1. Introduction   
Welcome to the Canndr® family of sites and software! This Canndr® Privacy Policy (“Privacy Policy”) describes how we collect, use, and share information about you when you access or use: 

a) (i) Canndr®’s websites, portals, applications (including mobile applications), channels, and software (including as embedded on sites owned by third parties), and (ii) Canndr®’s social media pages and channels (collectively, the “Websites”); and 

b) any services, features, media, functions, content, tools, products, and links contained in or offered via the Websites (collectively, the “Services”). 

We may also post other privacy policies or statements on our Websites or Services where applicable. To the extent those other privacy policies or statements conflict with this Privacy Policy, this Privacy Policy shall control to the extent of the conflict with regard to the Websites or Services.  
From time to time, we may make changes to this Privacy Policy. When we make such changes, we will do our best to notify you by email, push notification or in-app notification, or a prominent notice on our Websites.  
Capitalized terms not defined herein shall have the meanings defined in the Canndr® Terms of Use accessible athttps://canndr.com/terms-of-use/ 

2. Information We Collect  
We may collect certain types of information to better provide our Websites and Services: 

1) Information You Provide: We collect information you provide us, such as: 

Health/Special Category Data. Canndr may collect and process your health-related information, including medical cannabis recommendations, such as recommending doctor’s name and license number, contact information, verification methodology, and verification number (“Medical Cannabis Information”). This Medical Cannabis Information is for the purpose of providing tailored services and content related to your health needs. By using our services, you explicitly consent to the collection and processing of this special category data. You have the right to withdraw this consent at any time by contacting us through the methods provided in this privacy policy (See Section 10 at the bottom of this Privacy Policy). 

Account Information: If you create an account on any of our Websites or Services (a “User Account”), you may submit personal information, such as your full name, e-mail address, home address, phone number, zip or postal code, gender, a profile bio, and birth date. Some users may also submit their means of age verification (e.g., driver’s license) 


Public Content: The information that you contribute or post on our Websites or Services (“Public Content”) is intended for public consumption, including your reviews, tips, photos, videos, check-ins, comments, likes, favorites, posts, events, bookmarks, friends, lists, compliments, and User Account name and profile photo. 

2) Information Created When You Use Our Websites and Services: 

Location Information: We collect information about your geographic location with your consent. We may collect this information from your mobile device if you have enabled such functionality. We may also collect your approximate location or IP address from your browser using cookies or other web technologies and infer your location from other information we have collected. 

Other Browsing and Device Information: We automatically collect information about you when you use the Websites and Services. The information we automatically collect includes log data and device information including browser type, domain name, the website that led you to our Websites, the website to which you go after leaving our Websites, the dates and times you access our Websites, device ID, and browsing activities within our Websites or Services (e.g., links you click, searches you run, the date and time of your visit, the amount of time you spend on specific pages, the businesses you call, e-mail, or chat using our Websites or Services). We may collect certain information with the help of cookies and other web technologies. 

Communications: From time to time, you may contact Canndr™  customer support or otherwise contact us; or exchange messages with other Canndr™  users, Retailers or other brands listed on our Websites. Messages that you exchange through our Websites or Services are saved. If you send or receive messages through our Websites or Services via SMS text message, in addition to saving the messages, we may log phone numbers, phone carriers, and the date and time that the messages were processed. We may also store the information that you provide when you communicate with us, including phone calls, letters, e-mails, and other electronic messages, or in person. 

3) Information Created from Other Sources 

Third Party Service Providers: Some of our third-party service providers will collect information from you directly and share some of that information with us. Other third-party service providers will collect information about you via cookies or other web technologies and share that information with us.  


3. How We Use Your Information   
We may use your information to: 

Process your request for Services, including but not limited to products, or information; 

Provide you with customer support; 

Provide you with personalized offers; 

Promote the Websites and Services; 

Improve, upgrade, and enhance our Websites and Services; 

Analyze system administration, debug and identify repairs, and back up our systems to allow for disaster recovery; 

Detect security incidents and protect, investigate, prevent, and potentially take action against possible deceptive, fraudulent, unauthorized, malicious, or illegal activities; 

Carry out any specific purposes for which we have obtained your consent; 

Comply with applicable legal requirements and protect our legal rights and the legal rights of our users and other third parties, including enforcing our Terms of Use, this Privacy Policy, and any other policies governing your access to or use of any of our Websites or Services;   

Engage in other legitimate business activities as permitted by law.  

4. How We Share Your Information 

At Canndr™ , we value your privacy and generally do not share your personal information, except in the following limited circumstances: 

1) We may share your personal information as directed by you, such as with third parties like Retailers. Similarly, if you participate in one of our campaigns, such as a referral campaign, we may share your information as stated in that campaign. 

2) We may share your information with service providers who perform services on our behalf. For example, we may share your information to provide some of the features and services that are available through our Websites or Services, such as communications and hosting services, network security, technical and customer support, tracking and reporting functions, quality assurance testing, marketing and promotional features, identification verification, product listings, and brand management. To the extent that you have the legal right to limit our sharing of your information, for example, if you choose not to receive personalized marketing, you may exercise your rights as specified in our Managing and Deleting Your Information. 

