Privacy Policy
Effective Date: 12 November 2025
Last Updated: 12 November 2025
1. Who We Are
This Privacy Policy explains how The Canna Society ("we", "our", "us") collects and uses personal information.
- Company Name: The Canna Society
- Business Address: Available on request or by email
- Website: https://www.thecannasociety.com
- Email: Contact@thecannasociety.com
We are a company established in the United States. While U.S. federal privacy law does not currently mandate a single standard for personal data, we are committed to respecting the rights of individuals in all jurisdictions where we operate.
Accordingly, for users located in:
- The United Kingdom, we comply with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).
- South Africa, we comply with the Protection of Personal Information Act (POPIA).
2. Scope of This Policy
This Policy applies when you:
- browse or interact with our website;
- contact us or subscribe to updates; or
- use features of our site that rely on cookies or analytics.
We do not collect or process personal, payment, or medical data for orders or prescriptions. These are handled by the Dr Green DApp, which has its own privacy policy.
3. The Dr Green DApp Platform
When you make a purchase or complete an eligibility questionnaire, you will be redirected to Dr Green DApp, operated independently by Dr Green.
Dr Green collects and controls any personal, medical, or payment data and is solely responsible for compliance with applicable data protection laws.
You will see a notice explaining you are leaving our website before redirection, and that Dr Green's Privacy Policy applies.
4. Information We Collect
We may collect limited personal data directly from you, including:
| Category | Examples | Source |
|---|---|---|
| Contact Details | Name, email address, phone number | When you contact us or subscribe |
| Website & Technical | IP address, browser type, pages visited, device type | Cookies and analytics tools |
| Marketing Preferences | Newsletter opt-in/out status | Direct from you |
| General Correspondence | Any information you provide voluntarily | Via contact forms or email |
We do not collect or store payment or medical data.
5. How We Use Your Data
We use your data to:
- respond to enquiries;
- send newsletters or updates (with consent);
- improve our website and user experience;
- maintain website security and detect abuse;
- comply with applicable laws and regulations.
We do not use your data for automated decision-making that produces legal effects.
6. Lawful Basis for Processing
We rely on one or more of the following legal grounds:
- Consent – for marketing and non-essential cookies.
- Contractual necessity – to provide services or respond to queries.
- Legitimate interests – for website functionality and analytics.
- Legal obligation – for compliance with laws or regulators.
You can withdraw consent anytime by emailing Contact@thecannasociety.com.
7. Cookies and Analytics
We use cookies and similar technologies to:
- remember user preferences;
- analyse traffic and site performance;
- ensure website security.
Non-essential cookies are only used with your consent. You can manage cookies via our cookie banner or browser settings.
8. Data Sharing
We may share limited data with:
- IT and website service providers (e.g., analytics, hosting);
- regulators if required by law;
- legal, financial, or compliance advisors.
We do not sell or rent your personal information to any third parties.
9. International Transfers
Your data may be processed or stored in the United States, or transferred to third-party service providers in other jurisdictions, including the UK and South Africa.
Where we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs);
- Data processing agreements as required under UK GDPR and POPIA.
10. Data Retention
We retain your personal data only as long as necessary for:
- the purpose it was collected; or
- legal or regulatory requirements.
Once no longer needed, your data is securely deleted or anonymised.
11. Your Rights
South African Residents (POPIA)
You have the right to:
- be informed about how your data is used;
- request access or corrections to your data;
- object to processing or request deletion;
- lodge a complaint with the Information Regulator of South Africa: https://www.justice.gov.za/inforeg/
UK Residents (UK GDPR)
You have the right to:
- access, correct, or delete your personal data;
- restrict or object to data processing;
- request data portability;
- lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/
To exercise your rights, contact: Contact@thecannasociety.com
12. Data Security
We implement appropriate organisational and technical measures, including:
- encrypted storage and secure hosting;
- access controls and staff training;
- regular system and vendor security reviews.
No online service is completely risk-free, but we take all reasonable steps to protect your data.
13. Third-Party Links
Our site may link to third-party services, including the Dr Green DApp.
Once you leave our site, their policies apply. We are not responsible for their content or privacy practices. Please review their privacy notices before providing any data.
14. Policy Updates
We may update this Privacy Policy occasionally.
Any major updates will be posted on this page with a revised "Last Updated" date.
15. Complaints
If you believe we are not handling your data lawfully, you can lodge a complaint:
- South Africa: Information Regulator SA
- United Kingdom: Information Commissioner's Office (ICO)
We encourage you to contact us first at Contact@thecannasociety.com so we can resolve any concerns.
16. Contact Us
The Canna Society
Business Address: Available on request or by email
Email: Contact@thecannasociety.com