Privacy Policy

Last Updated: June 8, 2026

This Privacy Policy describes how Heads Up Tobacco Accessories, operated by SENSKE CPAP SUPPLY INCORPORATED (“we,” “us,” or “our”), collects, uses, stores, and discloses your Personal Information when you visit, use our services, or make a purchase from headsuptobacco.com (the “Site”) or otherwise communicate with us (collectively, the “Services”).

By accessing or using any of our Services, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Site or Services.

This policy applies to all users of our Site, including visitors, registered account holders, and customers who make purchases. It does not apply to third-party websites, applications, or services that may be linked to or from our Site.

1. Information We Collect

We collect information in three ways: directly from you, automatically through your use of our Site, and from trusted third-party partners.

a) Information You Provide Directly to Us

When you interact with our Site or Services, you may provide us with the following categories of personal information:

Identity & Contact Details: Full name, email address, phone number, billing address, and shipping address.
Order & Transaction Information: Items purchased, quantities, product preferences, order history, and payment confirmation details (we do not store full payment card numbers — see Section 1c).
Account Information: Username, password (stored in encrypted form), and saved preferences if you choose to create an account on our Site.
Customer Support Communications: Records of messages, emails, or calls when you contact us for assistance, including the content of those communications and any attachments you provide.
Marketing Preferences: Your opt-in or opt-out status for email newsletters, promotional offers, and other marketing communications.

b) Information Collected Automatically (Cookies & Tracking Technologies)

When you visit our Site, we and our third-party service providers automatically collect certain technical and behavioral data using cookies, pixel tags, web beacons, and similar tracking technologies. This data includes:

Device & Technical Data: IP address, browser type and version, operating system, device type, device identifiers, and screen resolution.
Usage & Behavioral Data: Pages visited, products viewed, time spent on each page, items added to or removed from your cart, search queries on our Site, and referral source (how you arrived at our Site).
Session Data: Login timestamps, session duration, and navigation paths through our Site.

The following tracking technologies are currently active on our Site:

Google Analytics: Used to analyze website traffic and user behavior in aggregate. Data collected by Google Analytics is subject to Google’s Privacy Policy.
Meta Pixel (Facebook Pixel): Used to measure the effectiveness of our advertising on Facebook and Instagram, and to deliver relevant ads to users. Data collected is subject to Meta’s Privacy Policy.
Shopify Analytics: Our e-commerce platform (Shopify) collects data related to store performance, order processing, and customer behavior. This data is subject to Shopify’s Privacy Policy.
Essential Cookies: Required for the Site to function correctly, including maintaining your shopping cart, processing your login session, and enabling secure checkout.

You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site, including your ability to add items to your cart or complete a purchase. For more information on managing cookies, visit allaboutcookies.org.

c) Information Received from Third Parties

We receive limited personal data from trusted third-party partners in connection with the operation of our Services:

Payment Processors (Stripe, PayPal, and others): We receive transaction confirmation data, the last four digits of your payment card, card type, and billing address verification results. We do not receive or store your full card number, CVV, or full bank account details. All payment data is processed and secured directly by our payment processors in compliance with PCI-DSS standards.
Shipping Carriers (USPS, UPS, FedEx, DHL, and others): We share your name and delivery address with our shipping carriers to fulfill your order. In return, we receive shipment tracking updates and delivery confirmation data.
Marketing & Advertising Platforms: We may receive aggregated audience and performance data from platforms such as Google and Meta to measure the effectiveness of our advertising campaigns.

2. How We Use Your Personal Information

We use the personal information we collect for the following purposes, each of which is necessary for the operation of our business or is conducted with your consent:

Order Fulfillment: To process your payment, prepare and ship your order, manage returns and exchanges, and send you order confirmation and shipping notifications.
Customer Support: To respond to your inquiries, resolve disputes, and provide assistance with your orders or account.
Account Management: To create and maintain your account, authenticate your identity, and manage your saved preferences.
Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other potentially illegal or harmful activities.
Legal Compliance: To comply with applicable federal, state, and local laws and regulations, including tax reporting, record-keeping obligations, and responding to lawful requests from government authorities.
Marketing & Personalization (with your consent): To send you newsletters, promotional offers, product recommendations, and other marketing communications, where you have opted in to receive them. You may withdraw your consent and opt out of marketing communications at any time (see Section 4).
Site Improvement: To analyze usage patterns, conduct A/B testing, and improve the functionality, content, and user experience of our Site.

