Privacy Statement and Your Privacy Rights
Last Updated Date: November 19, 2024
Altria’s family of companies, including Philip Morris USA, U.S. Smokeless Tobacco Company, John Middleton, Helix Innovations, and NJOY (together, "we," "our," or "us") respect your right to privacy. We value doing what is right and delivering for our consumers. When it comes to your privacy, that means providing you with the information you need to understand what personal information we collect and how we use and protect that personal information.
This Privacy Statement explains how we treat the personal information we collect on our corporate websites where this Privacy Statement appears.
We may update this Privacy Statement periodically in response to changing legal, technical, or business developments. The most current version is always available through our websites.
When we update this Privacy Statement, we will post the updated version and change the Last Updated Date above. If there are significant changes to our Privacy Statement that we believe affect your privacy rights, we will post a prominent notice on our websites and/or provide other notice as required by law. When required by applicable privacy laws, we will obtain your consent to changes before the revised Privacy Statement applies to you. Please regularly check this Privacy Statement to ensure you are aware of the updated version. Use of our websites following such changes constitutes your acceptance of the updated Privacy Statement then in effect.
Click on one of the links below to jump to the listed section:
- Your Personal Information We Collect and How We Use It
- How We Disclose Information About You
- Your Choices for How We Use Your Personal Information
- How We Protect Your Personal Information
- Links to Third-Party Websites
- How to Contact Us
- California Consumer Privacy Policy
Your Personal Information We Collect and How We Use It
When we refer to “personal information” (referred to as “personal data” under some laws) in this Privacy Statement, we mean any information that identifies you or can be used to identify you. Listed below are the ways we collect personal information about you, the types of information we collect and how we use it.
Information You Provide
If you choose to communicate with us about a product quality concern through one of the Product Quality Complaints & Questions functions available on our Contact Us page, we may ask for your name, email address, street address, zip code, phone number, and date of birth.
We use this information to reply to your message.
Information We Collect from Your Device
When you visit one of our corporate websites, we, and certain third parties collect information from your device such as the Internet Protocol (IP) address and type of the device you're using, web browser characteristics, language preferences, referring/exit pages, clickstream data, and the dates and times of visits to the website through the use of automated data collection tools, such as:
- Cookies
Cookies are small text files that are placed on the device that you are using when you visit a website. Cookies may be used to help a website recognize your device on future visits and enhance or improve your online experience. - Web Beacons
Web beacons (also known as pixel tags) are a type of technology placed on a website to track certain activity, such as whether a website page has been viewed.
We use these automated data collection tools and similar technologies to better understand how visitors use our corporate websites and for other purposes described in this Privacy Statement.
Information Collected by Online Analytics Services
We may collect your personal information from third-party web analytics services, such as those of Sitecore Analytics and Google Analytics. These providers use technologies such as cookies to help us analyze how visitors use our corporate websites.
The information collected through these means (including IP address) is disclosed to these analytics providers to help us evaluate use of our corporate websites and diagnose technical issues.
To learn about how Google Analytics collects and processes data and the Google Analytics Opt-out Browser Add-on, you can visit https://policies.google.com/technologies/partner-sites and https://support.google.com/analytics/answer/181881?hl=en.
To learn about how Sitecore analytics collects and processes data and the Sitecore Analytics Opt-Out Browser Add-on you can visit https://www.sitecore.com/legal/privacy-policy and https://www.sitecore.com/legal/privacy-policy#ContactUs.
How We Disclose Information About You
Your personal information that you provide to us on our corporate websites may be disclosed with the following categories of third parties:
- Our affiliates, including other subsidiaries of Altria Group, Inc. and Altria Client Services, or companies in which we have an economic interest
- Our third-party service providers that perform services on our behalf or on behalf of our affiliates or companies in which we have an economic interest
- When we contract with these third parties, we do not permit them to use or disclose your information for any purpose other than the work they are doing on our behalf or as required by law.
We may disclose your information to other third parties including law enforcement authorities or other government officials:
- if we are required to do so by law or legal process;
- if we believe there has been a violation of our website policies;
- when we believe disclosure is necessary or appropriate to prevent injury, harm, or financial loss; or
- in connection with an investigation of suspected or actual illegal activity.
In the event of a liquidation, reorganization, merger, consolidation, change of control, asset or stock acquisition/disposition, or other corporate combination, we may transfer information about you. Should such an event occur, we will use reasonable efforts to ensure the transferee uses your information in a manner consistent with this Privacy Statement.
We do not sell your personal information as the term “sale” is defined in US state privacy laws.
