1. Who We Are

Super Cheap Smoke is an Australian-based online retailer specializing in tobacco and cigarette products. We operate throughout Australia and are committed to providing customers with authentic tobacco products at competitive prices while maintaining the highest standards of privacy and data protection.

Business Name: Super Cheap Smoke
Website: https://supercheapsmoke.com.au
Email: support@supercheapsmoke.com.au
Operating Region: Australia

2. Information We Collect

We collect and process various types of personal information to provide you with our services, comply with legal obligations, and improve your shopping experience.

a) Information You Provide Directly

• Personal Details: Full name, date of birth (for age verification)
• Contact Information: Email address, phone number, postal address
• Delivery Details: Shipping address, delivery preferences
• Payment Information: Credit/debit card details, PayPal account, bank transfer details (processed securely through encrypted payment gateways)
• Account Information: Username, password (encrypted), order history, saved preferences
• Age Verification: Date of birth, government-issued ID (when required for verification)
• Communication Records: Correspondence via email, live chat, contact forms, phone calls

b) Information We Collect Automatically

• Technical Data: IP address, browser type and version, device information, operating system
• Usage Data: Pages visited, time spent on site, referring website, search queries
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see our Cookie Policy)
• Transaction Data: Purchase history, payment methods used, order details
• Marketing Data: Email open rates, click-through rates, marketing preferences

3. How We Use Your Information

We use your personal information for the following purposes:

Order Processing and Fulfilment

• Process and complete your tobacco product orders
• Arrange delivery and shipping
• Send order confirmations, shipping notifications, and delivery updates
• Handle returns, refunds, and exchanges
• Manage your customer account

Legal Compliance

• Age Verification: Verify you are 18 years or older (legal requirement for tobacco sales in Australia)
• Comply with Australian tobacco sale regulations
• Maintain records as required by law
• Respond to legal requests and prevent illegal activity

Customer Service

• Respond to your inquiries and support requests
• Provide product recommendations and assistance
• Resolve disputes and handle complaints
• Conduct customer satisfaction surveys

Marketing Communications (With Your Consent)

• Send promotional emails about new products and special offers
• Notify you of sales and discounts
• Share relevant tobacco product information
• Note: You can unsubscribe from marketing emails at any time

Website Improvement and Security

• Analyze website usage to improve user experience
• Detect and prevent fraud, abuse, and security threats
• Troubleshoot technical issues
• Optimize website performance and functionality

4. Legal Basis for Processing (Australian Privacy Principles)

We only process your personal information when we have a lawful basis under Australian privacy law:

5. How We Protect Your Data

We take data security seriously and implement multiple layers of protection to safeguard your personal information:

Technical Security Measures

• SSL Encryption: All data transmitted between your browser and our website is encrypted using 256-bit SSL technology
• Secure Payment Processing: Payment details are processed through PCI DSS compliant payment gateways (we never store complete credit card numbers)
• Encrypted Storage: Personal data is stored on secure, encrypted servers in Australia
• Firewalls: Advanced firewall protection against unauthorized access
• Regular Security Audits: Ongoing security assessments and vulnerability testing
• Access Controls: Strict internal access controls - only authorized personnel can access personal data

Organizational Security Measures

• Staff training on data protection and privacy
• Confidentiality agreements with all employees and contractors
• Regular review and updates of security protocols
• Incident response procedures for any data breaches

6. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with trusted service providers who help us operate our business:

Third-Party Service Providers

Legal Disclosures

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, or regulatory requirements
• Enforce our Terms and Conditions
• Protect our rights, property, or safety
• Prevent fraud, illegal activity, or security threats
• Respond to government or law enforcement requests

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:

After the retention period expires, we securely delete or anonymize your personal data. In some cases, we may retain data longer if required by law or for legitimate business purposes (e.g., ongoing legal disputes).

8. Your Privacy Rights (Australian Privacy Act)

Under Australian privacy law, you have the following rights regarding your personal information:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Correction

If your personal information is inaccurate, incomplete, or out-of-date, you have the right to request correction. You can update most information directly through your account settings.

Right to Erasure (Delete Your Data)

You can request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may be unable to delete certain data if we have a legal obligation to retain it (e.g., transaction records for tax purposes).

Right to Restrict Processing

You can request that we limit how we use your data in certain situations (e.g., while we verify accuracy of disputed information).

Right to Object

You can object to processing of your personal data for:

• Direct marketing purposes (opt-out anytime)
• Processing based on legitimate interests
• Automated decision-making or profiling

Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing emails), you can withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal.

Right to Complain

If you believe we have mishandled your personal information, you have the right to lodge a complaint with the:

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content.

Types of Cookies We Use

Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality (e.g., you may not be able to complete purchases).

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy → Cookies

10. Age Verification and Restrictions

We implement strict age verification measures:

• Date of birth verification during account registration
• Age declaration at checkout
• Automated age verification checks for all orders
• Additional ID verification for suspicious or flagged accounts
• Delivery drivers may request ID on delivery (18+ signature required)

Consequences of False Information: Providing false age information is a serious offense and may result in account termination, order cancellation, and reporting to authorities.

11. International Data Transfers

Your personal data is primarily stored on servers located in Australia. However, some of our service providers (e.g., payment processors, email services) may store or process data internationally.

When we transfer data outside Australia, we ensure appropriate safeguards are in place, including:

• Use of service providers in countries with adequate data protection laws
• Contractual clauses requiring equivalent protection to Australian standards
• Compliance with Australian Privacy Principles for overseas disclosures

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if you have an account with us)
• Display a prominent notice on our website

We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Children's Privacy

Our website and services are not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 18, we will:

• Immediately delete the information from our systems
• Cancel any orders placed
• Refund any payments made
• Block the account from future use

If you believe a minor has provided us with personal information, please contact us immediately at support@supercheapsmoke.com.au.

14. Your Consent

By using our website, creating an account, or making a purchase, you consent to:

• The collection and use of your personal information as described in this Privacy Policy
• Our use of cookies and tracking technologies
• Age verification processes required for tobacco sales
• Communication from us regarding orders, account updates, and (if opted-in) marketing

You can withdraw consent at any time by contacting us or adjusting your account settings. Note that withdrawing consent may prevent us from providing certain services (e.g., processing orders).