GENERAL

CEDAR HAVANA OPC (“CEDAR”) respects the privacy of every individual who visits X-VAPE (the “Website”) or responds to any promotions listed on the Website. Thi Privacy Policy outlines the information CEDAR will collect and how we will use that information. This Policy will also inform you of what to do if you do not want your Personal Information to be shared or divulged when you visit our Website or respond to our advertising.

We do not attempt to collect excessive or irrelevant information, whether that information personally identifies you or not. We collect information solely for the purposes stated below. We will take reasonable steps to delete or de-identify information about you that we collect when it is no longer needed to interact with you. You agree that until you notify us by following the instructions under “Opt-out” below or we determine that the information is no longer needed, we may retain the information indefinitely.

By using our Website, you are agreeing to the terms of this Privacy Policy. If you do not agree with any terms or practices described in this Privacy Policy, please do not use our Website.

DEFINITIONS

· Personal Information: Any data that can identify an individual, such as name, address, contact details, and payment information.

· Sensitive Personal Information: Includes health data, age, government-issued IDs, and other information that requires special protection under the Data Privacy Act of 2012.

PERSONALLY IDENTIFIABLE INFORMATION

CEDAR will not collect any personal information about you (such as your name, address, telephone number, or email address) unless you voluntarily provide it. If you do not wish for your personal information to be collected, refrain from submitting it to us.

If you do submit personal information, we will store and process it to better understand your needs, offer certain products and services related to our website, communicate with you, provide customer service, offer a personalized shopping experience, prevent fraud, fulfill your orders, including delivery and billing, complete payment method processing, and improve our products and services.

Any personally identifiable information submitted for use (such as name, address, phone number, or IP address) will not be publicly displayed. Website administrators, however, are required to track this information.

We will not distribute or sell your personal information to any external company for marketing or solicitation of products not affiliated with CEDAR. Your personal information will only be used to support your relationship with CEDAR and its partners.

There are certain limited instances where we may disclose or transfer personal information other than as described above. For instance, we may provide such information to appropriate authorities if we believe in good faith that the law requires it or to protect our legal rights or property. Additionally, as we continue to develop our business, we may acquire or dispose of business assets. In such transactions, customer information is generally one of the transferred business assets. However, we are not in the business of selling customer information to others, and aside from certain exceptional circumstances, we will take appropriate measures to ensure the protection of the information you provide to us.

INFORMATION WE COLLECT

Personal Information

· Full name

· Contact details (email, phone number, address)

· Date of birth (for age verification)

· Payment details (if applicable)

Sensitive Personal Information

· Health-related information (only if voluntarily provided for support purposes)

· Government-issued ID (for age verification)

Browsing Data

· Cookies and tracking technologies to monitor site usage (e.g., pages visited, time spent)

Other Information

· Survey responses

· Feedback and inquiries

PURPOSE OF COLLECTION

· Order Fulfillment: To process and deliver vape products

· Account Management: To authenticate users and provide support

· Marketing & Promotions: With explicit consent, we may use data for targeted advertising

· Legal Compliance: To verify age and comply with regulatory obligations

SHARING OF INFORMATION

· Third-Party Providers: Shared with payment processors, couriers, and IT service providers

· Legal Requirements: Disclosed to government agencies when required by law

· Consent-Based Sharing: Any other sharing (e.g., marketing partners) will require your explicit consent

USER RIGHTS

Under the Data Privacy Act, you have the right to:

DATA SECURITY

We implement industry-standard security measures including:

· Encryption of sensitive data

· Secure servers and firewalls

· Regular audits and breach protocols

In case of a data breach, affected users will be notified promptly, and mitigation steps will be taken.

AGGREGATING THIRD PARTY INFORMATION WITH PERSONAL INFORMATION

We may, either through our searches or by contacting third-party providers, incorporate publicly available information into the Personal Information you choose to provide us. For instance, if you provide your name or address, we may include your telephone number and email address in your Personal Information. We will treat any information that personally identifies you, including any such information we add to your Personal Information, as your Personal Information and subject to the terms of this Privacy Policy.

CHANGING MY PERSONAL INFORMATION

We take reasonable steps to ensure that all of your Personal Information we collect, use or disclose is accurate, complete, up to date, stored in a secure environment and accessed only be authorized personnel for permitted purposes. If your Personal Information changes, you may update your information on the Web page titled "Edit Profile". You may also contact us using the information in "Contact Us" below to review the Personal Information you provided, update your Personal Information or request that we remove your Personal Information from our records. If you request, we will use all reasonable efforts to delete your Personal Information from our existing records.

CHANGES TO THE POLICY

Please check this privacy policy periodically to inform yourself of any changes. Although we reserve the right to modify or supplement this privacy policy, we will provide notice to you on this Website of any major changes for at least 30 days following the change.

CONTACT INFORMATION

For privacy-related inquiries, contact us at:

· Email: info@cedarhavana.com

POLICY UPDATES

This policy may be updated periodically. Users will be notified via email or website banners when significant changes occur.

COMPLIANCE STATEMENT

CEDAR strictly comply with the Republic Act No. 10173 – Data Privacy Act of 2012 and its Implementing Rules and Regulations. All data processing activities are conducted in accordance with lawful criteria and user rights.

SPECIAL CONSIDERATIONS

Age Verification: We use secure ID verification tools to ensure users are of legal age (18+).

· Marketing Restrictions: We do not target minors in any form of advertising.

· Legitimate Interest: Where applicable, we document our legitimate interest basis and respect user rights.