Privacy policy
Last updated: 05/12/2025
This Privacy Policy explains how Zatabak LTD (trading name: ZACIGARS) (“we”, “us”, “our”) collects, uses, stores, and protects personal data of individuals who access or use our website www.zacigars.com
(“the Website”), in accordance with the UK Data Protection Act 2018, the UK GDPR, and other applicable regulations.
We are committed to protecting your privacy and ensuring the lawful, fair, and transparent processing of your personal information.
1. Data Controller
Zatabak LTD
Trading name: ZACIGARS
Registered Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: [email protected]
2. Personal Data We Collect
We may collect and process the following categories of personal information:
2.1. Information You Provide
Full name
Date of birth (when necessary to confirm age eligibility)
Billing and delivery address
Email address
Telephone number
Order history and communication history
Important:
We do not store any credit card details. All payment information is processed securely by our authorised payment gateway.
2.2. Automatically Collected Data
IP address
Device identifiers
Browser information
Cookies (for session management and improving functionality)
Website usage and navigation data
2.3. Cookies
Cookies help us:
maintain your shopping cart
verify session security
display correct currency
improve Website performance
You may disable cookies in your browser, although certain Website features may become unavailable.
3. Legal Basis for Processing Personal Data
We process customer information under the following lawful bases:
Performance of a contract – to process orders, arrange delivery, and provide services.
Compliance with legal obligations – including UK tobacco regulations and record-keeping requirements.
Legitimate interests – preventing fraud, ensuring lawful sale of age-restricted goods, and improving online services.
Consent – for marketing communication or specific optional features.
4. Purpose of Processing Personal Data
We process your information to:
verify customer identity and age eligibility where required
process, fulfill, and deliver orders
provide customer support
prevent fraud or unauthorised transactions
manage customer accounts
maintain transaction and compliance records
improve Website performance and security
5. Age Verification & Compliance With UK Tobacco Law
As a retailer of age-restricted products, ZACIGARS must ensure that all customers are legally eligible to purchase tobacco products.
We implement the following safeguards:
5.1. Website Age-Gate
Upon entering the Website, users must confirm they are 21+.
This serves as the initial access control, but it is not the only measure.
5.2. Internal Order Review Controls
Before shipping any order, our team performs manual verification based on:
delivery name vs. customer name
delivery address patterns
order behaviour consistent with adult purchasers
repeat customer verification
shipping to locations where Adult Signature is available (Switzerland, EU, USA, etc.)
If an order appears suspicious or inconsistent with adult use, we reserve the right to request additional proof of age before shipment.
5.3. Adult Signature Upon Delivery
All tobacco shipments are dispatched via carriers that support Adult Signature / Identity Check, including:
SwissPost (Prio with Signature)
UPS Adult Signature Service
This ensures that the parcel is released only to a verified adult, which is a legally recognised age-verification safeguard in many jurisdictions, including the UK.
5.4. Compliance Documentation
Our Age Verification Policy is available on our Website and incorporated into both:
Terms & Conditions
Internal Compliance Procedures
This guarantees that sales are made exclusively to adults and delivery is restricted to persons over the legal purchasing age.
6. Sharing of Personal Data
We only share personal information with:
Logistics partners strictly for the purpose of shipping and delivery
Payment gateway for processing transactions
We do not sell, lease, or disclose personal data to third parties for marketing purposes.
7. Data Retention
We retain customer information only as long as necessary for:
fulfilling orders
meeting accounting and legal obligations
preventing fraud and resolving disputes
Data not required for compliance obligations may be deleted upon request.
8. Data Security
We employ industry-standard security measures, including:
SSL encryption
restricted access to customer records
secure authentication measures
regular internal audits
We take all reasonable steps to protect personal data from unauthorised access, alteration, or disclosure.
9. Your Rights
Under UK GDPR, you have the right to:
access your personal data
request correction of inaccurate information
request deletion of your data (“right to be forgotten”)
object to certain types of processing
withdraw consent at any time
request transfer of your data (data portability)
All requests can be submitted to [email protected]
.
10. International Transfers
Some data (e.g., shipping information sent to our Swiss warehouse) may be transferred outside the UK.
All such transfers comply with GDPR adequacy requirements and secure-transfer protocols.
11. Updates to This Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated revision date.
12. Contact Information
For any privacy-related questions, requests, or concerns, please contact:
Email: [email protected]
Zatabak LTD
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
