Consent Information in Brief

You give your explicit and voluntary consent to the Company to contact you with strictly non-promotional communications relating to the Products you use or have registered, as well as to use your contact details to reach out to you for the purpose of gathering feedback on your experience with the products and/or services you have purchased (including, for example, questions about your overall satisfaction, likelihood to recommend the store to others, and any general comments you wish to share). These communications may include, without limitation, legitimate commercial information, information necessary for the proper, safe, and intended use of the Products, product onboarding and care guidance, customer support, technical or service-related updates, safety information, and feedback requests, through one or more communication channels including email, SMS, phone, and/or other digital channels used by the Company for customer care and feedback communications as described in the Privacy Notice.. You understand that these communications do not include advertising, marketing, promotions, commercial offers, or personalised marketing content, and will be limited to what is permitted under applicable law and the Company’s policies. For these purposes, the Company will process your personal data (such as identification and contact details, confirmation of adulthood, product registration details, and your interactions with the Company’s channels) in accordance the present terms of Product and Care Communication and the Privacy Notice. You acknowledge that your consent is freely given, not required to purchase Products or maintain your account, and that you may withdraw your consent at any time, without cost, via your account settings or by contacting the Company, as described in the Privacy Notice.

Further information and details on how your personal data are processed, including how to withdraw consent, are set out below and in the Privacy Notice.

FULL INFORMATION ON YOUR CONSENT TO RECEIVE PRODUCT AND CARE COMMUNICATION

By this statement of your consent, you give us your express consent to receive product and care communication from IQOS. This communication is only addressed to adult consumers registered in the IQOS Adult Consumer Database based on the General Terms and Conditions after they have solemnly declared that they are adult smokers, also depending on the manner of their registration in our Database and, in accordance with the Procedures, Principles and Practices of Philip Morris International (PMI) as applicable at times.

Information sections

Who is the Data Controller?
What is the Purpose of these Terms and why you give us your consent?
Is it possible to withdraw your consent at any time?
What kind of personal data do we process, and which are their sources?
For how long do we keep your personal data?
Categories of data recipients
Security of processing
What are your rights regarding the processing of your personal data?
Amendments to the privacy policy – Suspension or modification of the Terms

1. Who is the Data Controller?

The Company is the Controller of your personal data

2. What is the Purpose of these Terms and why you give us your consent?

2.1 Purpose of these Terms

The purpose of these Terms is to enable the Company to provide you with strictly non‑promotional Product and Care communication. This communication includes:

information on the proper, safe and intended use of the Products and available consumable options (flavors, price)
onboarding guidance following a purchase or other information based on Company’s programs you may participate in
warranty‑related information and updates
customer service assistance regarding any issue you report
responses to your requests when you contact our customer care team.
information regarding the Point of Sales availability (IQOS store finder, Partner stores, Coaches/ book an appointment)
asking for your feedback on your use of the Products.

All communication is strictly limited to Product and Care information. It does not include advertising, promotional content, offers, or any form of profile‑based or targeted communication.

The communication will be sent to the contact details you provided upon your registration (e.g. email) as well as when you contact our partner either through our call center or when you visit an IQOS store or when you contact our third partners.

2.2 Legal Basis

The legal basis for processing is your free consent to receive the above communication under these Terms.

Explicit legal identification of adulthood control: Prerequisite for our communication with you in the context of these Terms is that you solemnly declare that you are an adult at the time of your registration in our Database, that you are registered in our Database having been age verified through the processes and /or tools used from time to time by the Company, and that you give your consent for communication. The form of such statement differs depending on your registration method, and in accordance with Philip Morris International (PMI) Procedures, Principles and Practices. Our Company reserves the right to take any reasonable and probable measures to confirm that you are an adult, at any time and in a technically and organizationally feasible manner.

3. Is it possible to withdraw your consent at any time?

You may withdraw your consent at any time. In such case, you will stop receiving communication from us, and your data will no longer be processed for the purposes of communications (unless retained for another lawful purpose, such as compliance with legal obligations).

You may withdraw your consent by one of the following ways

logging into your account at IQOS.com
selecting the unsubscribe option included in digital communications
declaring your withdrawal in any IQOS store
calling the Company at +356 21444494
sending an email to contact.mt@iqos.com

Withdrawal does not affect your participation in any other Company program for which you have been asked to provide consent separately.

4. What kind of personal data do we process, and which are their sources?

The Company processes only the personal data necessary for the provision of Product and Care communication. These include:

your general identification and contact information (name, email, etc.);
proof‑of‑age information for adulthood verification;
purchase information where required for warranty, onboarding or troubleshooting;
information you voluntarily provide when contacting customer care for assistance;
Information concerning your satisfaction with the Company or with its partners, its products, its services and the service provided to you, issues you may face, which are collected when we provide customer care services and/or when you voluntarily answer questionnaires addressed to you.

The Company does not process data for marketing, promotional purposes, behavioral analysis, or profiling. No data is combined to predict preferences or tailor communications.

