Privacy Policy —
How We Handle Your Data

Overview

This Privacy Policy describes how ANTI TAR ("ANTI TAR", "we", "us", or "our") collects, uses, and shares personal data when you visit antitar.com (the "Site") or purchase our products.

ANTI TAR is headquartered at 9 Boon Keng Road #36-158, Singapore 330009. We are subject to Singapore's Personal Data Protection Act 2012 (PDPA). We also comply with the EU/UK General Data Protection Regulation (GDPR) for customers in the European Economic Area and United Kingdom, and with the California Consumer Privacy Act (CCPA) for California residents.

What We Collect

Order and account information

When you place an order or create an account, we collect:

• Full name
• Billing and shipping address
• Email address
• Phone number (if provided)
• Payment information — processed via our payment processor (PayPal, Stripe, or similar); we do not store full credit card numbers on our servers
• Order history and transaction details
• Subscription preferences (if you subscribe)

Device and browsing information

When you visit the Site, we automatically collect:

• IP address and approximate location
• Browser type and version
• Operating system
• Referring website or search query
• Pages viewed and time spent on the Site
• Cookies and similar tracking technologies (see Section 13)

Communications

If you contact us by email or through the contact form, we retain the content of your message and your email address to respond and resolve your enquiry.

Information from third-party platforms

If you purchase through Amazon, eBay, or Etsy, those platforms share your order information with us only to the extent necessary to fulfil your order. Their own privacy policies govern how they collect and use your data on their platforms.

How We Use Your Data

"Legitimate interest" means we have a genuine business reason that does not override your rights and interests. You can object to processing based on legitimate interest — see Section 9.

Third Parties We Share Data With

We do not sell, rent, or trade your personal data. We share data only with service providers who help us operate our business, and only to the extent necessary for the services they provide.

All third-party service providers are contractually required to handle your data securely and use it only for the purposes specified. We select providers with appropriate data protection standards.

We may also disclose personal data when required by applicable law, court order, or regulatory authority, or to protect the safety, rights, or property of ANTI TAR or others.

International data transfers

ANTI TAR is headquartered in Singapore. Your data may be transferred to and processed in Singapore, the USA, Canada, Japan, Indonesia, and other countries where our service providers operate. These countries may have different data protection laws than your home country. Where data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) as required by GDPR.

Advertising & Tracking

We use remarketing and advertising services to show ANTI TAR advertisements to people who have previously visited our Site. This works through cookies and similar tracking technologies.

Services we use for advertising

• Google Ads (remarketing): shows ANTI TAR ads on Google Search and the Google Display Network to previous Site visitors. Governed by Google's Privacy Policy at google.com/privacy
• Meta Pixel (Facebook/Instagram): tracks conversions and enables remarketing on Facebook and Instagram. Governed by Meta's Data Policy at facebook.com/privacy/policy
• Bing Ads: remarketing on Microsoft's advertising network

Opting out of targeted advertising

• Google Ad preferences: adssettings.google.com
• Facebook Ad preferences: facebook.com/settings/?tab=ads
• Bing Ad preferences: Microsoft personalised ads
• Digital Advertising Alliance opt-out: optout.aboutads.info
• Network Advertising Initiative opt-out: optout.networkadvertising.org

Data Retention

We retain your personal data for the following periods:

After the applicable retention period, data is securely deleted or anonymised. You may request early deletion of your personal data at any time — see Section 9 (Your Rights). Note that we may need to retain certain data beyond your request where we have a legal obligation to do so (such as tax records).

Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption for all data transmitted between your browser and our Site (look for the padlock icon and https:// in your browser)
• Payment card data processed directly by PCI-DSS compliant payment processors — we do not store full card numbers on our servers
• Access controls limiting which staff members can access customer data
• Regular security updates to our website platform and plugins

No method of internet transmission is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. If you suspect unauthorised access to your account or personal data, contact us immediately at [email protected].

Minors

ANTI TAR products are designed for adult smokers. Our Site is not intended for individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal data from minors.

If you believe a minor has provided personal data to us, please contact us at [email protected] and we will take steps to delete that information promptly.

Your Rights

Depending on where you are located, you have various rights regarding your personal data. The specific rights that apply to your jurisdiction are detailed in Sections 10 (Singapore), 11 (EU/UK), and 12 (California).

In general, most of our customers have the right to:

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Data Privacy Request" in the subject line. We will respond within 30 days. We may need to verify your identity before processing your request.

