1) Identity And Contact
This Privacy Policy explains how Cigar Grail (“we,” “us,” “our”) collects, uses, and shares personal information when you visit or shop at CigarGrail.com (the “Site”).
Contact for privacy questions and requests: [email protected]
Business address: 2216 E Oakland Park Blvd, Fort Lauderdale, FL 33306
Regions served: United States only (for now).
2) 21+ Only And Age Verification
The Site sells age-restricted products (cigars and related accessories) and is intended for adults 21+ only.
We may require age verification before fulfilling an order and may request government-issued ID to confirm eligibility. We do not store ID images. We keep a verification log that may include the verification date/time, last name, and confirmation that the date of birth matched. We retain the verification log for 1 to 3 years, then delete it unless a longer period is needed for security, dispute handling, or legal compliance. We do not share ID information with a third-party age verification vendor because we do not use one at this time.
3) Personal Information We Collect
We collect information you provide and information collected automatically when you use the Site.
Information you provide may include your name, email, phone number (if provided), billing and shipping address, order details and history, messages you send to customer support, and account details if you choose to create an account. Guest checkout is available, and customer accounts may also be available.
Information collected automatically may include IP address, device and browser information, basic usage data (pages viewed and actions taken), timestamps, referring URLs, and approximate location inferred from IP address. The Site may also use cookies and similar technologies needed for e-commerce functions (such as cart and checkout), fraud prevention, and security.
Information from third parties may include payment confirmation and transaction details from our payment providers, and shipment tracking updates from carriers.
4) How We Use Personal Information
We use personal information to process orders, provide customer service, communicate about transactions (order confirmations and shipping updates), maintain accounts (if used), verify age, prevent fraud and abuse, secure the Site, and comply with law.
We also use personal information for marketing by email and SMS where permitted. Abandoned cart recovery will be added and may send reminders by email and/or SMS. You can opt out of marketing at any time.
5) Payments
Payments are processed by PayPal and PayBright. Payment information is handled by the payment provider(s) under their policies and security practices. We generally receive payment confirmation and transaction identifiers needed to complete your order.
6) Shipping
We use USPS and UPS to deliver orders. We share information needed to ship your purchase and provide tracking.
7) Cookies And Tracking Technologies
The Site uses cookies and similar technologies that are necessary to operate an e-commerce store. These may keep items in your cart, support checkout sessions, remember preferences, and help with security and fraud prevention. Some third parties involved in checkout or site protection may also use cookies as part of providing their services.
We do not use cross-context behavioral advertising/retargeting for tobacco products. If we add analytics tools in the future, we will update this policy and, where appropriate, provide additional controls.
8) Sharing And Disclosures
We share personal information with service providers only as needed to run the Site and fulfill orders. This includes payment processors (PayPal, PayBright), shipping carriers (USPS, UPS), and providers that help with hosting, security, fraud/bot protection, communications (email/SMS), and customer support. We may describe some providers by category and do not publicly list every tool.
We may disclose information to comply with law, respond to lawful requests, protect rights and safety, and in connection with a business transaction such as a merger or sale of assets.
9) “Sale,” “Sharing,” and Targeted Advertising (CPRA and Similar Laws)
Some state privacy laws define “sell” or “share” broadly. We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising at this time. If this changes, we will update this policy and provide an opt-out method where required.
10) Retention
We keep personal information only as long as needed for the purposes described in this Policy.
We keep order records as long as needed for legal, tax, accounting, and dispute purposes. We keep account information until you delete your account, then delete or de-identify it unless we need to keep it for legal, security, or dispute reasons. We keep marketing contact information until you opt out. We keep customer support communications as long as needed to resolve issues and for recordkeeping. We keep age-verification logs for 1 to 3 years, then delete them unless a longer period is needed for security, dispute handling, or legal compliance.
11) Security
We use reasonable safeguards designed to protect personal information. No system is perfectly secure.
12) Children’s Privacy (COPPA)
The Site is not intended for children and is limited to adults 21+. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact [email protected].
13) Your Rights (California, Virginia, and Other U.S. States)
Depending on your state, you may have rights to access, correct, delete, or obtain a copy of certain personal information, and to opt out of certain processing such as targeted advertising. California residents may also have rights to know and to opt out of “sale” or “sharing” as defined by the CPRA, if applicable. We do not sell personal information for money and we do not share personal information for cross-context behavioral advertising at this time. We will not discriminate against you for exercising your rights.
14) How to Submit Privacy Requests
Email [email protected] with the subject line “Privacy Request.” Include the email used for your order/account and what you want (access, deletion, correction). We may need to verify your identity before completing certain requests.
If an appeal process applies (such as under Virginia law) and your request is denied, you may appeal by emailing [email protected] with the subject “Privacy Appeal.”
15) Third-Party Links
The Site may link to third-party sites. We are not responsible for their privacy practices.
16) Changes
We may update this Policy from time to time by posting a new version on the Site and updating the Effective Date.
California “Notice at Collection” (Concise)
Effective Date: 01-20-2026
Business: Cigar Grail, CigarGrail.com
Contact: [email protected]
We collect identifiers and contact details (such as name, email, address, and IP address), commercial information (purchases), internet activity (site usage and cookies needed for e-commerce functions), approximate location (from IP), and limited age-verification log data (verification date/time, last name, and DOB match confirmation). We do not store ID images.
We use this information to fulfill orders, process payments, ship products, provide support, verify age, prevent fraud, secure the Site, and comply with law. We retain information as long as needed for these purposes, including keeping order records as long as needed for legal, tax, accounting, and dispute purposes, and keeping age-verification logs for 1–3 years unless a longer period is needed for security, dispute handling, or legal compliance.
We do not sell personal information for money and we do not share personal information for cross-context behavioral advertising at this time. California residents can submit privacy requests to [email protected] with the subject “Privacy Request.”