The data is collected:

directly from you during registration
from purchases relevant to warranty or device support
during customer care interactions initiated by you

5. How long do we keep your personal data?

The information we collect from you is retained until your consent is withdrawn in accordance with the provisions of Article 3 above.

In any case, your personal data are automatically deleted from our Database, based on the procedures observed by PMI in the following case: there has been no interaction (device activity, login to iqos.com, etc) with us (by any channel or medium) for a period of more than 60 months from the event of registration or from the last activity. With each interaction or purchase, the above timeframe is renewed.

You may of course exercise at any time the right of erasure under Article 7 below, or/and request to unsubscribe entirely from our Adult Consumer Database in accordance with the provisions of the General Terms and Conditions.

In any case, for more information about the general processing of your data by our Company, you may visit our General Privacy Policy that you accepted upon your registration in our Database.

6. Categories of data recipients

The Company cooperates with third parties who act as Data Processors and provide strictly necessary services such as:

call center support
electronic communication platforms
authorized partners assisting with warranty and customer care services

These parties receive only the data required for the lawful execution of their services.

7. Security of processing

The data you submit to the Company are handled exclusively by specifically authorized Company personnel, under the direction of the Company, by authorized third-party associates and only on the order of the Company, as well as by the aforementioned recipients, where necessary. In carrying out the processing, the Company selects people or associates with relevant professional qualifications, offering adequate guarantees in terms of technical knowledge and personal integrity with regard to keeping confidentiality.

Express legal notice of the obligation of personal participation in all programs of our Company: You are required to keep secure and not to disclose your Account details/password at iqos.com, and in particular to safeguard unauthorized access to them by third parties and/or not to use the features and privileges provided to you within the context of your registration at the Adult Consumer Database. Our Company will consider reasonably and in good faith that any access or use of your Account or action related to the utilization of your privileges and to your participation in our Company's programs was carried out by you provided that it is not notified in advance in writing (and/or by e-mail) of any leakage of your password or of unauthorized use thereof or use of your Devices by third parties or anything else related to your non-individual use or access to the above, for which you bear full responsibility and liability because all our Programs are individual, non-transferable and are subject to nationality control of each related participant.

8. What are your rights regarding the processing of your personal data?

Rights	Pursuant to the applicable legislation, as the case may be and where applicable, you have the following rights: information, access, rectification, restriction of processing, erasure, portability, objection, as well as the right not to be subject to a decision based on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (and/or, in such case, to request human intervention, express your point of view and contest the decision made). In any event, you have the right to withdraw your consent at any time, in accordance with the provisions of article 2.
How to exercise your rights	In order to exercise your rights, as well as for any matter concerning this privacy policy and the processing of your personal data, you can contact us by: a) calling the telephone numbers +356 21444494, from mobile phones, from Monday to Friday, 09:00-17:00 b) e-mail to contact.mt@iqos.com We take the confidentiality of all files containing personal data seriously and we reserve the right to request proof of identity from you, if you submit a request to exercise your rights concerning the said files. In addition, you can log in to your Account at iqos.com, after activating it, in order to view and update your information, your consent options, as well as our contact details for the exercise of your rights.
Company response time to your requests and relevant procedure	Subject to the immediate withdrawal of consent, in relation to all other rights, we aim to respond to any valid requests within no more than thirty (30) days after receiving them, unless it is a particularly complex request or you have submitted several requests. We will notify you, if we determine that a period exceeding thirty (30) days will be required for our response, for the reasons stated above. We may ask you whether you could explain exactly what you wish to receive or what your concern is. This will help us to process your request faster. In any event, you should provide specific and true information and/or facts, in order to allow us to respond and/or accurately satisfy your request, otherwise we disclaim any liability for any errors that are beyond our control. In addition, our Company is entitled to reject requests that are unfounded or excessive or abusive or in bad faith and, in general, unlawful, in accordance with the provisions of the law.
Right to lodge a complaint with the Data Protection Authority	In any case, if you believe that the protection of your personal data is violated in any way, you have the right to lodge a complaint with the Information and Data Protection Commissioner, using the following contact details: Website: https://idpc.org.mt/contact/ , Postal address: Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549 , Call Center: +356 2328 7100 , E-mail: idpc.info@idpc.org.mt

You can find more details about your rights in our General Privacy Policy.

9. Amendments to this policy – Suspension or modification of the present Terms

We reserve the right to modify the present Terms and/or this Policy, for example, in order to comply with new requirements imposed by applicable laws, directives or technical requirements or in case we revise our procedures or practices. We will notify you of any revision, either personally or by publishing it on the website https://www.iqos.com/mt. We also encourage you to regularly check this page in case our attempts to notify you do not reach you.

We also reserve the right to terminate these Terms, in whole or in part, at any time and/or expel any member from our Programs, where there are indications or where it is discovered that said member has committed, in breach of the law or the contract, any act or omission related to these Terms, the Program(s), our products, the company, upon relevant notice sent to the contact details provided to us by the member. Otherwise, our General Privacy Policy applies, to the extent that it does not conflict with this policy, as the more specific policy for these terms.