Philip Morris International

- English - Global - English - Consumer

Who are we?

We are a member of PMI U.S., Philip Morris International’s U.S. family of businesses. We are affiliate members of Philip Morris International, a collective group of businesses. All affiliate members of the group are listed here.

All brands and entities are listed in the “Who should you contact with questions?” section of this Notice. Please use these details if you wish to contact us in relation to the processing of your personal data.  

Our details (name, address, etc.) will have been given to you separately at the time of (or to confirm) the collection of information about you, for example, in a notice, on an app or a website, or in an e-mail containing a link to this notice.  

How do we collect information about you?

We may collect information about you in various ways.

• You may provide us with information directly (e.g. filling in a form, making a call to us, or uploading information to us via a mobile app).
• We may collect information from a PMI electronic device, if you choose to send information to us.
• We may collect information automatically when you interact with our systems or we communicate with you (e.g. when you use a PMI U.S. app or website or, where we use technologies to observe when you receive or open e-mails or receive SMS messages).
• We may also collect information from third parties (e.g. publicly-available information, information on social media platforms such as Meta and X). For example, where permitted by law, we may infer information about you from aggregated information we acquire from third parties. By way of example, this may include statistical information about people in certain geographical areas.

In this notice, we refer to all the methods by which you are in contact with us as “PMI U.S. touchpoints”. PMI U.S. touchpoints include both physical touchpoints (for example, retail outlets (these include both PMI U.S. owned and controlled retail outlets and third-party retail outlets), events (these include events arranged by PMI U.S. and third party events at which PMI U.S. is present), consumer contact centers,), and digital touchpoints (for example, apps, social media and websites).

What information about you do we collect?

The description of our data practices in this Notice covers the twelve (12) months prior to the date noted at the bottom of this page (the “Effective Date”).

We may collect various types of information about you, such as:

• information about your orders, including information necessary to fulfil them
• information necessary to provide warranty services
• information about the referrals you make
• information you give us in forms or surveys, and similar information that you give to third parties to be transferred to us
• information about your location, where you choose to share it with us (for example, on your mobile phone)
• information about your visits to our outlets or events (or outlets or events of others with whom we work)
• information you give us in communications (e.g. calls, chats, e-mails, SMS messages) you have with contact centers
• information about your preferences and interests (including information that we infer from other information, for example from statistical information)
• information necessary to verify your age such as identification documents or using AI to analyze your age based on your appearance
• information generated by your electronic device (for example, IQOS), if you choose to share it with us
• information about your experiences using our products and services
• statistical information about you (for example, statistical information about people in certain geographical areas)
• information that may relate to adverse events (such as any unwanted health effect when using one of our products) when you report them to us
• information about you that we acquire from third parties, where you agreed that the third party can share your data with others.

We may receive or collect your Personal Information directly from you or from your devices, from third parties, or from other individuals and businesses, as well as public sources of data.    

Generally, we process your Personal Information to provide you our products and services and as otherwise related to the operation of our business, including for one or more of the following "Business Purposes":   

• selling our products and services to you;  
• managing our interactions and transactions with you;
• marketing our products and tailoring our offering to you based on your preferences and purchase history;   
• fraud prevention and security;    
• maintaining products that you have purchased and debugging;
• performing market research;   
• Quality Assurance (see more detail below);   
• Processing Interactions and Transactions (see more detail below); and notice  
• performing research and development to improve our products.  

For what purposes do we use information about you?

Table 1: Personal Information Collection and Disclosure – By Processing Purpose

(See Table 2 for an explanation of the Categories of Information)

Table 2: Personal Information Collection and Disclosure – By Category of Information

(See Table 1 for a more detailed description of the Processing Purposes)

*Only to the extent such data is collected by a cookie or other Tracking Technology.

Information that we collect from third parties will generally consist of publicly available information (such as your preferences, interests and experiences), for example from public social media posts.

Do we use Artificial Intelligence (AI) and Machine Learning (ML)?

We may use artificial intelligence (AI) features to enhance your consumer experience. By way of example, the consumer portal may include a conversational chatbot supported by AI features that answers frequently asked questions and assists you with navigating the portal. The chatbot can help you search for products, manage your account, and provide support.

