Privacy Policy

Effective: May 9, 2026. Last updated: May 9, 2026.

Quick read

  • What we collect: your name, phone, email, and shipping address when you contact us about an order, plus standard website analytics if you visit dewatacigars.com.
  • What we do with it: respond to your inquiries, arrange and ship your order, and meet our Indonesian tax record-keeping obligations.
  • What we don’t do: sell your data, run targeted ads, store card details, or do business with anyone under 21.
  • Your rights: ask what we hold, request changes, or request deletion. Email hello@dewatacigars.com.
  • Reach us: hello@dewatacigars.com, or WhatsApp +62 819-0835-1242 (text only).

1. Who we are

Dewata Cigars is a Bali-based premium cigar business. We sell boxed cigars and selected singles to customers in Bali and across Indonesia, with occasional international customers. Orders are arranged through WhatsApp; the website is a catalogue and price list, not an online checkout.

You can reach us at hello@dewatacigars.com or WhatsApp +62 819-0835-1242.

2. What data we collect

Directly from you, when you contact us

  • Your name
  • Phone number (when you message us on WhatsApp)
  • Email address (when you write to us)
  • Shipping address, when you place an order for delivery
  • Recipient name and address, when you order a gift for someone else
  • Payment confirmation, typically a screenshot or transaction reference for a bank transfer
  • Any other information you choose to share with us during our conversation

Automatically, when you visit dewatacigars.com

  • IP address, browser type, device type, referring page, and time of visit (standard server logs)
  • Pages viewed, session duration, and approximate location at country level (via Google Analytics 4 with IP anonymization)
  • Cookies set by the site (see Section 6)

What we do not collect

  • Sensitive personal information: no government IDs, financial account numbers, biometric data, health data, race, religion, sexual orientation, or similar categories.
  • Personal data from anyone under 21 (see Section 9).

3. How we collect it

We collect personal data three ways: directly from you when you contact us via WhatsApp or email; automatically through cookies and Google Analytics 4 when you visit our website; and through standard server access logs maintained by our hosting provider, Liquid Web / Nexcess.

4. Why we use it

  • To respond to your inquiries and quote products.
  • To process and arrange your order, including delivery and gift handling.
  • To send order updates, payment confirmations, and shipping notifications via WhatsApp or email.
  • To improve our website and product range using aggregated analytics.
  • To comply with our legal obligations, including Indonesian tax record-keeping.

5. Who we share it with

  • Suppliers and shipping partners: name, shipping address, and a contact number, only as needed to fulfill your order.
  • Banks (BCA, Wise): payment information you provide directly to them. We do not store card numbers, security codes, or banking credentials.
  • Google (Analytics 4): aggregated and anonymized website usage data.
  • Our hosting provider (Liquid Web / Nexcess): server logs as part of standard hosting operations.
  • Government authorities: only when legally required, such as in response to a court order or regulatory request.

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not run targeted advertising on this site.

6. Cookies and similar technologies

Our website uses two categories of cookies:

  • Strictly necessary cookies: set by WordPress and our caching layer to make the site work properly (page rendering, session handling).
  • Analytics cookies: set by Google Analytics 4 to measure aggregated usage.

You can manage cookies through your browser settings. Most browsers let you block or delete cookies, or warn you before one is set. Refer to your browser’s help pages for instructions: Chrome, Safari, Firefox, Edge.

If your browser sends a Global Privacy Control signal, we treat it as a valid opt-out request for sale and sharing of your personal information.

7. Your rights

If you are in California

Under the California Consumer Privacy Act (as amended by the California Privacy Rights Act), you have the right to:

  • Know what categories of personal information we collect, the sources, the purposes, and the categories of third parties we share it with.
  • Access the specific pieces of personal information we hold about you, including data going back to January 1, 2022.
  • Correct inaccurate personal information.
  • Delete your personal information.
  • Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell or share for advertising, so this right is honored by default.
  • Receive equal service and not be discriminated against for exercising your rights.

We do not collect sensitive personal information, so the right to limit its use does not apply. We do not use automated decision-making that produces legal or similarly significant effects, so the right to opt out of automated decision-making does not apply. To exercise any right above, email hello@dewatacigars.com. We will respond within 45 days. We may verify your identity by matching your request to the email or phone number we have on record.

If you are in another US state with a comprehensive privacy law

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington have similar rights to access, correct, delete, port, and opt out of sale, sharing, targeted advertising, and certain types of profiling. Exact mechanics depend on your state. To exercise any of these rights, email hello@dewatacigars.com and tell us your state of residence.

If you are in Singapore

Under the Personal Data Protection Act (PDPA), you have the right to access the personal data we hold about you, request correction of inaccurate data, and withdraw consent for our use of your data. To exercise any of these rights, email hello@dewatacigars.com. We will respond within 30 days.

If you are in Indonesia

Under Law No. 27 of 2022 on Personal Data Protection (UU PDP), you have the right to:

  • Access your personal data and obtain a copy.
  • Correct inaccurate personal data.
  • Request erasure of your personal data, subject to legal retention requirements.
  • Withdraw the consent you have given.
  • Object to specific uses of your data.
  • Receive your data in a portable format.

To exercise any right above, email hello@dewatacigars.com.

8. Data retention

We keep your personal data only as long as necessary for the purposes described in this policy, or as required by law. In practice:

  • Order records: 10 years, to meet Indonesian tax record-keeping requirements.
  • WhatsApp conversations: typically retained for 2 years from your last message to us, unless an active matter requires longer retention.
  • Analytics data: retained per Google Analytics 4 defaults (currently 14 months).
  • Server access logs: rotated within 90 days by our hosting provider.

You can request earlier deletion by contacting us; we will delete what we are not legally required to retain.

9. Age requirement

Our products are tobacco products. By using this website or contacting us about an order, you confirm that you are at least 21 years old. This matches the legal minimum age for tobacco purchase in Indonesia (Government Regulation 28 of 2024), Singapore, and the United States. We do not knowingly sell to anyone under 21, and we do not knowingly collect personal data from anyone under 21. If you believe a person under 21 has provided us with personal data, contact hello@dewatacigars.com and we will delete it.

10. Security

We protect your personal data through HTTPS encryption for all website traffic, a managed WordPress security layer (Sucuri) with malware scanning, and restricted access to order records (only the operator and WhatsApp admin can read order conversations and customer details).

We do not store card numbers, security codes, or other payment credentials. Payment data flows directly to your bank or to Wise; it does not pass through our systems.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a high risk to your rights, we will notify you in line with applicable law.

11. Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects on you. All quotes, order decisions, and customer interactions are handled by a person.

12. Changes to this policy

We may update this policy as our practices change or as the law evolves. The effective date at the top of this page reflects the latest update. Material changes will be communicated to active customers via WhatsApp or email.

13. Contact us

For privacy questions, to exercise your rights, or for any other privacy-related matter:

By contacting us via WhatsApp or email, you accept this privacy policy and the data handling described above.