Privacy Policy
Main
Thank you for visiting Carvajal cigar co. We understand the importance that Internet users place on privacy and this Privacy Policy describes how we use personal information that is collected in connection with any of our Websites.
Standard:
UPS Ground
1-5 business days to most US destinations. Prompt, dependable, cost-effective shipping. Premium tracking service with guaranteed delivery, know in advance when your shipment will arrive. Orders shipped to the East Coast can be expected sooner than the estimated maximum delivery time. On orders that contain tobacco products, adult signature is always required.
USPS Priority Mail
Fast, 2-4 day service to most locations. Saturday Delivery. Delivery Confirmation Number provided lets you know when a delivery or attempted delivery has been made. Orders shipped to the East Coast can be expected sooner than the estimated maximum delivery time.
How we disclose information
Information Disclosed for Business or Commercial Purposes in the Last 12 Months, and Categories of Parties Disclosed To
We may disclose the following personal information about you when you purchase our products or visit our website:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, Governance, Risk & Compliance Software, IT Infrastructure Services, Payment Processors, Sales & Marketing Tools, and Shipping Services | Ad Networks, Business Operations Tool, Sales & Marketing Tools, and Shipping Services |
| Online Identifiers | Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, Governance, Risk & Compliance Software, Payment Processors, and Sales & Marketing Tools | Ad Networks, Affiliates, Business Operations Tool, and Sales & Marketing Tools |
| Internet Activity | Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, Payment Processors, and Sales & Marketing Tools | Ad Networks, Affiliates, and Sales & Marketing Tools |
| Commercial and Financial Information | Business Operations Tool, Commerce Software Tools, Cybersecurity Providers, Governance, Risk & Compliance Software, IT Infrastructure Services, Payment Processors, and Sales & Marketing Tools | Payment Processors |
| Inferences | Payment Processors and Sales & Marketing Tools | Business Operations Tool |
California Privacy Notice (CCPA)
This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered “personal information,” such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.
Collection and Disclosure of Personal Information
The personal information we collect is described above in Information we collect. The personal
information we disclose for business or commercial purposes is described above in How we disclose
information. The length of time for which we retain personal information is described above in How
long we keep your data. Our purposes for processing data are described above in Purposes of processing.
Information “Sharing” and “Selling”
We “share” certain personal information with third party ad networks for purposes of behavioral advertising,
including: Internet Activity, Online Identifiers, and Personal Identifiers. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not “sell” your data as defined in CCPA.
We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.
CCPA Rights
Your CCPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page or by emailing us at carvajalcigarco@gmail.com.
Right to Know and Access
You have the right to request to know and access the following about the personal information we have collected about you in the past 12 months:
- the categories and specific pieces of personal information we have collected about you
- the categories of sources from which we collect personal information about you
- the business or commercial purposes for which we collect, sell, or share personal information
- the categories of third parties with whom we disclose the information
- the categories of personal information about you that we have sold, shared, or disclosed for a business purpose, and the categories of third parties to whom we have sold, shared, or disclosed that information for a business purpose
The information we would provide to you in response to a Request to Know Categories is contained in this Privacy Notice. To receive a copy of the specific personal information we have about you, submit a Request to Know or Access via the link above. If you make a Request to Know more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete from our records your requested personal information and direct our service providers to do the same.
Right to Non-Discrimination
If you exercise your CCPA consumer rights:
- We will not deny goods or services to you
- We will not charge you different prices or rates for goods or services, including through the use of discounts or other benefits or penalties
- We will not provide a different level or quality of goods or services to you
- We will not suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services
- We will not retaliate against you, as an employee, applicant for employment, or independent contractor
We may still offer you certain financial incentives permitted by the CCPA such as discounts, rewards, premium features, or loyalty accounts that can result in different prices, rates, or quality levels.
Right to Opt-Out
You have the right to opt-out of any selling and sharing of your personal information.
You may exercise your right to opt-out here.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Request Verification
Before we can respond to a Request to Know or Request to Delete, we will need to verify that you are the consumer who is the subject of the CCPA request. Verification is important for preventing fraudulent requests and identity theft. Requests to Opt-Out do not require verification.
Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request. If you submit a request not through our webform, we will ask you to provide the same information requested in the webform.
For a request that seeks specific personal information, we ask that you sign a declaration stating that you are the consumer whose personal information is the subject of the request, as required by the CCPA.
In some cases, we may have no reasonable method by which we can verify a consumer’s identity. For example:
- If a consumer submits a request but we have not collected any personal information about that consumer, we cannot verify the request.
- If the only data we have collected about a consumer is gathered through website cookies (i.e. the consumer visited our website but had no other interaction with us), we are unable to reasonably associate a requester with any data collected; therefore, we cannot verify the request.
Authorized Agent
A California resident’s authorized agent may submit a rights request under the CCPA by emailing us at carvajalcigarco@gmail.com.
Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process
described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their
behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit
the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory
power of attorney, which does not require separate consumer verification.
