Lancelot Cigar Privacy Policy

Last updated: February 12, 2026

Welcome to Lancelot Cigar (hereinafter referred to as "this Platform"). This Privacy Policy is designed to clarify the relevant rules for this Platform to collect, use, store, and share users' personal information, protect users' personal privacy and data security, and explain the relevant rights enjoyed by users. This Platform strictly complies with all provisions of the revised 2024 version of Malaysia's Personal Data Protection Act (PDPA) to ensure that the processing of users' personal data is legal, transparent, and secure.

Please carefully read and understand this Privacy Policy before using this Platform (online Cuban cigar e-commerce service) and the associated offline cigar bar service of Asia Pacific Cigar. Your relevant actions such as registration, browsing, and purchase shall be deemed as your consent to this Platform processing your personal information in accordance with this Policy.

I. Collection of Personal Information

To provide you with high-quality and compliant online cigar purchase services and integrated online-offline membership services, this Platform will collect the following personal information from you based on the principles of legality, necessity, and appropriateness, without collecting any information irrelevant to the services: 

• Full name

• Contact phone number

• Shipping address

• Payment account information (used only for order payment and settlement, and encrypted protection measures will be adopted)

• Age verification-related information (classified as sensitive personal data under the PDPA, which will be processed in strict accordance with the requirements for sensitive data protection)

• As well as your browsing records and purchase records (including order details and purchase preferences) on this Platform.

II. Purposes of Using Personal Information

The user's personal information collected by this Platform will be strictly used for the following legitimate purposes and will not be used for other irrelevant purposes without your explicit consent:

• Order Processing: Used to process the cigar purchase orders you submit on this Platform, including order confirmation, payment verification, order status updates, etc., to ensure the smooth completion of orders.

• Delivery Services: Provide your full name, phone number, and shipping address to cooperating logistics agencies for the delivery of cigar products, ensuring that you can receive the purchased products smoothly.

• Customer Service: Used to respond to your inquiries, complaints, and after-sales requests (such as returns and exchanges, product consultations, etc.), provide you with timely and effective customer support, and solve the problems you encounter in using this Platform and purchasing products.

• Marketing Promotions: Send you new product information, promotional activities, preferential benefits of this Platform, as well as relevant activity notifications of the associated offline Asia Pacific Cigar bar (such as offline tastings, member-exclusive activities, etc.).

• Membership Service Association: Realize the synchronization of membership levels between this Platform and the offline Asia Pacific Cigar bar, ensuring that the membership rights and interests you obtain on this Platform can be synchronously enjoyed at the offline cigar bar, providing you with integrated online and offline membership services.

• Compliance Requirements: Used to fulfill the legal obligation of age verification (since cigars are classified as restricted commodities, it is necessary to confirm that users meet the legal purchasing age) and ensure that the operation of this Platform complies with relevant Malaysian laws, regulations, and industry standards.

III. Disclosure of Personal Information

This Platform attaches great importance to the confidentiality of users' personal information and strictly abides by the disclosure principles of the PDPA. Without your consent, it will not disclose, sell, rent, or share your personal information to any irrelevant third parties. Only in the following necessary circumstances will relevant personal information be shared with specific third parties, and the scope of sharing will be strictly controlled to ensure data security:

• Logistics Agencies: To complete product delivery, necessary delivery information such as your full name, phone number, and shipping address will be shared with cooperating logistics agencies. Logistics agencies may only use this information for delivery purposes and not for other purposes.

• Payment Institutions: To complete order payment, your payment-related information (after encryption) will be shared with cooperating payment institutions. Payment institutions may only use this information for payment settlement and not disclose or use it for other purposes.

• Age Verification Institutions: To fulfill the legal obligation of age verification, relevant age verification information will be shared with cooperating age verification institutions to confirm that you meet the legal age for purchasing cigars. The verification institutions must strictly keep the relevant information confidential.

• Offline Associated Entity: Share your order history and membership level information with the offline Asia Pacific Cigar bar only for the purpose of realizing membership level synchronization and integrated online and offline services. The offline cigar bar will protect your personal information in strict accordance with the requirements of this Policy.

• Legal and Regulatory Requirements: Personal information may be disclosed in accordance with the mandatory requirements of laws, regulations, judicial organs, or administrative authorities to cooperate with relevant investigations and law enforcement work and fulfill legal obligations.

This Platform will sign data protection agreements with all third parties that receive users' personal information, clarify the data protection responsibilities of both parties, require third parties to process users' personal information in strict accordance with the requirements of this Platform and relevant laws and regulations, and regularly supervise the compliance of third parties.

IV. Storage Period of Personal Information

This Platform only stores your personal information for the period necessary to achieve the purpose of services. The specific storage rules are as follows:

• Your order-related information (full name, phone number, address, payment information, order details, etc.) will be retained until you have no active behavior on this Platform after the order is completed; after there is no active behavior, your personal information will be anonymized, and the anonymized data will no longer be able to identify specific users.

• Your age verification-related information (sensitive personal data) will be retained until the expiration of the legal retention period after the age verification is completed; after the expiration, it will be securely deleted or anonymized.

• Your usage behavior information such as browsing records and purchase records will be anonymized after you have no active behavior. The anonymized data used for platform service optimization can be retained for a long time but does not contain any information that can identify your personal identity.

