Privacy Policy

Last updated: 4 August 2026

This Privacy Policy explains how Tobacco & More, trading as PuffZone (“PuffZone,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit puffzonelb.com (the “Website”), create an account, place an order, contact us, or otherwise use our services.

1. Information we collect

Depending on how you use the Website, we may collect:

  • Account and identity information: your name, username, email address, telephone number, and account credentials.
  • Order and delivery information: billing and delivery addresses, purchased products, order history, delivery instructions, order notes, and related customer-service communications.
  • Payment information: the payment method selected, payment status, transaction references, and other information needed to confirm or support payment. Payment-card details, where applicable, are handled by the relevant payment provider and are not intended to be stored directly by PuffZone’s Website.
  • Age-verification information: confirmation that you are eligible to purchase age-restricted products. We or our delivery personnel may inspect valid identification when reasonably required; this Policy does not authorize retaining a copy unless separately disclosed and legally permitted.
  • Communications: information you submit through forms, WhatsApp, email, telephone, social channels, reviews, or customer-support requests.
  • Device and usage information: IP address, browser and device type, operating system, referring pages, viewed pages and products, approximate location derived from IP, cookie identifiers, and interactions with the Website.
  • Fraud and security information: information used to detect suspicious orders, misuse, unauthorized access, or threats to customers and the Website.

Please provide accurate information and avoid submitting information that is not necessary for your order or request.

2. How we use information

We may use personal information to:

  • create and manage customer accounts;
  • confirm, process, fulfill, deliver, exchange, or support orders;
  • communicate about orders, accounts, products, delivery, and customer-service requests;
  • verify age or identity where required for restricted products;
  • operate, secure, troubleshoot, analyze, and improve the Website;
  • prevent fraud, abuse, unlawful activity, and security incidents;
  • measure Website performance and understand customer interactions;
  • present relevant products, promotions, or advertising where permitted;
  • maintain business, tax, accounting, warranty, and dispute records; and
  • comply with applicable law and valid requests from competent authorities.

We process information where it is needed to provide requested services or fulfill an order, to comply with legal obligations, for legitimate operational and security purposes, or with consent where consent is required.

3. Cookies and similar technologies

The Website may use cookies, pixels, tags, and similar technologies for:

  • essential functions such as the shopping cart, checkout, account login, security, and preferences;
  • performance and analytics, including understanding visits and Website usage; and
  • advertising, product-listing measurement, and campaign performance where those services are enabled.

Some cookies are set by services provided by third parties, including Google services. Browser settings can block or delete cookies, but disabling essential cookies may prevent parts of the Website from working correctly. Where applicable, consent choices should be made available before non-essential cookies are used.

4. When we share information

We may share only the information reasonably necessary with:

  • hosting and technical providers that operate, secure, maintain, back up, or support the Website;
  • e-commerce and Website service providers, including WordPress and WooCommerce services and compatible extensions used to manage accounts, products, orders, communications, and site functions;
  • delivery personnel, branches, and logistics providers that need order and contact details to prepare, route, and deliver purchases;
  • payment providers and financial institutions used for the payment method selected by the customer;
  • communications and form providers used to receive or respond to inquiries;
  • analytics, advertising, and product-listing providers, including enabled Google services, subject to applicable settings and consent requirements;
  • professional advisers and insurers where reasonably necessary; and
  • public authorities or other parties when disclosure is required by law, necessary to protect legal rights or safety, or needed to investigate fraud or unlawful activity.

We do not sell personal information as a stand-alone commercial product.

Some service providers may process information outside Lebanon. Where this occurs, we take reasonable steps to use providers and arrangements appropriate to the information and applicable requirements.

5. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including order fulfillment, customer support, security, accounting, tax, warranty, legal, and dispute-resolution needs.

Retention periods vary according to the type of information and applicable obligations. When information is no longer reasonably required, it may be deleted, anonymized, or securely archived with restricted access. Requests for deletion may be limited where records must be retained for legal, accounting, fraud-prevention, or dispute purposes.

6. Your choices and requests

Subject to applicable law and appropriate identity verification, you may ask us to:

  • provide information about personal data associated with you;
  • correct inaccurate or incomplete information;
  • delete eligible information that is no longer required;
  • object to or restrict certain processing where the law provides that right; or
  • withdraw consent for future processing that relies on consent.

You may unsubscribe from marketing communications using the provided opt-out method or by contacting us. Essential order, account, security, and service communications may still be sent when necessary.

To submit a privacy request, contact us using Section 11. We may request information reasonably necessary to verify the requester and locate the relevant records.

7. Account and order information

Customers are responsible for protecting their account credentials. If you believe your account has been accessed without authorization, contact us promptly.

WordPress and WooCommerce privacy tools may allow eligible personal information to be exported or erased. Erasure does not necessarily remove information that must be retained for lawful business, accounting, security, fraud-prevention, or dispute purposes.

8. Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No internet transmission or storage system can be guaranteed completely secure, so customers should use strong, unique passwords and contact us if they suspect misuse.

9. Age-restricted services

PuffZone’s tobacco, nicotine, vaping, hookah, and other age-restricted products are intended only for customers who are at least 18 years old. The Website is not intended to solicit personal information from minors for the purchase of restricted products. If we learn that such information was submitted by a minor, we may delete or restrict it as appropriate and permitted by law.

10. Changes to this Policy

We may update this Privacy Policy to reflect changes to the Website, service providers, business practices, or applicable requirements. The “Last updated” date identifies the current version. Material changes may also be communicated through the Website or another appropriate channel.

11. Contact us

For privacy questions or requests:

Consumers may also contact Lebanon’s Ministry of Economy and Trade or its Consumer Protection Directorate through the official channels available to them.