Privacy Policy
At iqosilumaone.com, your privacy is not an afterthought — it is a fundamental part of how we operate. This Privacy Policy explains clearly and honestly what personal information we collect, why we collect it, how we protect it, and the choices you have. We recommend reading this in full. If you have any questions, we are always available at sales@iqosilumaone.com.
Who We Are
iqosilumaone.com (“we”, “us”, “our”) is the trading name of the worldwide online retail and wholesale operation at https://iqosilumaone.com, specialising in the global distribution of authentic IQOS ILUMA devices and tobacco stick accessories. We are the data controller responsible for your personal information collected through this website.
For all privacy-related matters, including data access requests, erasure requests, or complaints, please contact our Data Protection contact directly at: sales@iqosilumaone.com.
Information We Collect
We collect only the information necessary to provide you with an excellent purchasing and service experience. This includes:
- Identity & Contact Information: Full name, business name, email address, telephone number, and billing/shipping address — collected when you place an order or submit an inquiry.
- Transaction Data: Details of products purchased, order values, payment method type (not full card numbers), and order history.
- Account Data: Username, password (stored encrypted), and preferences if you create an account.
- Wholesale Inquiry Data: Company details, country of operation, estimated order volumes, and business type — submitted through our Wholesale Inquiry form.
- Age Verification Data: Date of birth, confirmed during the mandatory age gate. This is used solely to confirm legal age and is not stored beyond the active session unless required by applicable law.
- Technical & Usage Data: IP address, browser type and version, device type, pages visited, time on site, referral source, and geographic region. Collected automatically via cookies and server logs.
- Communications Data: Any messages, emails, or inquiries you send us, and our responses to you.
We do not collect or store full payment card numbers. Payment processing is handled securely by PCI-DSS-compliant third-party payment processors.
How We Use Your Information
Your information is used exclusively for the following purposes:
- Processing and fulfilling your orders, including payment processing, packing, and dispatch
- Communicating your order status, tracking information, and delivery updates
- Verifying your age and legal eligibility to purchase tobacco-related products
- Responding to your inquiries, support requests, and wholesale partnership questions
- Managing your account if you have registered with us
- Sending transactional emails (order confirmations, shipping notifications, invoices)
- Complying with applicable legal obligations, including tobacco retail regulations and anti-money laundering requirements
- Improving our website, product offerings, and customer experience based on aggregated, anonymised analytics
- With your explicit consent: sending promotional communications about new products, wholesale offers, and exclusive deals
We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.
Legal Basis for Processing (GDPR)
For individuals within the European Economic Area (EEA) and United Kingdom, we process your personal data under the following legal bases:
- Contractual Necessity: Processing required to fulfil your purchase order or service agreement
- Legal Obligation: Processing required to comply with applicable laws, including age verification and tobacco retail regulations
- Legitimate Interests: Website analytics and fraud prevention, where we have balanced our interests against your rights
- Consent: Marketing communications — which you may withdraw at any time
Sharing Your Information
We share your information only where strictly necessary, with the following categories of trusted third-party service providers:
- Payment Processors: Stripe, PayPal, and equivalent PCI-DSS-compliant payment gateways — to process your transactions securely
- Logistics & Courier Partners: DHL Express, FedEx International, and regional carriers — to fulfil and track your delivery
- E-commerce Platform: WooCommerce / WordPress — as the technical infrastructure underlying our store
- Analytics Providers: Google Analytics (anonymised, aggregated data) — to understand website performance
- Email Service Providers: To deliver transactional and, with your consent, marketing emails
- Legal & Regulatory Authorities: Where required by law, court order, or regulatory request
All third-party service providers are bound by data processing agreements requiring them to protect your information in accordance with applicable data protection law.
International Data Transfers
As a global business, your information may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction.
Where we transfer personal data from the EEA or UK to countries not deemed adequate by the European Commission, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your rights.
By placing an order or submitting an inquiry, you acknowledge that your data may be processed in countries outside your own, subject to these protections.
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to provide functionality, improve your experience, and analyse traffic. The types of cookies we use include:
- Strictly Necessary Cookies: Required for the website to function — shopping cart, session management, age verification. Cannot be disabled.
- Performance & Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). These use anonymised data.
- Functional Cookies: Remember your preferences (language, currency) to improve your experience.
- Marketing Cookies: Used only with your explicit consent to deliver relevant advertising.
You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our store.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.
- Order & Transaction Records: Retained for 7 years for financial and tax compliance purposes
- Customer Account Data: Retained while your account is active, plus 2 years after last activity
- Marketing Consent Records: Retained until consent is withdrawn
- Inquiry and Communication Records: Retained for 3 years
- Age Verification Data: Session-only; not stored beyond the current browser session unless required by applicable tobacco retail regulations
Your Rights
Subject to applicable law, you have the following rights regarding your personal information:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”) where no legitimate grounds exist for continued processing
- Right to Restriction: Request that we restrict processing of your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw marketing consent at any time without affecting past processing
To exercise any of these rights, please contact us at sales@iqosilumaone.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
Data Security
We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include:
- SSL/TLS encryption on all data transmissions
- PCI-DSS-compliant payment processing — we never store full card numbers
- Password hashing using industry-standard algorithms
- Access controls limiting data access to authorised personnel on a need-to-know basis
- Regular security assessments and monitoring
While we implement rigorous security measures, no method of internet transmission is 100% secure. In the event of a data breach that poses a high risk to your rights, we will notify you and relevant authorities in accordance with applicable data protection law.
Children’s Privacy
Our website is strictly intended for adults of legal smoking age only. We do not knowingly collect personal information from individuals under the age of 18 (or the applicable legal minimum age in their country). We operate a mandatory age verification gate prior to accessing any content or purchasing any product.
If you believe that a minor has provided personal information to us without appropriate parental consent, please contact us immediately at sales@iqosilumaone.com and we will promptly delete such information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: sales@iqosilumaone.com
- Website: https://iqosilumaone.com/contact/
- Subject line: Privacy Request — [Your Name]
We take all privacy inquiries seriously and will respond within 30 calendar days.
Ready to Experience IQOS ILUMA ONE?
Authentic products. Worldwide delivery. Transparent policies. Your privacy and satisfaction are our commitment.
Shop Now