Privacy Policy

Puffcity Franchise LLC (“Puffcity”, “we”, “us”)

Effective date: January 1, 2026

This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to:

our informational website at www.puffcity.com,
our in-store loyalty / membership program, and
the job application form reachable from QR codes posted in our stores.

We do not sell products or take payments through this website; purchases are made in our physical stores. If you do not agree with this policy, please do not use our website or services.

1. Who we are

Puffcity is a retail smoke shop chain operating stores in New Jersey, Pennsylvania, and Connecticut, USA.

Contact for privacy questions or requests:
Email: [email protected]
Mail: 30 Sherwood Ln, Suite #2, Fairfield, NJ 07004

2. Information we collect

Information you give us

Loyalty / membership: if you join our loyalty program (online or at the counter), your phone number and the purchases connected to your membership, so points can be earned and redeemed.
Job applications: if you apply for a job through our application form: your name, contact details, the position you are applying for, any availability or experience information you choose to provide, and an optional résumé file.
Customer service and inquiries: the contents of messages you send us, including franchise or wholesale inquiries.

Information collected automatically

Technical and security data: IP address, browser/device information (user agent), and request logs. We use these for security, rate limiting, and abuse prevention.
Analytics: we use Google Analytics (provided by Google) to understand how visitors use our website — for example, which pages are viewed, general device and browser information, and approximate (city-level) location derived from IP address. Google Analytics sets cookies and processes this usage data on our behalf. See Section 5 and Section 6.
Cookies and similar technologies: see Section 5.

Information we do NOT collect

We do not sell products or process payments on this website, so no payment card numbers are collected here. In-store purchases are handled by our in-store point-of-sale systems.
We do not use third-party advertising trackers, and we do not run advertising or cross-site retargeting on this website.
We check photo ID in stores for age-restricted purchases, but we do not scan, copy, or retain your identification document.

3. How we use your information

To run the loyalty program: track and redeem points, and identify your membership at the counter.
To process job applications: review applications, contact applicants, and, if hired, create employment records.
To respond to customer-service, franchise, and wholesale inquiries.
To understand and improve how our website is used (analytics).
To keep the site and our customers safe: fraud and abuse prevention, rate limiting, bot protection, and security logging.
To comply with law: age-restriction rules for the products we sell, tax and accounting requirements, and lawful requests from authorities.

We do not use your personal information for targeted advertising, and we do not sell it.

4. Legal requirement: you must be 21 or older

Our products are age-restricted. Our website and stores are intended only for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21. ID is checked in store as described in our Age Verification Policy. If we learn that we hold information about a person under 21 collected in connection with a purchase, we will delete it.

5. Cookies

We use the following cookies and similar technologies:

Strictly necessary — cookies required to run the site securely and remember basic preferences.
Analytics — Google Analytics sets cookies to measure how the site is used (see Section 2). You can block or delete these through your browser settings or a browser opt-out.
Bot protection — our job application form uses Cloudflare Turnstile to block automated abuse; Cloudflare may set a cookie strictly for that purpose.

We do not use advertising or cross-site tracking cookies.

6. How we share information

We share personal information only with:

Service providers who process it on our behalf and only as needed to provide their service: website hosting, Google Analytics (website usage measurement), bot protection (Cloudflare), and transactional/email delivery providers.
Authorities, when required by law, court order, or to protect our legal rights, our customers, or the public.
A successor business, if Puffcity or substantially all of its assets are acquired, in which case this policy continues to apply to your information.

We never sell your personal information, and we do not share it for cross-context behavioral advertising.

7. How long we keep information

Loyalty / membership: until you ask us to remove you or after prolonged inactivity.
Business records and receipts: kept as long as required for tax, accounting, and legal purposes (approximately 4 years).
Job applications: applications that are rejected or withdrawn are deleted after our retention window (currently about 6 months). Applications of hired candidates become part of employment records.
Security and analytics logs: kept for a limited period and then deleted or aggregated.

8. Your choices and rights

Access, correction, and deletion: you can ask us to access, correct, or delete personal information we hold about you (for example, your loyalty record or a job application) by contacting us at [email protected].
Analytics opt-out: you can block analytics cookies in your browser or use Google’s opt-out tools.
Email: if we ever send marketing email, it will include an unsubscribe link and be sent only where permitted.

Depending on your state of residence, you may have additional rights under state privacy laws (such as the right to know, correct, or delete personal information, and the right not to be discriminated against for exercising those rights). To exercise any right, contact us (Section 1). We will verify your request (for example, by confirming control of the email or phone number on your record) and respond within the time required by law. We do not sell personal information, so there is nothing to opt out of selling.

9. Security

We protect personal information with HTTPS/TLS encryption in transit, role-based access controls for staff, and private storage for uploaded files (résumés are accessible to hiring staff only). No system is perfectly secure, but we work to protect your data and will notify you and authorities of a breach where the law requires it.

10. Children

Our website and services are not directed to children, and we do not knowingly collect information from anyone under 13 (or under 21 in connection with purchases). See Section 4.

11. Changes to this policy

If we make material changes, we will update the effective date at the top of this page and, where appropriate, notify members by email. The current version is always available at this URL.

12. Contact us

Questions, concerns, or requests: [email protected] · +1 (862) 293-1400 · 30 Sherwood Ln, Suite #2, Fairfield, NJ 07004.

call us now(862) 293-1400