Singapore — PDPA

Personal Data Protection Act 2012 (PDPA)

Applies to ANTI TAR as a Singapore-incorporated business

As a Singapore-based business, ANTI TAR complies with the Personal Data Protection Act 2012 (PDPA) as amended, including the 2021 amendments. The PDPA governs the collection, use, and disclosure of personal data by organisations in Singapore.

Your rights under PDPA

• Right of access: you may request access to personal data we hold about you
• Right of correction: you may request correction of inaccurate personal data
• Right to withdraw consent: you may withdraw consent for the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions
• Right to data portability: you may request that we transmit your personal data to another organisation in a structured format where technically feasible

Data Protection Officer

Our designated Data Protection Officer (DPO) can be contacted at:

If you have a concern about how we handle your personal data that we have not resolved to your satisfaction, you may contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

EU & UK Customers — GDPR

General Data Protection Regulation (GDPR)

Applies to customers in the EU, EEA, and United Kingdom

If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR applies to our processing of your personal data. ANTI TAR processes your data on the following legal bases:

• Contract: to fulfil orders, process payments, manage subscriptions, and handle returns
• Legitimate interests: to prevent fraud, improve our services, and for direct marketing to existing customers (where not overridden by your interests)
• Consent: for marketing communications where you have opted in, and for non-essential cookies and tracking
• Legal obligation: to comply with tax, accounting, and regulatory requirements

Your GDPR rights

Under GDPR you have the right to:

• Access personal data we hold about you (Article 15)
• Rectification of inaccurate data (Article 16)
• Erasure ("right to be forgotten") in certain circumstances (Article 17)
• Restriction of processing in certain circumstances (Article 18)
• Data portability in a structured, machine-readable format (Article 20)
• Object to processing based on legitimate interests or for direct marketing (Article 21)
• Withdraw consent at any time where processing is based on consent (Article 7)
• Lodge a complaint with your national data protection supervisory authority

Supervisory authority complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority in your country of residence. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers from the EEA/UK

Your data may be transferred to Singapore, the USA, and other countries outside the EEA/UK. Where such transfers occur, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission, or equivalent mechanisms for UK transfers. Contact us for more information about the safeguards applicable to your data.

California Residents — CCPA

California Consumer Privacy Act (CCPA)

Applies to California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and its amendments (CPRA) provide you with specific rights regarding your personal information.

Categories of personal information collected

In the past 12 months, we have collected the following categories of personal information about California consumers:

• Identifiers (name, email, IP address, account ID)
• Commercial information (purchase history, products ordered)
• Internet or network activity (browsing history on our Site)
• Geolocation data (approximate location from IP address)
• Financial information (payment data — processed by payment processor)

We do not sell your personal information

Your California rights

• Right to know: you may request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, and the categories of third parties with whom it is shared
• Right to delete: you may request deletion of your personal information, subject to certain exceptions
• Right to correct: you may request correction of inaccurate personal information
• Right to opt out of sale or sharing: we do not sell personal information; no opt-out is required
• Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights — you will receive the same quality of service regardless
• Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes beyond those necessary to provide our services

To exercise your California rights, submit a verifiable consumer request to [email protected] with "CCPA Request" in the subject line. We will respond within 45 days. You may submit requests on behalf of yourself or a minor child in your care.

Cookies & Tracking Technologies

Cookies are small data files placed on your device when you visit a website. We use cookies to operate our Site, analyse usage, and enable advertising.

Managing cookies

• Most browsers allow you to view, manage, and delete cookies through browser settings
• Disabling essential cookies will affect Site functionality including the shopping cart and checkout
• You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout
• For more information about cookies generally, visit allaboutcookies.org

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. When we make material changes, we will update the "Last updated" date at the top of this page.

For significant changes that affect your rights or how we use your data, we will notify you by email (where we have your email address) or by displaying a prominent notice on our Site prior to the change taking effect.

We encourage you to review this policy periodically. Your continued use of our Site and services after policy changes constitutes your acceptance of the updated policy.

Contact & Data Protection Officer

For any questions about this Privacy Policy, to exercise your data rights, or to make a privacy complaint, contact us:

We take privacy concerns seriously and will do our best to address your query promptly and fairly. If you are not satisfied with our response, you have the right to escalate to the relevant supervisory authority for your jurisdiction (see Sections 10, 11, and 12).