Privacy policy

This policy covers My Cigar Stash, operated by My Prepack Cigars LLC of 10900 NW 21st St, Unit 230, Miami, FL 33172, and it applies to mycigarstash.com and to orders placed through it. Questions about anything below go to order@mycigarstash.com.

The site has no accounts and no logins. Your cart, your answer at the age question and your answer to the email sign-up prompt are kept in your own browser's local storage. If you join our email list, we store your email address, the date of birth you give us, and when and where on the site you signed up. If you use the contact form, we store your name, your email address and your message.

Checkout runs on our commerce platform. That is where your order, your payment and your age check happen.

• Order details. Name, shipping address, billing address, email, phone number, and what you bought.
• Age verification data. Date of birth, and whatever else our verification vendor needs to match you against public records. If the instant check cannot confirm you are 21 or older, that vendor may ask you for a photo ID.
• Payment details. Card number, expiry, and security code, entered directly with our payment gateway.
• Email list. Your email address and your date of birth, which we ask for to keep the list to adults 21 and over.
• Correspondence. Anything you send us about an order, a claim, or a question.
• Site usage. Pages viewed, referring site, rough location from your IP address, device and browser type.

Your full card number never touches this website. It goes straight to the payment gateway, which returns an authorisation and a last-four. We could not produce your card number if we wanted to.

Photo ID images, where the verification vendor asks for one, are held by that vendor under their own retention policy. We receive a pass or fail, not the document.

• To take, pack, and ship your order, and to talk to you about it.
• To confirm you are 21 or older, which federal and state law require us to do before a tobacco sale.
• To take payment and to investigate fraud and chargebacks.
• To calculate and remit sales tax and any tobacco excise tax your state charges.
• To file the state reports described under reports to states below.
• To email you about new packs and offers, but only if you joined our email list. Every email carries an unsubscribe link.

Some states require sellers who ship cigars to their residents to report those sales to the state's tax agency. Those reports can include the customer's name and address, and what was shipped. Where a state we ship to requires such a report, we file it, and neither of us can opt out of that.

The federal PACT Act, which requires this kind of reporting for cigarettes and smokeless tobacco, does not cover cigars. Nothing else in this policy goes to a government body as a matter of routine.

We share only what each of these needs to do its job:

• The payment gateway and the merchant bank, to authorise and settle the charge.
• The age verification vendor, to run the check.
• USPS, to carry the parcel and to collect an adult signature where the state requires one.
• Our shipping-label service, which reads your name and delivery address from the order to print the postage label.
• State tax agencies, where a state requires the reports described above.
• Our commerce platform, website host and email provider, which hold order, sign-up and message records on our behalf under contract.
• Law enforcement, where a valid legal demand requires it.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have no interest in renting a customer list, and a tobacco customer list is not something to be careless with.

This site sets no cookies. It uses your browser's local storage, which stays on your device, for four things: your cart, whether you have confirmed you are 21, whether you have answered the email sign-up prompt, and your first-order code if you were given one. Clearing site data removes all of them.

Checkout, on checkout.mycigarstash.com, is run by our commerce platform, which sets the cookies it needs to keep your session and cart. If we ever add analytics or advertising tags, this section will name them, and a consent control will appear before any non-essential tag runs.

Order and tax records are kept for as long as tax and tobacco regulations require, which in practice means several years after the order. Verification results are kept as proof that the check was run. Marketing contacts are kept until you unsubscribe. Support email is kept for two years unless it relates to a claim.

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop emailing you. Write to order@mycigarstash.com and we will answer within 45 days.

If you are in California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy statute, those laws also give you the right to appeal a refusal, and the right not to be discriminated against for exercising any of this. There is no financial incentive programme here and no sale of data to opt out of.

One limit: we cannot delete records that tax law or a state's reporting rules require us to keep, and we cannot un-file a report already sent to a state.

This site is for adults 21 and over. We do not knowingly collect anything from anyone under 21, and certainly not from a child under 13. If you believe a minor has given us information, write to order@mycigarstash.com and we will delete it.

The site is served over HTTPS. Card data is handled by a PCI-compliant gateway and never stored by us. Access to order records is limited to the people who pack and support orders. No system is perfect, and we will tell you promptly if one of ours is breached in a way that affects you.

When this policy changes in substance, the date at the top changes with it. Material changes affecting how we use information already collected will be emailed to customers on record.

My Prepack Cigars LLC, 10900 NW 21st St, Unit 230, Miami, FL 33172. Email order@mycigarstash.com, or use the contact page. Related reading: terms of sale, age verification, and shipping and state restrictions.