Last updated: January 2026
Privacy Policy
AromaCuba ("we", "us", "our") operates aromacuba.com. We treat your personal data with the discretion expected of a private luxury retailer. This Privacy Policy explains how we collect, use, store, and safeguard your information, in line with principles consistent with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and international best practice.
1. Data Controller
For the purposes of this policy, AromaCuba is the data controller responsible for your personal data submitted through our website, email correspondence, and order process.
2. Information We Collect
We may collect the following categories of personal data:
- Identity & contact data — name, email address, telephone number, billing and shipping addresses.
- Transaction data — order history, payment references, delivery details, and correspondence relating to your purchase.
- Age verification data — confirmation that you meet legal smoking age requirements where applicable.
- Technical data — IP address, browser type, device information, and cookies used to operate and improve our website.
- Communication data — messages you send to our client services team.
3. How We Use Your Data
We use personal data only where necessary and proportionate, including to:
- Process and fulfil your orders, including payment verification and shipping arrangements;
- Verify age eligibility where required by law;
- Provide client services and respond to enquiries;
- Send transactional communications (order confirmations, shipping updates);
- Comply with legal, regulatory, tobacco-control, and anti-fraud obligations;
- Improve website security, performance, and user experience.
We do not sell your personal data to third parties.
4. Legal Basis & Retention
We process data on the basis of contract performance, legitimate interests (such as fraud prevention and service improvement), and legal obligation. We retain personal data only for as long as necessary to fulfil the purposes above, unless a longer period is required by law.
5. Data Sharing
We may share limited data with trusted service providers who assist us in operating our business—such as payment processors, logistics partners, and email infrastructure—subject to confidentiality and data protection obligations. International transfers may occur where service providers operate outside your jurisdiction; we take reasonable steps to ensure appropriate safeguards.
6. Security
We implement technical and organisational measures designed to protect your data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the Internet is entirely secure; we encourage you to use strong passwords and protect your account credentials.
7. Your Rights
Depending on applicable law, you may have the right to access, correct, or request deletion of your personal data, to object to certain processing, or to withdraw consent where processing is consent-based. To exercise these rights, contact us at info@aromacuba.com. We will respond within a reasonable timeframe.
8. Cookies
Our website may use cookies and similar technologies to enable essential functions and analytics. You may adjust your browser settings to refuse cookies; some features may not function properly as a result.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. Continued use of our website after changes constitutes acceptance of the revised policy.
10. Contact
For privacy-related enquiries: info@aromacuba.com