Privacy & Cookie Policy

PureSmoke ("we", "us") operates this website and the PureSmoke storefront. The data controller for personal data collected through this site is PureSmoke. For privacy questions, contact us at privacy@puresmoke.shop.

• Order information — name, shipping address, billing address, email, phone, and items purchased. Collected when you place an order on Shopify checkout.
• Payment information — handled directly by Shopify Payments and our payment processors. We never see or store your full card number.
• Account & marketing data — email addresses you submit to our newsletter / discount popup.
• Device & usage data — IP address, browser, device type, pages viewed, products viewed, items added to cart. Only collected if you accept analytics cookies.

• To fulfil and ship your orders, and provide customer support.
• To send you transactional emails (order confirmations, shipping updates, returns).
• To send marketing emails — only if you opted in. You can unsubscribe at any time via the link in every email.
• To measure how visitors use the site, improve the product, and optimise our ads — only if you accept analytics cookies.
• To prevent fraud and comply with our legal obligations.

Under GDPR / UK-GDPR, we rely on the following legal bases: contract (to fulfil your order), consent (for marketing emails and optional cookies), legitimate interest (fraud prevention, basic site security), and legal obligation (tax, accounting).

A cookie is a small file stored on your device. We split cookies into two categories:

You can change your choice at any time using Cookie settings. Rejecting optional cookies will not affect your ability to browse, add to cart, or check out.

We share the minimum data needed with trusted service providers acting on our behalf:

• Shopify — storefront hosting, checkout, orders, payments.
• Shipping carriers — to deliver your order.
• Google, Meta, TikTok — only if you accept analytics cookies; data is used for traffic measurement and ad attribution.
• Email providers — to send order confirmations and (if you opted in) marketing.

We never sell your personal data. Some providers process data outside the EU/UK (e.g. in the United States); transfers are protected by Standard Contractual Clauses or equivalent safeguards.

• Order records: 7 years (tax / accounting requirement).
• Marketing email subscribers: until you unsubscribe.
• Analytics cookies: as listed in section 5.
• Support emails: up to 3 years after the last contact.

If you live in the EU, UK, or California, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data, or delete it.
• Object to processing, or ask us to restrict it.
• Withdraw consent at any time (without affecting past lawful processing).
• Receive a portable copy of your data.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email privacy@puresmoke.shop. We respond within 30 days.

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest with our hosting providers, and strict access controls. No system is 100% secure, but we work hard to protect your data and notify you of any incident that affects you.

This site is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be flagged on the homepage or by email where appropriate.

Questions, complaints, or data requests: privacy@puresmoke.shop.