Additionally, we may use AI features, such as machine learning and statistical algorithms, to support the analysis of your behaviors and interactions with PMI U.S. touchpoints and conduct segmentation and profiling, as permitted by law. This helps us understand and enhance your experience, improve our products and services and tailor them to provide you a personalized experience. By way of example, these AI features analyze various data points, such as purchase history, browsing behavior, and demographic information, to determine, based on similarities between consumers’ patterns and behaviors, which segment you may belong to and allow our teams (with human oversight) to use this information to undertake personalized actions that may be most relevant to you. 

We may also use AI capabilities to assist us in preventing fraudulent actions. 

Other uses of AI features may be applied to assist with conducting technical diagnostics, including firmware updates, regarding your device when you approach us in one of our touchpoints.

Lastly, we may also use AI features in our interactions with you to support customer care services, improve their efficiency (including your satisfaction with these services) and conduct quality reviews of customer care interactions. This helps us to measure your customer experience, provide the better customer care support and identify areas for improvement. For example, by analyzing such interactions, we can better understand common issues and trends, leading to higher customer service and satisfaction.

Who do we disclose your Personal Information to, and for what purposes?

We may disclose information about you with:

• PMI affiliates;
• third parties who provide PMI affiliates or you with products or services ("Service Providers");
• PMI affiliates’ carefully selected business partners and advertisers (in areas connected with our products) so that they can contact you with offers that they think may interest you, in accordance with your preferences ("Business Partners");
• ("Cookie operators");
• ("Licensees"); and
• other third parties, where required or permitted by law.

We disclose information about you with others only in accordance with applicable laws. Thus, where the law requires your prior affirmative consent, we will ask for it before sharing your data.

Data obtained through the short-code program will not be shared with third parties for their own independent marketing or promotional purposes.

Where might information about you be sent?

As with any multinational organization, we transfer information globally to our affiliates and service providers.  Your Personal Information may therefore be transferred to other countries as part of our standard operations.  Whenever we transfer your Personal Information abroad, we will protect it appropriately and only transfer information in compliance with applicable data privacy laws. When data is transferred, we will put in place appropriate controls, such as requiring the receiving party to protect your Personal Information, delete it when it is no longer required and act in accordance with this privacy notice. 

How do we protect information about you?

We implement appropriate technical and organizational measures to protect personal information that we hold from unauthorized disclosure, use, alteration or destruction. Where appropriate, we use encryption and other technologies that can assist in securing the information you provide. We also require our service providers that process your Personal Information to comply with appropriate data privacy and security requirements as required by applicable law. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we use reasonable means to protect your information, we cannot guarantee its absolute security or confidentiality.

We may also require you to assist us to safeguard your Personal Information. For instance, if you create an account with us, you should use unique and strong passwords, not share your passwords with others, and take any other measures we may require under the terms of use applicable to the PMI products or services you use. 

If you suspect any misuse or loss of or unauthorized access to your personal information, please let us know immediately. Please raise your concern by contacting us (using these Details), in the first instance, and we will investigate the matter and update you on next steps.

How long will information about you be kept?

We will retain Personal Information about you for the period necessary to fulfill the purposes for which the Personal Information was collected in accordance with our internal data retention standards. If there are multiple purposes for which Personal Information was collected, we will retain it for the longer period. After that, subject to the legal obligations discussed in the next paragraph, we will delete it.

Typically, we retain data based on the criteria described in the table in the "find out more" section below. Where these periods conflict with legal obligations, for example, for tax and accounting purposes, to either retain the information for a set minimum period of time, or to delete it after a set maximum period of time, we apply the periods required for those legal obligations instead.

What rights and options do you have?

We provide you with the privacy rights described in this section pursuant to requirements of the applicable state law in which you reside, provided any such request meets the requirements for a Verifiable Consumer Request (defined below).

California residents may have additional rights.  For more information, see Section ("Additional Notice for California Residents").

