updates
Our company reserves the right to amend this Statement at any time. Updated versions will be published on our website and take immediate effect
7. Exercising Rights
Users may exercise their rights through the following channels:
- Email: info@xicigar.com
- Address: 63B San Hong Street, Sheung Shui, New Territories, Hong Kong
- Customer Service Phone: 9747 9504
