Effective Date: 3 March 2026

Fathom and Fury Cigars (“Fathom and Fury,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a purchase, or otherwise interact with us (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access or use the Services.

1. Information We Collect

We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you (“Personal Information”). The categories of information we may collect include:

1.1 Information You Provide Directly

• Contact information: Name, billing address, shipping address (if applicable), email address, phone number.

• Account information: Username, password, and any profile details if you create an account on our site (for example, via WooCommerce account registration).

• Order and payment information: Products purchased, order history, and limited payment details. Full payment card data is processed securely by our payment processor (Square) and is not stored by us, except for limited tokens or references where necessary for recurring billing, refunds, or dispute resolution.

• Age verification information: Date of birth, and any information you submit through our age verification tools (such as Age Verify) or similar services used to confirm that you are of legal smoking age (21+ in the United States).

• Communications: Content of messages you send via contact forms, email (including Gmail), phone, chat, or other channels, including support requests or feedback.

• Customization details: Information you provide for custom or personalized items (e.g., engraving text, special instructions).

1.2 Information Collected Automatically

When you access or use our Services, we may automatically collect certain information, including:

• Device and usage data: IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, links clicked, access times, and other usage data.

• Cookies and similar technologies: We use cookies, web beacons, pixels, and similar technologies to recognize your browser or device, remember your preferences, and understand how you interact with our Services.

This information may be collected in part using third-party tools such as Google Analytics, which helps us understand traffic and usage patterns on our website.

You can typically adjust your browser settings to refuse cookies or alert you when cookies are being sent, but some parts of our Services may not function properly without them.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors (Square): Limited payment-related information such as payment status, masked card details, and transaction IDs.

• E‑commerce platform (WooCommerce): Order details, account information, and transactional data generated by your purchases on our site.

• Age verification services (Age Verify or similar): Confirmation that you meet minimum age requirements for purchasing tobacco products, and any related verification data as required by law or by the service.

• Marketing and CRM platforms (Go High Level): Contact information, communication preferences, and engagement data used for email, SMS, and marketing automation, when you have opted in or otherwise provided your information.

• Email service (Gmail and integrated tools): Email content, metadata, and contact details used for customer support and communication.

• Analytics and advertising partners (such as Google Analytics and any pixels we may implement): Aggregated or pseudonymized data about how users discover and interact with our Services.

2. How We Use Your Information

We use your information for the following purposes:

• To process and fulfill orders: Including processing payments via Square, generating orders and invoices via WooCommerce, shipping products, providing order confirmations, and communicating about your orders.

• To verify age and comply with laws: Using Age Verify or similar services and internal checks to ensure that purchasers are of legal age for tobacco products and comply with federal, state, and local regulations.

• To provide, maintain, and improve the Services: Operating the website, diagnosing technical issues, analyzing usage (including via Google Analytics), and enhancing user experience.

• To manage your account: Creating and maintaining your WooCommerce customer account, authenticating you, and providing account-related support.

• To communicate with you: Responding to inquiries and support requests via email (including Gmail), phone, or other channels; sending order confirmations, shipping notifications, and other transactional messages.

• For marketing and promotions (where permitted): Using tools such as Go High Level, email platforms, and, where implemented, advertising pixels to send newsletters, special offers, and other promotional communications about our products and services. You may opt out at any time.

• To manage customer relationships: Using CRM and marketing automation through Go High Level to segment audiences, track campaign performance, and improve relevance of our communications.

• To protect our rights, property, and safety: Detecting, preventing, and responding to fraud, abuse, security incidents, and other harmful or unlawful activity.

• To comply with legal obligations: Meeting our obligations under applicable laws, regulations, and legal processes, and responding to lawful requests by public authorities.

We will only use your Personal Information for the purposes described in this Privacy Policy or as otherwise disclosed to you at the time of collection or with your consent.

3. Legal Bases for Processing (Where Applicable)

Where required by law (such as in the European Economic Area or similar jurisdictions, if we serve those customers), we rely on one or more of the following legal bases to process your Personal Information:

• Performance of a contract: To provide products and services you request, including processing your orders and payments.

• Compliance with legal obligations: To meet legal and regulatory requirements, including age verification for tobacco products and recordkeeping obligations.

• Legitimate interests: To improve the Services, prevent fraud, maintain security, and market our products in ways that do not override your rights and freedoms.

