1. Information We Collect

We may collect the following categories of personal information:

Account Information

We may collect your name, email address, phone number, password or password credentials, account preferences, country, region, date of birth or age-confirmation status, login activity, and communication preferences.

Order and Checkout Information

We may collect billing address, shipping address, order details, cart contents, purchase history, delivery instructions, refund or return information, and transaction-related records.

Payment Information

We may collect payment-related information necessary to process your purchase, such as payment method type, billing details, payment authorization status, tokenized payment references, fraud screening results, and limited payment identifiers such as the last four digits of a card. Velarro does not intend to store full payment card numbers unless expressly disclosed and handled through appropriate payment security controls.

Age Verification Information

Because Velarro sells age-restricted tobacco products, we may collect information necessary to verify your age and legal eligibility. This may include date of birth, address information, identity verification results, age verification provider references, verification timestamps, and pass/fail verification outcomes.

Where possible, Velarro avoids storing full government identification images and instead stores only the minimum verification evidence necessary to demonstrate legal compliance.

Device, Browser, and Usage Information

IP address, device type, browser type, operating system, referral source, pages viewed, session identifiers, approximate location, cookie identifiers, and website interaction data.

Cookies and Tracking

We use cookies to operate our website, maintain your cart, verify age-gate status, secure checkout, remember preferences, measure performance, and support marketing where permitted.

Marketing, Loyalty & Support

Marketing preferences, email engagement, SMS consent, campaign interactions, loyalty status, rewards activity, event participation, support tickets, call notes, and resolution history.

Fraud Prevention & Business Information

Login attempts, risk signals, chargeback data, IP reputation, account security logs, plus business contact information for wholesale, distributor, and lounge relationships.

2. How We Use Personal Information

• Verify legal age and eligibility
• Create and manage accounts
• Process orders and payments
• Deliver products where legally permitted
• Provide customer support
• Prevent fraud, abuse, underage access, and unlawful transactions
• Manage loyalty, private-client, and event programs
• Send marketing communications where permitted
• Personalize website experiences where permitted
• Comply with tax, tobacco, shipping, legal, and regulatory obligations
• Secure our website, systems, and business operations
• Improve our products, services, and customer experience
• Respond to legal claims, regulatory requests, or law enforcement requests

3. Legal Bases for Processing

Contractual Necessity

To create accounts, process purchases, arrange delivery, manage returns, and provide support.

Legal Obligation

To comply with tobacco age restrictions, tax rules, accounting, customs, payment, fraud prevention, and other legal duties.

Consent

For certain marketing communications, SMS messages, non-essential cookies, personalized advertising, and loyalty profiling where consent is required.

Legitimate Interests

For fraud prevention, security, business analytics, service improvement, dispute resolution, and account protection.

4. Age-Restricted Products

Velarro sells tobacco products intended only for adults of legal age.

We may require age verification before allowing account registration, marketing enrollment, browsing, checkout, delivery, or loyalty participation. Orders may be refused, cancelled, or held for review if we cannot verify legal eligibility.

Velarro does not knowingly sell to or market tobacco products to minors. If we learn we have collected personal information from a person below the legal age, we will take appropriate steps to delete or restrict the information unless retention is required by law.

5. Cookies and Similar Technologies

Strictly Necessary Cookies

Required to operate the website, maintain session status, manage privacy preferences, verify age, and secure the website.

Functional Cookies

Help personalize site content and features based on past interactions.

Analytics Cookies

Help us understand website performance, product interest, page usage, and customer experience.

Advertising and Retargeting Cookies

Where permitted, these may help us measure campaigns, personalize ads, and understand marketing performance. You can manage cookie preferences through our cookie settings tool, and may withdraw or change preferences at any time.

6. Marketing Communications

Velarro may send marketing emails, SMS messages, event invitations, product updates, and loyalty communications only where permitted by law and your preferences.

You can unsubscribe from marketing emails by using the unsubscribe link, or opt out of SMS messages by replying STOP where available. Marketing consent is not required to purchase Velarro products.

7. How We Share Personal Information

We may share personal information with:

• Payment processors and acquiring banks
• Age veru=ification providers
• Fraud prevention provider
• Shipping carriers and logistics partners
• Tax and accounting providers
• Customer support providers
• Email, SMS, and marketing providers
• Analytics providers
• Hosting, infrastructure, and security providers
• Professional advisors (lawyers, accountants, auditors, insurers)
• Distributors, lounges, hospitality, or fulfillment partners where necessary
• Regulators, courts, customs authorities, law enforcement, or government agencies where required or permitted by law

We do not sell personal information in the ordinary meaning of selling customer lists for money. However, some privacy laws define " sale ", " sharing ", or " targeted advertising " broadly. Where applicable, you may have the right to opt out.

8. International Transfers

Velarro may process and transfer personal information in countries other than where you live. These countries may have privacy laws that differ from your local laws.

Where required, we use appropriate safeguards such as contractual protections, transfer assessments, approved legal mechanisms, vendor due diligence, access controls, and encryption.

9. Data Retention

Velarro retains personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, tax, accounting, tobacco compliance, age verification, fraud prevention, dispute resolution, security, and business recordkeeping purposes.

• Account information may be retained for the life of the account and a reasonable period afterward
• Order, invoice, tax, and accounting records may be retained as required by law
• Age verification records may be retained as needed to demonstrate compliance
• Marketing consent records may be retained to prove consent and honor opt-outs
• Security and fraud records may be retained to protect Velarro and its customers
• Support records may be retained for service, legal, and operational purposes

10. Security

Velarro uses administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

No system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been compromised.

11. Your Privacy Rights

Depending on where you live, you may have rights to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Request portability of personal information
• Opt out of certain marketing
• Opt out of sale, sharing, or targeted advertising where applicable
• Appeal a denied privacy request where applicable
• Complain to a privacy regulator

To submit a request, contact privacy@velarrotobacco.com.

12. Children and Minors

Velarro products and services are not directed to minors. We do not knowingly collect personal information from individuals who are under the legal age to access or purchase tobacco products in their jurisdiction.

13. Automated Decision-Making and Profiling

Velarro may use automated tools to support fraud prevention, age verification, payment risk review, website security, personalization, and marketing preference management.

Where required by law, you may have the right to request information about automated decisions, object to certain profiling, or request human review.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. If changes are material, we may provide additional notice where required by law.

Regional Addendums

Regional Privacy Notices

These regional notices supplement the Velarro Privacy Policy and apply to individuals in the regions listed below: United States (incl. California), European Union (Germany, Spain), United Kingdom, Switzerland, Canada, United Arab Emirates, China, India, and Singapore.
For full regional details or to exercise specific rights, contact privacy@velarrotobacco.com.