 The consumer rights we accommodate are as follows:  

Right to Limit Sensitive Personal Information Processing

You may have the right to request that we limit our processing of sensitive personal information (please see below for instructions on how to do so). However, we may continue processing such personal information for the following processing purposes or any other permitted purposes under such U.S. state privacy laws:  

•  To perform our services at your request or at your direction;  
•  To prevent, detect, and investigate security incidents, fraudulent activity, illegal actions, etc.;  
•  For short term transient use, including, but not limited to, non-personalized advertising as part of your interaction with our products and services; and  
•  To maintain or service accounts, provide customer service, process or fulfill offers, orders and transactions, verify customer information, process payments, or provide similar services.  

Right to Know/Access

You may have the right to know and confirm that we are processing your personal information. You may also have the right to access what personal information we have collected about you. To the extent feasible, you may request for us to also provide a copy of your Personal Information that you previously provided in readily usable format to permit you to transfer your data to another entity. In accordance with applicable law, we may limit the number of these requests we process. 

You may request to confirm if we are processing your information and, if we are, to obtain a transportable copy of your information that we have collected and are maintaining, as required by applicable U.S. state privacy laws. If you wish to receive specific pieces of your information, we will attempt to honor such requests where reasonably possible. 

Do Not Sell/ Share/Target for Advertising

Various U.S. state privacy laws have broad and differing concepts of “selling” information for which an opt-out is required, with some states including information transfers for non-monetary consideration and other states only including information transfers for monetary consideration. California also has an opt-out from “sharing” for cross-context behavioral advertising purposes (use of information from different businesses or services to target advertisements across websites or apps). Other states have an opt-out of “Targeted Advertising” (defined differently, but also addressing tracking, profiling, and targeting of advertisements).

We may sell or share your information and/or use your information for targeted advertising, as these terms apply under U.S. state privacy laws. However, you may have the right to opt out of such disclosures.

We will not sell your information, share your information for cross-context behavioral advertising, or process your information for targeted advertising if you make a Do Not Sell/Share/Target opt-out request as follows:   

Opt-out for non-cookie information: If you want to limit our processing of your non-cookie information (e.g., your email address or web browsing activity) for Targeted Advertising, or opt-out of the Sale/Sharing of such information, you may make an opt-out request using the method described in “Find out more” under this section. 

Opt-out for cookie information: If you want to limit our processing of your cookie-related information for Targeted Advertising, or opt-out of the Sale/Sharing of such information, you may exercise an opt-out request by accessing our cookie preference center on the site that you’re visiting. This cookie management tool enables you to exercise such an opt-out request and enable certain cookie preferences on your device. Since your browser opt-out is designated by a cookie, if you clear or block cookies on your device, your preferences may no longer be effective, and you will need to enable them again via our cookie management tool.  

Opt-out preference signals ("OOPS", as they are known in California; also known as global privacy control or "GPC"): Some U.S. state privacy laws require businesses to process OOPS or GPC signals, which are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual's choice to opt-out of the Sale and Sharing of information. To use an OOPS/GPC, you can download a compatible internet browser or a plugin for your current internet browser and follow the settings to enable OOPS/GPC. We have configured the settings of our consent management platform to receive and process OOPS/GPC signals on our website, as explained in our cookie preference center on the site that you’re visiting. We process OOPS/GPC signals with respect to any sales and sharing of information with third parties that may occur via cookies or other Tracking Technologies, as discussed above and apply it to the specific browser on which you enable OOPS/GPC. We do not: (1) charge a fee for use of our service if you have enabled OOPS/GPC; (2) change your experience with any product or service if you use OOPS/GPC, although it may affect our ability to accurately track your activities for crediting your account with qualified rewards; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to the OOPS/GPC, except for indicating whether we recognize the signal. 

Your device and/or browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not want them to track your online activities. As of the Effective Date of this Notice, our online services do not support such “Do Not Track” requests. 

Right to Delete

Except to the extent we have retention rights under applicable law, you may request that we delete your information. Our retention rights include, without limitation:

•  To complete transactions and services that you have requested;
•  For security purposes;
•  For legitimate internal Business Purposes (e.g., maintaining business records);
•  To comply with law and to cooperate with law enforcement; and
•  To exercise or defend legal claims.

Also, if you elect to delete certain PMI U.S. Loyalty Program information, such as your loyalty account, you will lose certain PMI U.S. Loyalty Program benefits, which may include all the PMI U.S. points and rewards you have earned.