• Consent: When you have given us consent, such as for certain marketing communications, cookies, analytics, or age verification processes where applicable.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers and Partners

We share information with trusted third-party service providers and partners who perform services on our behalf, including:

• WooCommerce: For managing our online store, orders, customer accounts, and checkout process.

• Square: For secure payment processing, refunds, and fraud prevention.

• Google Analytics: For website analytics, traffic measurement, and usage insights.

• Age Verify (or similar): For age and identity verification related to tobacco sales.

• Go High Level: For customer relationship management (CRM), email and SMS marketing, funnels, and marketing automation.

• Gmail and related email services: For sending and receiving emails, customer support, and communications.

• Hosting providers, security services, and IT support: To host the website, manage infrastructure, and maintain security.

• Shipping carriers and fulfillment providers: To deliver your orders and update shipping status.

These providers are authorized to use your information only as necessary to perform services on our behalf and are generally obligated to safeguard your information.

4.2 Legal and Compliance

We may disclose your information when we believe it is necessary to:

• Comply with applicable laws, regulations, or legal process.

• Respond to lawful requests from public authorities or law enforcement.

• Enforce our terms and conditions or other agreements.

• Protect the rights, property, or safety of Fathom and Fury, our customers, or others.

4.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our business or assets, your information may be transferred as part of that transaction, subject to applicable law and this Privacy Policy.

4.4 With Your Consent

We may share your information with third parties for other purposes when we have your consent or when you direct us to do so.

We do not sell your Personal Information in the traditional sense, but certain forms of sharing (for example, cookie-based profiling or tracking for advertising) may be considered a “sale” or “sharing” under some privacy laws. Where required, we will provide you with appropriate disclosures and options.

5. Cookies, Analytics, and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to:

• Keep you signed in and maintain your shopping cart.

• Remember your preferences and settings.

• Understand how visitors use our site and measure performance, including through Google Analytics.

• Support marketing and remarketing campaigns, including through Go High Level and, where implemented, advertising platforms.

Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site. Google may use the data collected to contextualize and personalize the ads of its own advertising network. You can learn more about how Google uses data and how to control your settings by visiting Google’s privacy resources.

You can control cookies through your browser settings and may have additional cookie preference tools available on our site. Disabling certain cookies may affect functionality and performance.

6. Data Retention

We retain your Personal Information only as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• For as long as you maintain an account with us (e.g., WooCommerce account).

• For as long as needed to complete transactions, fulfill your orders, and provide the Services.

• For periods required by law (e.g., tax, accounting, and regulatory requirements).

• As necessary to resolve disputes, enforce agreements, and protect our legal rights.

After these periods, we will delete or anonymize your information in accordance with our data retention policies and applicable law.

7. Security of Your Information

We use reasonable technical, administrative, and physical safeguards to protect your Personal Information from unauthorized access, disclosure, alteration, or destruction. These measures may include encryption, secure hosting environments, restricted access, and security monitoring.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your Personal Information, including:

• Access: You may request access to the Personal Information we hold about you.

• Correction: You may request that we correct inaccurate or incomplete information.

• Deletion: You may request that we delete your Personal Information, subject to legal and contractual obligations.

• Restriction or objection: You may request that we restrict or object to certain processing, particularly for direct marketing.

• Portability: You may request a copy of your Personal Information in a structured, commonly used, and machine-readable format, where technically feasible.

• Withdraw consent: Where we rely on consent (for example, for certain marketing or analytics), you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us using the information in the “Contact Us” section below. We may require you to verify your identity before processing your request.

You may opt out of marketing emails or SMS messages managed via Go High Level at any time by using the unsubscribe link, replying with opt-out keywords (where applicable), or contacting us directly. You may still receive transactional or service-related communications (e.g., order confirmations, shipping updates).

9. Children’s Privacy

Our Services are intended for adults of legal smoking age (21+ in the United States) and are not directed to children. We do not knowingly collect Personal Information from individuals under 21. If we learn that we have collected Personal Information from an individual under the applicable legal age, we will take steps to delete such information as soon as possible.

10. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, or services (for example, social media platforms or external resources) that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites or services you visit or use.

11. International Users

Our Services are primarily intended for customers in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers are located. These locations may have different data protection laws than those in your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Effective Date” at the top of this page. Your continued use of the Services after any changes are posted constitutes your acceptance of the revised Privacy Policy.