If you have trouble accessing this notice, please contact us at carvajalcigarco@gmail.com.
Contact Us
If you have any privacy-related questions or have trouble accessing this notice, please email carvajalcigarco@gmail.com.
Virginia Privacy Notice (VCDPA)
This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the VCDPA.
Collection and Disclosure of Personal Information
The personal data we collect is described above in Information we collect. The personal data we disclose to third parties and the categories of third parties
to whom we disclose personal data is described above in How we disclose information. The length of time for which we retain personal information is
described above in How long we keep your data. Our purposes for processing data are described above in Purposes of processing.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the VCDPA), including online identifiers and internet
activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not “sell” your data as defined in VCDPA.
Profiling
The VCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
VCDPA Rights
Your VCDPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing
is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable
format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive,
we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete
any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your VCDPA consumer rights:
- We will not deny goods or services to you
- We will not charge you different prices or rates for goods or services
- We will not provide a different level or quality of goods or services to you
However, we may offer a different price, rate, level, quality, or selection of products or services if your personal data is
required in order to provide those products or services and you have exercised your right to opt out, or the offer is related
to a voluntary loyalty or rewards program.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with
the Virginia Attorney General’s Office.
Colorado Privacy Notice (CPA)
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the CPA.
Collection and Disclosure of Personal Information
The personal data we collect is described above in Information we collect. The personal data we disclose to third parties and the categories of third parties
to whom we disclose personal data is described above in How we disclose information. The length of time for which we retain personal information is
described above in How long we keep your data. Our purposes for processing data are described above in Purposes of processing.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the CPA), including online identifiers and internet
activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not “sell” your data as defined in CPA.
Profiling
The CPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
CPA Rights
Your CPA rights are described below. Make a Privacy Request by clicking here
or the link at the top of this page.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive
a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make a Request to Know more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive,
we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data
from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes,
including the following:
- To comply with legal obligations
- To comply with an official investigation or cooperate with law-enforcement agencies
- To establish or defend legal claims
- To complete an obligation to you that you have requested
- To respond to security incidents, fraud, harassment, and other similar activity
- To identify and repair technical errors
- To conduct internal research to develop, improve, and repair our products and services
- For internal operations that are reasonably aligned with your expectations
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CPA consumer rights:
- We will not deny goods or services to you
- We will not charge you different prices or rates for goods or services
- We will not provide a different level or quality of goods or services to you
However, we may offer a different price, rate, level, quality, or selection of products or services if the exercise of
your CPA rights affects the feasibility or the value of those products or services, or the offer is related to a voluntary
loyalty or rewards program.
Right to Opt-Out
You have the right to opt-out of any selling of your personal data, processing of your personal data for purposes of targeted
advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects for you.
You may exercise your right to opt-out.
Authorized Agents.
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting,
or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on
your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with
the Colorado Attorney General’s Office.
Connecticut Privacy Notice (CTDPA)
This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the CTDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to carvajalcigarco@gmail.com.
Collection and Disclosure of Personal Information
The personal data we collect is described above in Information we collect. The personal data we disclose to third parties and the categories of third parties
to whom we disclose personal data is described above in How we disclose information. The length of time for which we retain personal information is described above in How long we keep your data..
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the CTDPA), including online identifiers and internet
activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not “sell” your data as defined in CTDPA.
Profiling
The CTDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
CTDPA Rights
Your CTDPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing
is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable
format that allows you to transmit your data to another controller.
If you make a Request to Know more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data
from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes,
including the following:
- To comply with legal obligations
- To comply with an official investigation or cooperate with law-enforcement agencies
- To establish or defend legal claims
- To complete an obligation to you that you have requested
- To respond to security incidents, fraud, harassment, and other similar activity
- To identify and repair technical errors
- To conduct internal research to develop, improve, and repair our products and services
- For internal operations that are reasonably aligned with your expectations
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CTDPA consumer rights:
- We will not deny goods or services to you
- We will not charge you different prices or rates for goods or services
- We will not provide a different level or quality of goods or services to you
However, we may offer a different price, rate, level, quality, or selection of products or services if your personal data is
required in order to provide those products or services and you have exercised your right to opt out, or the offer is related
to a voluntary loyalty or rewards program.
Right to Opt-Out
You have the right to opt-out of any selling of your personal data, processing of your personal data for purposes of targeted
advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects for you.
You may exercise your right to opt-out.
Authorized Agents.
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting,
or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on
your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot
authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to
authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out,
but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with
the Connecticut Attorney General’s Office.
Notice of Financial Incentive
Consumers who sign up for our marketing emails/SMS texts receive a Free Shipping discount ($8.99 value) on their first purchase. To opt-in, a consumer must enter their email address/phone number into the form and consent to receive emails in exchange for a discount provided via coupon code. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer/replying STOP via text at any time. We calculate the value of the offer and financial incentive by using the expense related to the offer.
EEA/UK Privacy Notice (GDPR)
This section provides additional information for people in the European Economic Area (EEA) or United Kingdom (UK). The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.
