Cessa Privacy Policy

Cessa Privacy Policy

This Privacy Policy describes how Cessa (“Cessa,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit, use our services, complete a form or quiz, communicate with us, or make a purchase through cessaja.com and any related pages, applications, or services that link to this Privacy Policy (collectively, the “Site”).

For purposes of applicable data protection laws, the data controller responsible for your personal information is:

[INSERT LEGAL ENTITY NAME], doing business as Cessa
78 Franklin St
New York, NY 10013-3481
United States
Email: contato@cessaja.com

Please read this Privacy Policy carefully. By using the Site, you acknowledge that you have read and understood the practices described below.

1. Personal Information We Collect

The personal information we collect depends on how you interact with the Site.

Information you provide directly

We may collect information you provide when you:

  • Place or attempt to place an order;

  • Create an account;

  • Complete a quiz, questionnaire, survey, or form;

  • Subscribe to emails or marketing communications;

  • Contact our customer support;

  • Participate in a promotion;

  • Submit a review, testimonial, or other content; or

  • Otherwise communicate with us.

This information may include:

  • Name;

  • Billing address;

  • Shipping address;

  • Email address;

  • Telephone number;

  • Account login information;

  • Order and transaction information;

  • Product preferences;

  • Customer service communications;

  • Reviews, feedback, and survey responses; and

  • Any other information you choose to provide.

Payment information

When you make a purchase, payment information may be collected and processed by Shopify, payment processors, financial institutions, or other payment providers available during checkout.

Depending on the payment method selected, this information may include card details, billing information, transaction identifiers, and payment authorization information.

Cessa generally does not directly store complete payment card numbers. Payment information is handled by the applicable payment provider in accordance with its own privacy and security practices.

Quiz, smoking-habit, and wellbeing information

If you complete a Cessa quiz, assessment, questionnaire, or support form, you may voluntarily provide information related to:

  • Smoking habits;

  • Frequency or duration of tobacco use;

  • Situations or routines associated with smoking;

  • Previous attempts to stop smoking;

  • Personal goals;

  • Difficult moments or triggers;

  • Product preferences; and

  • Other wellbeing-related information.

Some of this information may be considered sensitive personal information or health-related information under applicable laws.

We collect this information to provide relevant content, product guidance, customer support, and a more personalized experience. We do not use this information to diagnose, treat, or make medical decisions.

Where required by law, we will request your consent before collecting or using sensitive information. You may withdraw your consent by contacting us, although this will not affect processing that occurred before the withdrawal.

Please do not provide medical records, diagnoses, prescription information, or other detailed medical information unless we specifically request it through an appropriate and secure process.

Information collected automatically

When you visit or interact with the Site, we and our service providers may automatically collect certain information about your device and use of the Site, including:

  • IP address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Language and regional settings;

  • Time zone;

  • Approximate location based on IP address;

  • Referring and exit pages;

  • Pages and products viewed;

  • Links and buttons selected;

  • Search terms;

  • Date and time of visits;

  • Time spent on pages;

  • Shopping cart activity;

  • Checkout activity;

  • Advertising interactions; and

  • Other information about how you navigate and interact with the Site.

We may refer to this information as “Device Information” or “Usage Information.”

2. Cookies and Similar Technologies

We use cookies, pixels, tags, web beacons, software development kits, local storage, and similar technologies to operate the Site, remember preferences, analyze performance, prevent fraud, and support advertising.

The technologies used on the Site may change depending on our Shopify settings, installed applications, advertising tools, and service providers.

We generally use the following categories:

Strictly necessary cookies

These cookies are required for the Site to function. They may support:

  • Shopping cart functionality;

  • Checkout;

  • Account authentication;

  • Session management;

  • Security;

  • Fraud prevention;

  • Network management; and

  • Privacy and consent preferences.

Because these cookies are necessary to provide the Site, they generally cannot be disabled through our cookie preference tools.

Preference and functionality cookies

These cookies remember choices such as language, location, account preferences, and other settings that improve your experience.

Analytics and performance cookies

These cookies help us understand how visitors use the Site, which pages are visited, whether errors occur, and how our content and campaigns perform.

Advertising and targeting cookies

These cookies and similar technologies may be used to:

  • Measure advertising performance;

  • Understand whether you arrived through an advertisement;

  • Limit how often an advertisement is displayed;

  • Build audiences;

  • Display advertisements that may be more relevant to your interests; and

  • Conduct remarketing or retargeting campaigns.

Where required by law, non-essential cookies will only be used after you provide consent.

