Cigar HouseArmenia
Cart

Legal

Personal data processing policy

Prepared under the Law of the Republic of Armenia “On Protection of Personal Data”.

Updated November 9, 2026

Seller

Name
Cigar House Armenia

  1. Operator

    The personal data processor (operator) is ⁨Cigar House Armenia⁩. Our details are at the top of this page. For any question about your data: ⁨—⁩, ⁨+374 41 781 000⁩.

  2. Legal grounds

    • Your consent: given when you tick the box at checkout or send a form on the website.
    • The contract of sale and delivery that you enter into when you place an order.
    • Duties under the laws of the Republic of Armenia (tax, accounting, consumer protection).

  3. Whose data and which data

    • Customers: phone number, name, delivery address, comment for the courier, email (optional), orders, payment and refund status.
    • People who write to us or book an event: name, phone or email, message.
    • Visitors: IP address, browser and device data, pages visited, cookies.

    We do not collect special categories of personal data (health, beliefs and the like) or biometric data, and we do not receive bank card details.

  4. Purposes

    • Confirming the phone number and protecting the website from bots and abuse.
    • Accepting, paying for, delivering and supporting orders, refunds and receipts.
    • Answering messages and event bookings.
    • Website statistics, to improve the website.
    • Keeping the records required by law.

    Data is processed only for these purposes and only as much as they need.

  5. What we do with the data

    Collection, recording, organisation, storage, updating, use, transfer to the recipients listed below, blocking, deletion and destruction, by automated means and by hand.

  6. Transfer to third parties

    • Courier: name, phone, delivery address.
    • Ameriabank: order number and amount, for card payments and refunds.
    • Services that deliver the confirmation code: SMS provider, Telegram, WhatsApp (Meta).
    • Hosting (Amazon Web Services, Frankfurt, Germany) and Cloudflare: the whole website database is stored and served by them.
    • Statistics services: Yandex Metrica, Google Analytics, Cloudflare Web Analytics (technical data of visitors).
    • State bodies, when the law requires it.

    Some of these recipients are outside the Republic of Armenia. By giving your consent you agree to this transfer. We use only providers that protect data with their own security measures.

  7. Retention

    Confirmation codes: up to 7 days. Message delivery logs: 90 days. Orders and the related customer data: as long as the tax and accounting laws of Armenia require. Messages from the contact form: as long as needed to answer them. Backups: 10 days.

    When the period ends, the data is deleted or made anonymous.

  8. Your rights

    • To know whether we process your data, for what purpose and on what grounds, and to get a copy.
    • To have inaccurate or incomplete data corrected.
    • To have data blocked or deleted when it is no longer needed or was processed unlawfully.
    • To withdraw your consent at any time.
    • To appeal to the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia or to a court.

    Send your request to ⁨—⁩ or call ⁨+374 41 781 000⁩. We answer within the time set by law.

  9. Withdrawing consent

    Withdrawing consent does not affect processing done before it, or data that the law requires us to keep. Without a phone number and an address we cannot accept or deliver an order.

  10. Security measures

    HTTPS on every page, access for staff by role only, separate accounts for each staff member, an audit log of staff actions, daily backups, and card payments only on the bank’s page.

  11. Changes

    The current version of this policy is always on this page, with the date it was last updated.