Privacy Policy

At HedoWeedo ("HedoWeedo," "we," "us," or "our"), we are committed to protecting your privacy and the confidentiality of your personal and health-related information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, mobile application, or use our in-store and delivery services (collectively, the "Services").

This Privacy Policy is intended to comply with applicable Jamaican data protection laws, including the Data Protection Act, 2020 of Jamaica, and international privacy best practices. Please read this policy carefully to understand our practices regarding your information.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account, place an order, book a service, or contact us, we may collect the following personal information:

• Identity: Full name, date of birth, and government-issued identification details for age and identity verification;
• Contact: Email address, phone number, and delivery address;
• Account: Username, password (encrypted), and account preferences;
• Payment: Billing address and payment method information, processed securely by our payment providers;
• Medical: Medical cannabis patient identification number or recommendation, if applicable;
• Communications: Messages, inquiries, and feedback you send to us;
• Booking: Event details, guest preferences, and budtender appointment information.

1.2 Information We Collect Automatically

When you visit our Site or use our Services, we and our third-party partners may automatically collect certain technical and usage information:

• Device and Browser: IP address, browser type and version, device type, operating system, and screen resolution;
• Usage Data: Pages visited, time spent on pages, click paths, referring URLs, and timestamps;
• Cookies and Pixels: Session cookies, persistent cookies, web beacons, and similar tracking technologies;
• Location: Approximate location derived from IP address for delivery eligibility and compliance.

1.3 Information from Third Parties

We may receive information about you from third-party services such as identity and age verification providers, payment processors, delivery partners, and marketing platforms. This information is used to verify your identity, fulfill orders, and improve our Services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Age and Identity Verification: To confirm that you are of legal age and eligible to purchase cannabis products under Jamaican law;
• Order Fulfillment: To process, prepare, and deliver your orders, including verifying your identity at pickup or delivery;
• Account Management: To create and manage your account, communicate with you about your account, and provide customer support;
• Customer Service: To respond to your inquiries, resolve disputes, and provide assistance;
• Rewards Program: To administer the HedoWeedo Rewards program, track points, and deliver rewards;
• Marketing and Promotions: To send you news, promotions, and offers, subject to your consent and applicable law, with the ability to opt out at any time;
• Bookings and Events: To manage budtender appointments and event bookings;
• Compliance: To comply with our legal and regulatory obligations, including Cannabis Licensing Authority requirements, tax reporting, and anti-fraud measures;
• Analytics and Improvement: To analyze usage trends, measure the effectiveness of our campaigns, and improve our Site, products, and Services;
• Security: To protect against fraud, unauthorized access, and other security threats.

3. Legal Basis for Processing

Under the Data Protection Act, 2020 of Jamaica, we process your personal information based on one or more of the following lawful bases:

• Consent: You have given us consent to process your information for specific purposes, such as marketing communications;
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you, such as processing and delivering your orders;
• Legal Obligation: We are required by law to process certain information, such as age verification and tax records;
• Legitimate Interests: We have a legitimate business interest in processing your information, such as fraud prevention and service improvement, provided your rights do not override those interests;
• Vital Interests: Processing is necessary to protect the vital interests of you or another person, such as in a medical emergency.

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

• Essential Cookies: Required for the basic functionality of our Site, such as maintaining your session and processing transactions. These cannot be disabled;
• Analytics Cookies: Allow us to understand how visitors use our Site so we can improve performance and user experience;
• Functional Cookies: Remember your preferences, such as language and region, to provide a more personalized experience;
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our Site. Where required by law, we will seek your consent before placing non-essential cookies on your device.

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties that perform services on our behalf, such as payment processors, delivery companies, age verification services, IT and hosting providers, and marketing partners. These providers are contractually bound to protect your information;
• Regulatory Authorities: Government agencies, the Cannabis Licensing Authority, or law enforcement when required by law or to comply with regulatory obligations;
• Business Partners: Partners with whom we offer co-branded services or promotions, subject to your consent;
• Corporate Transactions: In connection with a merger, acquisition, sale of assets, or other business transfer, we may transfer your information to the acquiring entity;
• Legal Compliance: To protect our rights, safety, or property, or that of others, and to respond to legal process.

6. Data Retention

We retain your personal information for as long as your account is active or as necessary to fulfill the purposes described in this Privacy Policy. We also retain information as required by Jamaican law, including records related to cannabis sales, age verification, and financial transactions. When information is no longer needed, we will delete it or anonymize it so it can no longer be associated with you.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of sensitive data, secure payment processing, restricted access to personal information on a need-to-know basis, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information. In the event of a data breach, we will notify you and the relevant authorities as required by applicable law.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you;
• Correction: Request that we correct inaccurate or incomplete information;
• Deletion: Request that we delete your personal information, subject to legal retention requirements;
• Restriction: Request that we limit the processing of your information in certain circumstances;
• Data Portability: Request a machine-readable copy of your personal information to transfer to another provider;
• Objection: Object to the processing of your information for direct marketing or other purposes based on legitimate interests;
• Withdrawal of Consent: Withdraw your consent to processing that is based on consent at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within the timeframes required by applicable law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Jamaica, including countries that may have different data protection laws. When we transfer your information internationally, we take steps to ensure it is protected in accordance with this Privacy Policy and applicable law, including through standard contractual clauses or other transfer mechanisms.

10. Special Considerations for Cannabis Purchases

Due to the regulated nature of cannabis in Jamaica, we are required to collect and retain certain information about your purchases, including age verification details, order history, and medical cannabis patient identification, where applicable. This information is maintained in compliance with the requirements of the Cannabis Licensing Authority and other regulatory bodies. We do not share purchase history with third parties except as required by law or as necessary to fulfill your order.

11. Children's Privacy

Our Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a person under eighteen, we will take steps to delete that information. If you believe we have collected information from a child, please contact us.

12. Marketing Communications

With your consent, we may send you promotional emails, SMS messages, or other marketing communications about our products, events, and special offers. You can opt out of receiving marketing communications at any time by following the unsubscribe link in our emails, replying "STOP" to SMS messages, or contacting us directly.

13. Social Media and Third-Party Platforms

Our Site may include features that integrate with social media platforms such as Instagram and Facebook. When you interact with these features, the social media platform may collect information about you, subject to its own privacy policy. We encourage you to review the privacy policies of any third-party platforms you use.

14. Analytics and Tracking

We use analytics tools, such as Google Analytics, to collect and analyze usage data about our Site. These tools may use cookies and similar technologies to gather information about your visits. The information collected is aggregated and used to improve our Site. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on our Site with a revised "Last updated" date. We encourage you to review this policy periodically. If we make material changes, we will provide notice through our Site or via email, where appropriate.

16. Your Right to Lodge a Complaint

If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable law, you have the right to lodge a complaint with the Office of the Information Commissioner in Jamaica or the data protection authority in your jurisdiction. We encourage you to contact us first so we can attempt to resolve your concern.

17. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

• HedoWeedo Dispensary
• Attn: Data Protection Officer
• Negril, Westmoreland, Jamaica
• Email: privacy@hedoweedo.com
• Phone: +1 (876) 555-0199