Collection and Disclosure of Personal Data
The personal data we collect is described above in Information we collect. The personal data we
disclose for business or commercial purposes is described above in How we disclose information.
The length of time for which we retain personal data is described above in How long we keep your data.
Our purposes for processing data are described above in Purposes of processing.
We may disclose your personal information to the following third party controllers for business purposes:
Acuity, UpSellit, PayPal – Pay with PayPal, Venmo, Pay Later, LeadsRx, UPS, Wisepops, USPS, Noibu, CJ, Vertex, The Trade Desk, iZooto, Narvar, MineThatData.com, Brandlock, Keynes, Bizrate, Source Knowledge, Braintree Direct, Kount. To understand how these parties handle your data, please refer to their respective
privacy policies.
Cookie Notice
We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Manage your cookie consent here.
Essential Cookies
We use these cookies for things like security, logins, site errors, and processing payments. We can’t turn these necessary cookies off, but you can control them in your browser.
| Cookie Name | Provider | Duration |
|---|
Analytics Cookies
These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.
| Cookie Name | Provider | Duration |
|---|---|---|
| _clck | Google Analytics | 29 Days |
| _clsk | Google Analytics | 1 Day |
| _ga | Google Analytics | 1 Year 29 Days |
| _ga_S1GMVHJEKZ | Google Analytics | 1 Year 29 Days |
| _pk_id.6.0d67 | Matomo | 1 Year 27 Days |
| _pk_ses.6.0d67 | Matomo | 31 Mins |
| _sp_id.0d67 | Matomo | 1 Year 29 Days |
| _sp_ses.0d67 | Matomo | 31 Mins |
| CLID | Microsoft Clarity | 29 Days |
| us_privacy | Google Analytics | 30 Days |
Personalization Cookies
We use these cookies to enhance functionality and personalize content for you. For example, they allow us to remember you when you return to our website or app. If you do not allow these cookies then some or all of these services may not function properly.
| Cookie Name | Provider | Duration |
|---|---|---|
| CARTNUM | First Party | 29 Years 22 Days |
| cf_clearance | First Party | 29 Days |
| CFGLOBALS | First Party | 29 Years 22 Days |
| CFID | First Party | 29 Years 22 Days |
| CFTOKEN | First Party | 29 Years 22 Days |
| DISPLAYMOBILE | First Party | 29 Years 22 Days |
| EMAILMODAL | First Party | 29 Years 22 Days |
| IZCID | iZooto | 41 Years 24 Days |
| JSESSIONID | First Party | Session |
| MUID | Microsoft Clarity | 1 Year 24 Days |
| pixel | Yotpo | 29 Days |
| USER_ID | First Party | 29 Years 22 Days |
| wisepops | Wisepops | 1 Year 29 Days |
| wisepops_session | Wisepops | Session |
| wisepops_visits | Wisepops | 1 Year 29 Days |
| yotpo_pixel | Yotpo | 1 Day |
Advertising Cookies
These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.
| Cookie Name | Provider | Duration |
|---|---|---|
| ANONCHK | Microsoft Clarity | 11 Mins |
| cjConsent | CJ | 1 Year 29 Days |
| cjUser | CJ | 1 Year 29 Days |
| dmSessionID | Microsoft Clarity | 21 Mins |
| MR | Microsoft Clarity | 7 Days |
| MR | Microsoft Clarity | 7 Days |
| MUID | Microsoft Clarity | 1 Year 24 Days |
| recordID | Microsoft Clarity | 29 Days |
| SM | Microsoft Clarity | Session |
| SRM_B | Microsoft Clarity | 1 Year 24 Days |
Lawful Bases and Legitimate Interests
We process personal data on the following lawful bases:
- Complying with legal obligations
- Fulfilling contracts
- Consent
- Legitimate interests
Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Analyzing Data, Fulfilling Customer Orders, Internal Business Operations, Marketing Our Products & Services, Meeting Compliance & Legal Requirements, Operating Our Website or Mobile Apps, Preventing Fraud, Processing Payments, Providing Customer Support, Providing Cybersecurity, Sending Promotional Communications, Storing and Managing Data, and Tracking Purchases & Customer Data.
International Data Transfers
Famous Smoke is not established within the EEA/UK and our website servers are located in the United States, which has not been the subject of an adequacy decision by European data protection authorities. By interacting with this website, you are transmitting your personal data to the United States.
Privacy Rights
Individuals in the EEA/UK have the following rights regarding their personal data.
Make a Privacy Request by clicking here or the link at the top of this page. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.
Right to access. You have the right to request a copy of the personal data we hold about you.
Right of portability. You have the right to ask us to transfer your data to another party.
Right to rectification. You have the right to request that we rectify any incorrect information we have about you.
Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.
Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit the
Information Commissioner’s Office website at https://ico.org.uk/, or see a list of EU Data Protection Authorities at
https://www.gdprregister.eu/gdpr/dpa-gdpr/.
Inquiries
Controller contact information
Famous Smoke