Storage Method: This Platform adopts security measures such as data encryption and access control to electronically store your personal information, ensuring that the information is not accessed, tampered with, or leaked without authorization during storage. At the same time, the access rights of internal personnel to users' personal information are strictly restricted, and only authorized personnel can access relevant information when performing their job duties.

V. Security Protection Measures for Personal Information

This Platform attaches great importance to the security of users' personal information to protect your personal information from unauthorized access, use, disclosure, tampering, or loss. The specific security measures are as follows:

• Technical Protection: Adopt technical means such as data encryption, firewalls, intrusion detection, and data backup to provide comprehensive protection for users' personal information, especially sensitive information such as payment information and age verification.

• Management Protection: Establish a sound data security management system, clarify internal data processing procedures and division of responsibilities, strictly restrict access rights, conduct data protection training for internal employees, and improve employees' awareness of data security and compliance.

• Third-Party Supervision: Strictly screen and regularly supervise third parties that receive users' personal information (such as logistics, payment, and age verification institutions), require them to comply with relevant data protection regulations, and ensure the security of user information in the third-party link.

Please note that no method of transmission over the Internet or electronic storage is 100% secure. Although this Platform has taken the above security measures, it cannot completely eliminate the risk of data leakage.

VI. Users' Rights

As a data subject, you have the right to access, modify, delete, and transfer your own personal information (data portability right) and other relevant rights. This Platform will provide convenient channels for you to exercise your rights, as follows:

• Right of Access and Modification: You can directly access and view your personal information (such as full name, phone number, address, order history, membership information, etc.) by logging into your account on this Platform, and directly modify inaccurate or incomplete personal information in the account.

• Right of Deletion: If you believe that the personal information stored by this Platform is no longer necessary to be retained, or you wish to delete relevant information, you can submit a deletion application by logging into your account or contact the customer service of this Platform to apply for deletion. This Platform will promptly process your deletion request after verifying your identity (except for information that must be retained in accordance with laws and regulations).

• Data Portability Right: You have the right to request this Platform to transmit your personal data to other data controllers if technically feasible and data formats are compatible. You can submit a relevant request by contacting the customer service of this Platform, and this Platform will complete the processing within the specified time limit.

VII. Marketing Information Push and Unsubscription

This Platform will send you marketing information, including new product notifications, promotional offers, activity information of this Platform, as well as relevant activity notifications of the offline Asia Pacific Cigar bar. You have the right to independently choose whether to receive such marketing information, and the unsubscription method is as follows:

You can click the unsubscribe link in accordance with the "unsubscribe" instructions in each marketing email to complete the unsubscription process; after unsubscription, this Platform will no longer send you relevant marketing information and will not interfere with your normal use in any form.

VIII. Age Verification Instructions

Cigars are classified as restricted commodities under Malaysian law and are only allowed to be purchased by users who meet the legal purchasing age. To fulfill the legal compliance obligation, this Platform will conduct age verification for all users, and the specific instructions are as follows:

• This Platform will confirm that your age meets the legal purchasing requirements through age verification methods before providing you with cigar purchase services.

• This Platform will store your age verification-related sensitive information, which is only used for age verification purposes and not for other purposes. After the expiration of the retention period, it will be securely deleted or anonymized.

IX. Update and Notification of Privacy Policy

This Platform will irregularly revise and update this Privacy Policy in accordance with the update of relevant Malaysian PDPA laws and regulations, changes in industry standards, and the development of this Platform's business. For any material changes to the revised Privacy Policy, this Platform will notify you by publishing the new policy on our website and updating the effective date. Upon publication, this Platform will also notify you through the contact information you reserved on this Platform (such as email, SMS, etc.) to ensure that you have sufficient time to understand the revised content. Your continued use of this Platform's services shall be deemed as your consent to the revised Privacy Policy.

X. Contact Information

If you have any questions, objections to this Privacy Policy, or need to exercise your relevant rights regarding personal information (such as access, modification, deletion, complaint, etc.), you can contact this Platform through the following methods:

• Email: support@lancelotcigar.com;

• Store Address: Level 1, No. 8 , Jln 2/68f, Off, Jln Tun Razak, 50400 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur;

This Platform will promptly verify and respond after receiving your inquiry, request, or complaint, which will generally be processed within 7 working days. For complex issues, the processing time will be appropriately extended, and you will be promptly informed of the processing progress.

XI. Disclaimer

• If your personal information is accessed, used, or leaked without authorization due to your own improper operations (such as disclosing account passwords, personal information, etc.), this Platform shall not be liable;

• If personal information is leaked, lost, or tampered with due to force majeure (such as natural disasters, network interruptions, hacker attacks, and other factors beyond the control of this Platform), this Platform will take remedial measures within its capabilities but shall not be liable beyond a reasonable scope;

• This Platform shall not be liable for disclosing or processing users' personal information in accordance with the requirements of laws, regulations, judicial organs, or administrative authorities.

This Privacy Policy shall take effect from the date of publication, and the final interpretation right shall belong to Lancelot Cigar.

Lancelot Cigar reserves the final right to revise this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us at support@lancelotcigar.com.