We do not disclose your information for the purposes of “online behavioral advertising” or “targeted advertising.”
Your Choices for How We Use Your Personal Information
You can make choices about how we use your personal information.
Your Browser Settings
Your browser may give you the ability to control cookies or other tracking tools. The Help portion of the toolbar on most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to delete existing cookies. Choices you make are browser and device specific. For more information on deleting or controlling cookies, visit www.aboutcookies.org.
Do Not Track Requests
Some browsers incorporate a “Do Not Track” (DNT) feature that signals to websites not to track you. Not all browsers offer a DNT option, and DNT signals are not all uniform. For this reason, we do not currently respond to DNT signals.
Other Choices Under Specific State Laws
Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia have certain additional rights under the privacy laws in these states. We honor these rights according to the requirements of the relevant state law. We may deny certain requests or fulfill a request only in part based on our legal rights and obligations.
Your Privacy Rights
- Access: You have the right to request that we confirm whether we have your personal data and, if we do, to provide you access to that data. If we processed your data using automated means, you can also request that we provide you a copy of that data in a portable and readily usable format that allows you to transfer it to another company.
- Deletion: You have the right to request that we delete certain personal data we have collected from or about you, subject to certain exceptions under the law. In the case of requests submitted online, if we are able to verify your identity (as described below), we may ask you to confirm that you would like your personal data deleted prior to deleting any of your personal data.
- Correction: You have the right to request that we correct inaccuracies in the personal data we have collected about you.
- Opt-Out of Sale or Targeted Advertising: You may have the right to opt-out of sale of your personal data or the processing of your personal data for targeted advertising. We do not sell personal data as that term “sale” is defined in US State privacy laws. We do not process personal data for targeted advertising.
How to Submit a Request
You may submit a request to exercise your privacy rights using one of the methods listed here:
- Online through our Privacy Portal
- By Phone at 1-800-787-6700
If you need assistance with your request, you can send an email to JMCPrivacyStatement@consumerconnectioncenter.com with “Consumer Privacy Rights Request” in the subject line. In the email, please include your first name, a phone number where we can reach you, the state you live in, and which privacy right you would like to exercise.
Using an Authorized Agent to Make Requests
Consumers in Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas may authorize another person acting on the consumer’s behalf to opt-out of the sale of the consumer’s personal data or the processing of the consumer’s personal data for targeted advertising. We do not sell personal data as that term “sale” is defined in US State privacy laws. We do not process personal data for targeted advertising.
Verifying Requests
To help protect your privacy and maintain security, we will take steps to verify your identity before fulfilling your request. We may require you to provide information such as your address, month/day of birth, birth year, or similar information.
Appealing Rejected Requests
For Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and Virginia - If your request is rejected, you will receive a notification with the details of reason for rejection and instructions about how to make an appeal. An appeal must be submitted within 15 days of receipt of the rejection notice. We will respond to you within 45 days of your appeal submission.
How We Protect Your Personal Information
We value keeping your information secure. We maintain technical, administrative, and physical safeguards for our corporate websites to protect against unauthorized disclosure, use, alteration, and destruction of the information you provide on these sites. We cannot guarantee that your information will be free from unauthorized access by third parties.
Links to Third-Party Websites
Our corporate websites contain links to other websites, some of which are operated by us and others of which are operated by third parties. We provide these links solely for your convenience and information. These sites may have their own privacy notices, which we strongly suggest you review if you visit any linked websites. We are not responsible for the content of these sites, any products or service that may be offered through these sites, or any other use of these sites.
How to Contact Us
If you have any questions or comments about this Privacy Statement, please send us an email at JMCPrivacyStatement@consumerconnectioncenter.com
You may also write to us at:
Altria Client Services
Corporate Communications
6601 West Broad Street
Richmond, VA 23230
California Consumer Privacy Policy
Last Updated Date: May 02, 2024
This California Consumer Privacy Policy (the “California Policy”) is provided under California law to supplement the information found elsewhere in this Privacy Statement. It includes additional disclosures about how we handle personal information collected on our corporate websites about California residents as required by the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”). This California Policy does not apply to personal information collected about job applicants, employees, or commercial contacts of Altria’s family of companies. For information regarding your California privacy rights as a job applicant, please click here to view our California Notice for Job Applicants.
Notice at Collection
This Notice at Collection of personal information describes the categories of personal information we collect, the business or commercial purpose for which we collect personal information, the sources of personal information we collect, and the categories of third parties to which we may disclose certain categories of your personal information. These disclosures relate to the personal information that we may have collected or used about you in the last 12 months.