Correct Your Information

You may have the right to bring inaccuracies you find in the information that we maintain about you to our attention, and we will act upon such a report as required by applicable law.   

You can also make changes to your information in your online account in the account settings section of the account. That will not, however, necessarily change your information in other places where we may maintain it.  

To learn more about how we process your consumer privacy requests, please see the "find out more" section below.

Shine the Light

We provide California residents with the option to opt-out to sharing of “personal information,” as defined by California’s “Shine the Light” law, with third parties (other than with PMI affiliates) for such third parties own direct marketing purposes. California residents may exercise this opt-out, request information about our Shine the Light law compliance, and/or obtain a disclosure of third parties we have shared information with and the categories of information shared. California residents may make such a request, or inquire further about our compliance with this law, by using the address set forth in the Contact Us section above. You must put the statement “Shine the Light Request” in the body of your correspondence. In your request, please attest to the fact that you are a California resident and provide a current California address for your response. This right is different than, and in addition to, CCPA rights, and must be requested separately. We are only required to respond to one request per person each year. We are not required to respond to requests made by means other than through the provided e-mail address or mailing address (requests by phone, fax, chats, social media, etc.). We are not responsible for requests that are incomplete or not labeled and sent properly. 

Additional Notice to California Residents

This part of the Notice applies to consumers who reside in the state of California. 

For California residents, the term “Consumer” refers to both individuals as well as households and is not limited to individuals regarding household goods and services and provides protections in a business-to-business context (e.g., as a service provider or customer, or an employee of a service provider or customer).

Personal Information We Collect and for What Purposes

For a description of the Personal Information we collect, the purposes for which we use this information, and the recipients of this information (including in the last twelve (12) months), see “For what purposes do we use information about you?” of this Notice.  

Notice of Financial Incentive

For a description of how we use Personal Information as part of our loyalty programs and the financial incentives we may offer for collection and processing of your Personal Information, see “For what purposes do we use information about you?” of this Notice.

Your California Privacy Rights

Under California law, if you are a California consumer, you have rights regarding your Personal Information, including:

• The Right to Know what personal information we have collected, including the categories of Personal Information, the categories of sources from which this information is collected, the purposes for collecting, selling, or sharing this information, and the categories of third parties to whom we disclose this personal information.  You also have the right to know the specific pieces of Personal Information we have collected.
• The Right to Delete Personal Information that we have collected, subject to certain exceptions.
• The Right to Correct inaccurate Personal Information we maintain.
• The Right to Opt-out of the sale or sharing of Personal Information we collect.
• The Right to Limit the use of sensitive personal information we collect for certain purposes.
• The Right to Non-Discriminatory Treatment if you exercise your privacy rights (although we may charge a different price or rate, or offer a different level or quality of goods or service, to the extent that doing so is reasonably related to the value of the applicable Personal Information). 

For more information on these rights, see “What rights and options do you have?” of this Notice for more information.

You may exercise your rights by following the instructions under Find out more in our “What rights and options do you have?” section.  You can also use our “What rights and options do you have?” of this Notice for more information, including a description of how we verify requests, how opt-out preference signals are processed, and how authorized agents can make a request on your behalf.

We do not knowingly sell or share the information of California residents under the age of sixteen (16)[, unless we receive affirmative opt-in authorization from (i) the under-16 California resident if he or she is at least 13 years of age, or (ii) the parent or guardian of the California resident if he or she is less than 13 years of age]. If you think we may have Sold or Shared Personal Information of a California resident under 16 years of age[ without the appropriate affirmative opt-in authorization], please report that to us as described in the Contact Us section above. 

If you have questions, see “Who should you contact with questions?” of this Notice for contact information.

Who should you contact with questions?

If you have any questions, or wish to exercise any of your rights, you can do so by contacting the customer care team for the brand you interacted with using the contact details below.

If your state has a data protection authority, you have the right to contact it with any questions or concerns. 

Changes to this notice

We may update this notice (and any supplemental privacy notice), from time to time. Where the law requires it, we will notify you of the changes; further, where the law requires it, we will also obtain your consent to the changes.

Last reviewed: December 15th, 2025. 

Last updated/Effective Date: December 15th, 2025.

Previous versions: here