Last updated: June 2025
Who We Are
Huff and Puff Smoke Shop is a locally owned tobacco and smoking accessories retailer located in Vadnais Heights, Minnesota. Our website address is: https://www.huffandpuffmn.com
We are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy explains how we collect, use, and protect your data when you visit our website or shop with us.
Information We Collect
We collect information you provide directly to us, such as when you:
- Create an account on our website
- Make a purchase in-store or online
- Sign up for our newsletter or promotional emails
- Contact us for customer service
- Leave reviews or comments on our website
- Participate in surveys or promotions
Age Verification: As a tobacco retailer, we are required by law to verify that all customers are 21 years of age or older. This information is collected and stored in compliance with federal and state tobacco regulations.
Comments and Reviews
When visitors leave comments or reviews on our site, we collect the data shown in the forms, including the visitor’s IP address and browser user agent string to help with spam detection and security.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to display your profile picture. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture may be visible to the public in the context of your comment.
Media and Images
If you upload images to our website (such as product reviews with photos), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can potentially download and extract any location data from images on the website.
We recommend removing location data from images before uploading them to protect your privacy.
Cookies
We use cookies to enhance your browsing experience and provide personalized service. Here’s how we use cookies:
Comment Cookies
If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
Login Cookies
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Editing Cookies
If you edit or publish content on our site, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the content you just edited. It expires after 1 day.
Embedded Content from Other Websites
Articles and pages on this site may include embedded content (e.g. videos, images, articles, social media posts, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who We Share Your Data With
We respect your privacy and do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business
- Legal Requirements: We may disclose your information when required by law or to protect our rights and the safety of our customers
- Age Verification Services: We share necessary information with age verification services to comply with tobacco sale regulations
- Password Resets: If you request a password reset, your IP address will be included in the reset email for security purposes
How Long We Retain Your Data
We retain your personal information for as long as necessary to provide you with our services and comply with legal obligations:
- Comments: If you leave a comment, the comment and its metadata are retained indefinitely so we can recognize and approve follow-up comments automatically
- User Accounts: For registered users, we store the personal information provided in user profiles until the account is deleted
- Purchase Records: Transaction records are retained for 7 years to comply with business and tax requirements
- Age Verification Records: As required by tobacco regulations, age verification records are retained for the period mandated by law
Your Rights Over Your Data
You have several rights regarding your personal data:
- Access: You can request to receive an exported file of the personal data we hold about you
- Correction: You can request that we correct any inaccurate personal data
- Deletion: You can request that we erase personal data we hold about you (excluding data we are legally required to retain)
- Account Management: If you have an account, you can see, edit, or delete your personal information at any time (except username changes)
- Marketing Opt-out: You can unsubscribe from marketing communications at any time
Please note that some data cannot be deleted if we are obligated to keep it for administrative, legal, or security purposes, particularly records related to tobacco sales and age verification.
Where Your Data Is Sent
Your data may be processed and stored in the following ways:
- Spam Detection: Visitor comments may be checked through automated spam detection services
- Payment Processing: Payment information is securely processed through encrypted payment gateways
- Email Services: Newsletter and promotional emails are sent through secure email marketing platforms
- Website Analytics: Anonymized website usage data may be analyzed to improve our services
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
- Encryption of sensitive data during transmission
- Secure storage of customer information
- Regular security audits and updates
- Limited access to personal data on a need-to-know basis
- Compliance with PCI DSS standards for payment processing
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new effective date.
Your continued use of our website after any changes indicates your acceptance of the updated privacy policy.