You can manage your choices through the cookie banner or Cookie Preferences option available on the Site. You may also control cookies through your browser settings. Disabling certain cookies may affect Site functionality.

3. How We Use Personal Information

We may use personal information to:

  • Process, confirm, and manage orders;

  • Process payments and refunds;

  • Arrange shipping and delivery;

  • Provide invoices, receipts, and order confirmations;

  • Create and manage customer accounts;

  • Provide customer service;

  • Respond to questions, complaints, and requests;

  • Provide instructions and product-related support;

  • Personalize content and product recommendations;

  • Provide quiz or assessment results;

  • Maintain and improve the Site;

  • Understand how customers use the Site;

  • Measure the effectiveness of advertising and marketing campaigns;

  • Conduct analytics and attribution;

  • Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;

  • Protect our customers, business, Site, and legal rights;

  • Send service-related communications;

  • Send promotional communications when permitted;

  • Maintain business, accounting, tax, and transaction records;

  • Comply with legal and regulatory obligations; and

  • Carry out other purposes disclosed to you when information is collected.

We may also combine information collected through different interactions with Cessa, where permitted by law.

4. Legal Bases for Processing

Where laws such as the European Union General Data Protection Regulation, the United Kingdom GDPR, or Brazil’s General Data Protection Law apply, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information when necessary to:

  • Process your order;

  • Deliver products;

  • Process payment;

  • Provide customer support; or

  • Perform our obligations under an agreement with you.

Consent

We may rely on your consent for:

  • Non-essential cookies;

  • Certain advertising activities;

  • Email or electronic marketing;

  • Sensitive or health-related information provided through quizzes or forms; and

  • Other processing where consent is required.

You may withdraw your consent at any time.

Legitimate interests

We may process information when necessary for legitimate business interests, including:

  • Operating and improving the Site;

  • Understanding customer behavior;

  • Protecting our systems;

  • Preventing fraud;

  • Providing customer support;

  • Measuring business performance; and

  • Promoting our products.

We consider the potential impact on your rights before relying on legitimate interests.

Legal obligations

We may process and retain information to comply with tax, accounting, consumer protection, product safety, law-enforcement, and other legal obligations.

5. Marketing Communications

With your permission or where otherwise permitted by law, we may send information about Cessa products, services, educational content, offers, and promotions.

You may unsubscribe from promotional emails by selecting the unsubscribe link included in the communication.

You may also contact us at contato@cessaja.com.

Even after unsubscribing from promotional communications, you may continue to receive transactional or service-related messages, such as order confirmations, shipping updates, security notices, and responses from customer support.

6. Behavioral Advertising

We may work with advertising and analytics providers to understand Site activity, measure campaigns, and display advertisements on other websites or platforms.

These providers may collect information about your browser, device, Site activity, purchases, and interactions with advertisements through cookies, pixels, tags, and similar technologies.

Depending on our current advertising configuration, these providers may include:

  • Google;

  • Meta, including Facebook and Instagram;

  • Shopify;

  • Microsoft; and

  • Other advertising, attribution, and analytics providers.

You can learn more about managing personalized advertising through:

You may also use the Google Analytics Opt-out Browser Add-on.

These tools are operated by third parties, and their availability and effectiveness are controlled by those providers.

7. How We Disclose Personal Information

We may disclose personal information to service providers and other parties that help us operate our business, including:

E-commerce and hosting providers

We use Shopify to operate and host portions of our online store.

You can learn more about Shopify’s privacy practices in the Shopify Privacy Policy.

Payment providers

We may disclose transaction information to payment processors, financial institutions, fraud-prevention providers, and providers of payment methods selected during checkout.

Shipping and fulfillment providers

We may provide your name, delivery address, telephone number, email address, order details, and other necessary information to warehouses, carriers, logistics providers, customs authorities, and fulfillment partners.

Analytics and advertising providers

We may disclose Device Information, Usage Information, identifiers, and transaction-related information to analytics, attribution, and advertising providers.

For more information, see:

Communication and customer-service providers

We may use email, messaging, customer-service, customer relationship management, and support providers to communicate with you.

Professional advisers

We may disclose information to accountants, auditors, insurers, consultants, attorneys, and other professional advisers where reasonably necessary.

Legal and safety disclosures

We may disclose personal information when we believe disclosure is necessary to:

  • Comply with applicable laws or regulations;

  • Respond to a subpoena, court order, warrant, or lawful government request;

  • Investigate fraud, abuse, security incidents, or