PRIVACY POLICY

Effective Date: April 22, 2026

1. INTRODUCTION

Exotics Snacks and Tobacco ("the Shop," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you how we look after your personal data when you visit our Rochester retail location, use our website, or join the Exotics Rewards Program.

2. DATA WE COLLECT

To comply with New York State law and manage our loyalty program, we collect:

  • Identity Data: Name, date of birth, and government-issued ID details (for age verification).

  • Contact Data: Email address and phone number.

  • Transaction Data: Details about products purchased and reward points earned/redeemed.

  • Technical Data: IP address and browser info if using our website.

3. HOW WE USE YOUR DATA

We use your information only for legal and business purposes:

  • Age Verification: Ensuring all customers are 21+ as required by NY law.

  • Rewards Program: Managing your points and sending you member-only discounts.

  • Legal Compliance: Keeping your signed liability waiver on file as a condition of sale for specific products.

  • Security: Protecting the shop and website from fraud.

4. DISCLOSURE OF DATA

We do not sell your data. We only share information if:

  • Required by Law: If a court or New York State regulator (like the Attorney General) issues a legal request.

  • Service Providers: We use trusted third-party tools to manage our rewards and website, and they are contractually obligated to keep your data safe.

5. YOUR LEGAL RIGHTS

Under the New York SHIELD Act and related privacy laws, you have the right to:

  • Access: Request a copy of the data we have on you.

  • Correction: Ask us to fix any wrong info (like an old email).

  • Opt-Out: Leave the Rewards Program at any time.

  • Deletion: Request we delete your data, though we must keep certain records (like waivers and age verification) to stay legal.

6. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to employees who have a business need to know.

7. NO MINORS

This shop and website are for adults aged 21 and over. We do not knowingly collect data from anyone under 21. If we find out a minor has provided us with info, we delete it immediately.

8. CONTACT

For any questions regarding your data or to update your Rewards info, please visit us in person at our Rochester location.