This policy explains what personal data Sticks Store collects, why, and what you can do about it. It is written to meet the requirements of the General Data Protection Regulation (EU) 2016/679.
The data controller is Sticks Store LLC. For any request about your data, or for our registered address and company registration number, write to [email protected].
What we collect
- Order data: name, delivery address, email address, phone number and the contents of your order. We cannot ship without these.
- Payment data: handled by our payment provider. Card numbers do not reach our servers and we do not store them.
- Correspondence: messages you send us and our replies, kept so that a later question about the same order has context.
- Technical data: IP address, browser type and pages visited, collected in server logs and any analytics we run.
- Age confirmation: the fact that you confirmed you are of legal age, which we are required to record.
Why we process it
- To perform the contract — processing, shipping and supporting your order. Without this data there is no order.
- To meet legal obligations — tax and accounting records, and age verification for nicotine products.
- Legitimate interests — preventing fraud, keeping the site secure and working out which pages are useful.
- Consent — marketing email, where you have asked for it. You can withdraw consent at any time and the link is in every message.
Who sees it
Data is shared only with parties who need it to complete your order: the payment provider, the carrier delivering the parcel, and our hosting provider. Each processes data on our instructions under a data processing agreement. We do not sell personal data and we do not share it for third-party advertising.
How long we keep it
Order and invoice records are kept for the period tax law requires. Correspondence is kept while it may still be relevant to a warranty or dispute. Marketing consent records are kept until you withdraw consent, and for a short period afterwards to prove that the withdrawal was acted on.
Your rights
Under the GDPR you may request access to your data, correction of anything inaccurate, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to us and we will respond within one month.
If you believe we have handled your data improperly, you are entitled to complain to the data protection authority in your country of residence.
Cookies
The site sets cookies that are necessary for it to function — keeping your cart contents and your session. Analytics cookies, where used, are optional and set only with consent. You can clear or block cookies in your browser, but the cart will stop working if you block the necessary ones.
Transfers outside the EU
Our infrastructure is located inside the European Union. Where a processor operates outside it, transfers are made under the safeguards the GDPR permits, such as standard contractual clauses.
Changes
If this policy changes materially we will say so on this page and update the date below. Continuing to use the site after a change means the current version applies.