3. Disclosure of Your Personal Information

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

We share your personal data only in the following limited circumstances:

Service Providers & Operational Partners: We share data with trusted third-party vendors who assist us in operating our Site and delivering our Services. These include our e-commerce platform (Shopify), payment processors (Stripe, PayPal), shipping carriers (USPS, UPS, FedEx, DHL), cloud hosting providers, and email marketing platforms. All such vendors are contractually required to handle your data securely and only for the purposes we specify.
Analytics & Advertising Partners: We share limited, aggregated, or pseudonymized data with analytics providers (Google Analytics) and advertising platforms (Meta/Facebook) to measure and optimize our marketing efforts. These partners are subject to their own privacy policies.
Legal & Regulatory Authorities: We may disclose your personal information to law enforcement agencies, courts, regulators, or other government authorities when required to do so by applicable law, court order, or legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our Site before your data is transferred and becomes subject to a different privacy policy.

4. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information under applicable privacy laws. We honor these rights regardless of your location, to the extent practicable.

Rights Available to All Users

Right to Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Deletion: You may request that we delete your personal information, subject to certain legal retention obligations (e.g., tax and financial records).
Right to Opt-Out of Marketing: You may withdraw your consent for marketing communications at any time by clicking the “Unsubscribe” link in any marketing email we send you, or by contacting us directly at support@headsuptobacco.com. Opting out of marketing communications will not affect transactional emails related to your orders.
Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format.

Additional Rights for California Residents (CCPA / CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights. To submit a California privacy rights request, please contact us at support@headsuptobacco.com with the subject line “California Privacy Rights Request.”

Additional Rights for EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation, including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your personal data is typically contract performance (to fulfill your order), legal obligation (compliance with applicable laws), or legitimate interest (fraud prevention, site security). Where we rely on your consent (e.g., for marketing), you may withdraw it at any time.

To exercise any of the rights described above, please contact us using the details in Section 7. We will respond to all verified requests within 30 calendar days.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

SSL/TLS encryption for all data transmitted between your browser and our Site (HTTPS).
Secure, access-controlled storage of personal data on our hosting infrastructure.
PCI-DSS compliant payment processing — we do not store full payment card numbers on our systems.
Regular security reviews and vulnerability assessments of our Site and infrastructure.
Restricted internal access to personal data on a need-to-know basis.

While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to use a strong, unique password for your account and to contact us immediately if you suspect any unauthorized access to your account.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Specifically:

Order & Transaction Records: Retained for a minimum of 7 years to comply with U.S. federal and state tax, financial reporting, and audit requirements.
Account Information: Retained for as long as your account remains active, plus a reasonable period after account closure to resolve any outstanding disputes or legal matters.
Customer Support Records: Retained for up to 3 years after the resolution of the relevant inquiry or dispute.
Marketing Data: Retained until you opt out of marketing communications or request deletion, whichever occurs first.
Analytics & Cookie Data: Retained in accordance with the data retention policies of the respective third-party analytics providers (e.g., Google Analytics default retention period).

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures.

7. Children’s Privacy

Our Site and Services are intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, please do not use our Site or submit any personal information to us. If we become aware that we have inadvertently collected personal information from a minor under the age of 18, we will take prompt steps to delete that information from our records. If you believe we may have collected information from a minor, please contact us immediately at support@headsuptobacco.com.

8. Third-Party Links

Our Site may contain links to third-party websites, social media platforms, or other external services. This Privacy Policy applies solely to our Site and Services. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by law, notify you via email or a prominent notice on our Site. We encourage you to review this Privacy Policy periodically. Your continued use of our Site or Services following the posting of any changes constitutes your acceptance of the updated policy.

10. Contact Us & Privacy Requests

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our privacy team using the details below. We are committed to resolving all privacy inquiries promptly and transparently.

Email: support@headsuptobacco.com
Phone: +1 (406) 257-0091
Support Hours: Monday – Friday, 9:00 AM – 7:00 PM Mountain Time (MT)
Response Time: We aim to respond to all privacy requests within 30 calendar days of receipt.
Old Business Address: 2680 US Highway 2 E, Kalispell, MT 59901, United States
New Business Address: 1212 U.S. Hwy 2 E, Kalispell, MT 59901, United States
Trading Name: Heads Up Tobacco Accessories
Legal Name: SENSKE CPAP SUPPLY INCORPORATED
Registered Office Address: 3002 E BRIDGEPORT AVE, SPOKANE, WA 99207-5708, United States