20 After 4 Smokeshop (“20 After 4,” “we,” “us,” or “our”) operates a retail smoke shop and delivery service at 2839 E Michigan Ave, Ypsilanti, MI 48198, and the website https://20after4smokeshop.com (the “Site”). This Privacy Policy explains how we collect, use, share, and protect personal information in compliance with applicable U.S. and Michigan privacy laws, including the Michigan Identity Theft Protection Act (MCL 445.61 et seq.) and the federal PACT Act.

We collect the following categories of information:

• Information you provide: name, date of birth (for age verification), phone, email, delivery address, and message content when you contact us.
• Identity verification: our delivery partners and in-store staff scan or visually verify a government-issued photo ID at the point of sale to confirm you are 21+. We do not retain copies of your ID.
• Order & transaction data: products purchased, order totals, and timestamps. Payment card details are processed by our payment processors and delivery partners — we never see or store full card numbers.
• Automatically collected: IP address, browser type, device type, referring URL, pages viewed, and approximate location. We use first-party analytics and minimal cookies to operate and improve the Site.

We use information to:

• verify you are 21 or older and authorized to purchase age-restricted products;
• process, fulfill, and deliver your orders;
• respond to inquiries submitted through our contact form, phone, or email;
• operate, secure, and improve the Site and our services;
• comply with legal obligations under federal and Michigan law (including PACT Act recordkeeping); and
• detect and prevent fraud, abuse, and unauthorized access.

We do not sell your personal information. We share limited information only with:

• Delivery and payment partners (e.g., Saucey, payment processors) to fulfill your order;
• Service providers that host the Site, send transactional email, or provide analytics, under contracts requiring confidentiality;
• Government authorities when required by law, subpoena, or lawful request, including PACT Act reporting to state tax officials; and
• A successor in the event of a merger, acquisition, or sale of business assets, subject to this Policy.

The Site uses essential cookies and local storage (for example, to remember that you confirmed you are 21+). We may also use privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings; disabling them may affect Site functionality. We do not knowingly respond to “Do Not Track” signals, but we honor opt-out requests submitted via email.

We retain personal information only as long as necessary to fulfill the purposes described in this Policy and to comply with our legal obligations (for example, PACT Act records are retained for a minimum of four years). Aggregated or de-identified data may be retained longer for analytics.

We use commercially reasonable physical, technical, and administrative safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. The Site is served over HTTPS. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

Subject to applicable law, you may:

• request access to the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information (subject to legal retention obligations);
• opt out of marketing email at any time by replying “unsubscribe”; and
• file a complaint with the Michigan Attorney General’s Consumer Protection Division.

To exercise any of these rights, email us at twentyafterfour@yahoo.com. We may need to verify your identity before fulfilling a request.

Our Site and services are strictly for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and we comply with the Children’s Online Privacy Protection Act (COPPA). If we learn we have collected information from a minor, we will delete it.

The Site may link to third-party websites or services (Saucey, Google Maps, Instagram, etc.). Their privacy practices are governed by their own policies, and we are not responsible for them. Please review their policies before providing personal information.

Although we are a Michigan business, residents of states with comprehensive privacy laws (CA, VA, CO, CT, UT, and others) may have additional rights, including the right to know, delete, correct, and opt out of certain processing. We do not sell personal information or use it for cross-context behavioral advertising. To exercise applicable rights, contact us at the email above.

We may update this Privacy Policy periodically. The “Effective Date” at the top reflects the latest revision. Material changes will be highlighted on the Site. Continued use of the Site or our services after the Effective Date constitutes acceptance.

Questions, requests, or complaints about this Policy?

• 20 After 4 Smokeshop
• 2839 E Michigan Ave, Ypsilanti, MI 48198
• Phone: (734) 544-1394
• Email: twentyafterfour@yahoo.com