Data Protection

Last Updated: August 15, 2026

Our Role as Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, lstobacco is the data controller responsible for your personal data. This notice sets out your rights and explains the legal basis on which we process your information. It should be read alongside our Privacy Policy, which explains in more detail what data we collect and why.

Legal Basis for Processing

We only process personal data where we have a valid legal basis to do so, which will typically be one of the following:

Consent: Where you have actively agreed, such as subscribing to our newsletter or accepting non-essential cookies
Legitimate Interests: Where processing helps us run and improve the Site, such as basic analytics and fraud prevention, provided this does not override your rights
Legal Obligation: Where we must retain or disclose data to comply with the law

Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Ask us to correct inaccurate or incomplete data
Right to Erasure: Ask us to delete your data where there is no legitimate reason for us to continue processing it
Right to Restrict Processing: Ask us to suspend the processing of your data in certain circumstances
Right to Data Portability: Request that we transfer your data to another organization, or to you, in a structured, machine-readable format
Right to Object: Object to our processing of your data where we rely on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data

How to Exercise Your Rights

To exercise any of the above rights, contact us using the details below. We will respond to legitimate requests within one month, as required by law. We may need to verify your identity before processing certain requests.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

International Transfers

Some of the third-party services we use (such as analytics or affiliate tracking providers) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses.

Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk. We would, however, appreciate the chance to address your concerns directly first.

Contact Our Data Protection Contact

For any data protection queries or to exercise your rights, please contact us:

Email: maria@istobacco.com
Phone: 077 9081 7079
Address: 85 Great Portland Street, First Floor, London W1W 7LT, England, UK