Categories of Personal Information
The CCPA requires us to disclose the categories of personal information collected as they are listed in the CCPA.
- Identifiers: identifiers such as a real name, date of birth, postal address, email address, unique personal identifiers (such as a device identifier; cookies, beacons, pixel tags, and similar technology; customer number; or telephone number and other forms of persistent or probabilistic identifiers), online identifiers, IP address, and other similar identifiers
- Customer Records Data (Subject to Cal. Civ. Code § 1798.80): medical information
- Protected Classifications: characteristics of protected classifications under California or federal law, such as age and gender
- Commercial Information: commercial information, including products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies
- Sensory Information: audio
- Online Activity: internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications, or advertisements
We do not collect personal information that is deemed "sensitive" under the CCPA.
Purposes for Collection
We collect your personal information for the following business purposes specified in the CCPA:
- better understanding how visitors use our corporate websites;
- enhancing the online experience of our visitors;
- communicating with you when you reach out to us through our “Contact Us” features and to verify your identity;
- providing you information about our companies;
- performing services, including analytics services or other similar services;
- detecting security incidents;
- protecting against malicious, deceptive, fraudulent, or illegal activity and prosecuting those responsible for that activity; and
- debugging to identify and repair errors that impair existing intended functionality.
Sources of Personal Information
We may have obtained personal information about you from you and your device.
Categories of Third Parties
For the business purposes described under the section Purposes for Collection above, we may have disclosed to the following categories of third parties these categories of personal information:
Category of Third Party | Categories of Personal Information |
---|---|
Our affiliates such as those found at the following link: https://www.altria.com/about-altria/our-companies | Identifiers, Commercial Information, Sensory Information, and Online Activity |
Vendors, consultants and advisors who provide services on our behalf | Identifiers, Commercial Information, Sensory Information, and Online Activity |
Data analytics providers | Identifiers, Commercial Information, Sensory Information, and Online Activity |
Acquiring/merging entity, in the event of a sale or transfer of all or a portion of our business or assets | Identifiers |
Government entities and investigatory bodies, including regulatory agencies and law enforcement | Identifiers; and Online Activity |
We may disclose personal information for other reasons that we may describe to you from time to time or as permitted by law.
Retention of Personal Information
We will retain your personal information for the time period reasonably necessary to achieve the purposes described in our Privacy Statement, this California Policy, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law.
“Sale” or “Sharing” Under California Privacy Law
As defined by California law, we do not “sell” your personal information nor do we “share” your personal information for cross-context behavioral advertising purposes.
We do not knowingly collect personally identifiable information from anyone under 21 years of age. Accordingly, we do not “sell” or “share” the personal information of individuals under 21 years of age.
California Consumer Privacy Rights
As a California resident, you have certain choices regarding your personal information, as described below. We may deny certain requests or fulfill a request only in part based on our legal rights and obligations.
Rights Under the CCPA
- Access: You have the right to request (twice in a 12-month period) that we disclose to you the personal information we have collected, used, disclosed, and sold about you.
- Deletion: You have the right to request that we delete certain personal information we have collected from you, subject to certain exceptions under the law. In the case of requests submitted online, if we are able to verify your identity (as described below), we may ask you to confirm that you would like your personal information deleted prior to deleting any of your personal information.
- Correction: You have the right to request that we correct inaccuracies in the personal information we have collected about you.
- Opt-Out of Sale or Sharing: You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising. We do not sell your personal information or share your personal information for cross-context behavioral advertising.
- Non-discrimination: We will not discriminate against you if you exercise any of your rights under the CCPA.
How to Submit a CCPA Request
You may submit a request to exercise your privacy rights using one of the methods listed here:
- Online through our Privacy Portal
- By Phone at 1-800-787-6700
If you need assistance with your request, you can send an email to JMCPrivacyStatement@consumerconnectioncenter.com with "CCPA Consumer Privacy Rights Request" in the subject line. In the email, please include your first name, a phone number where we can reach you, and which privacy right you would like to exercise.
How to Submit a CCPA Request as an Authorized Agent
You may submit a request as an authorized agent on behalf of a consumer using one of the methods listed here:
- By Email at JMCPrivacyStatement@consumerconnectioncenter.com with "CCPA Authorized Agent Request" in the subject line. In the email, please include your first name and a phone number where we can reach you.
- By Phone at 1-800-787-6700
Verifying Access, Deletion, and Correction Requests for CCPA
To help protect your privacy and maintain security, we will take steps to verify your identity before fulfilling your request.
- We may require you to provide certain information to verify your identity, such as your address, month/day of birth, birth year, or similar information.
- In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.