3) In the event that Canndr® is or may be acquired by or merged with another company or involved in any other business deal (or negotiation of a business deal) involving sale or transfer of all or part of our business or assets, we may transfer or assign your information as part of or in connection with the transaction and such acquirer or merged entity may thereafter utilize your personal information in accordance with this Privacy Policy. Finally, in the event of insolvency, bankruptcy, or receivership, information may be transferred as a business asset. 

4) We may share user information in the aggregate with third parties, including with the general public in our marketing materials and in our non-public discussions with third parties such as advertisers, brand managers, and content distributors. For example, we may disclose the number of users that have been exposed to or clicked on advertisements or certain products available in the Websites or Services, or the general characteristics of such users. 

5) We may disclose information from or about you to government officials, law enforcement or private parties if we believe that such disclosure: (i) is reasonably necessary to comply with federal, state, or local legal process and legally binding law enforcement instructions and orders, such as a search warrant, subpoena, statute, judicial proceeding, or other legal process served on us; (ii) is helpful to prevent, investigate, or identify possible wrongdoing in connection with our Websites or Services; or (iii) protects our rights, reputation, property, or that of our users, affiliates, clients, partners, or the public. We may disclose your information if we believe doing so is appropriate or necessary to prevent any liability, or fraudulent, abusive, or unlawful uses, or to protect Canndr®, our Websites and Services, or any rights, property, or personal safety of Canndr® or others. 

6) Additionally, if you make a phone call or otherwise contact a Retailer through or in connection with your use of our Websites or Services, we may share basic information about your call or chat with the Retailer that you contacted, such as the date and time of your call or other contact method and your phone number or other applicable contact information. Your phone number and basic information about your call or other contact method would have been available to the Retailer had you contacted them directly, and not through our Websites or Services. You may be able to limit our ability to collect and share your phone number through your phone’s settings or phone service provider.  
Your Medical Marijuana Information is not used for marketing purposes, other than in the aggregate, or at your request, or with your consent. 

5. Cookies and Other Web Technologies  
Canndr™  may use cookies, web beacons, tags, scripts, local shared objects such as HTML5, advertising identifiers (including mobile identifiers such as Apple’s IDFA or Google’s Advertising ID) and similar technology in connection with your use of our Websites or Services. In addition, Canndr™  may allow third parties to incorporate their third-party SDKs, cookies or other technologies into our Websites and Services to perform services on our behalf, such as analytics or advertising services.  
For more information about how Canndr™  uses cookies and other web technologies, please see our Cookie Notice. Please note that this policy applies to users in the UK.  

6. Managing And Deleting Your Information  
Your Right to Access and Manage Your Information  
You have the right to access, review, correct, or update the information you provide to us as part of your registration for a User Account with our Websites or Services.  
You can exercise this right and manage your own information by updating your User Account directly or by submitting a data request to us pursuant to our Data Requests section below. You are responsible for the information you provide to us, and you should maintain the accuracy of the personal information in your User Account so that we can best provide products and services to you.  
You may also be able to disallow our use of certain location data through your device or browser settings, for example, by disabling “Location Services” for the Canndr™  application in iOS privacy settings. Please note, however, that disabling Location Services may adversely impact your experience with the functionality of our Websites or Services, and enabling such services may be necessary in some cases to allow certain transactions.  
Your Right to Delete Your Information   
You have the right to delete certain personal information you provide to us as part of your registration for a User Account with our Websites or Services, or that you otherwise submit to us, for example, through our Websites or Services. Keep in mind, we may need this information to provide account management and access, and if you choose to delete information, you may not be able to take advantage of certain features of our Websites and Services. Should you choose to delete information, you can exercise this right by submitting a data request to us pursuant to our Data Requests section below. We will never discriminate against you should you choose to exercise these rights.  
In some circumstances, we may retain information about you for legitimate business or legal purposes, or for any purposes authorized under this Privacy Policy unless prohibited by law. For example, we may retain information to prevent, investigate, or identify possible wrongdoing in connection with our Websites or Services, or to comply with legal obligations. Some information may persist in a limited internal capacity for internal administration, such as in backup files maintained for data integrity and disaster recovery. We strive to store your information no longer than necessary and will take steps to delete your information where reasonably possible.  
You also cannot delete information associated with past orders and purchases because we, and third-party businesses listed on our Websites or Services, may be required to maintain records of orders and purchases for a specified period pursuant to applicable federal, provincial, state, or local law. Also, any public postings or other communications you have made on our Websites or Services, such as in forums or blogs, generally cannot be removed, so please be mindful of the information you include there.  
Customer Data   
Please note that we take your privacy seriously and therefore take steps to safeguard your personal information, including ensuring an adequate level of data protection in accordance with international standards.  
If you are not satisfied with how we have stored or processed your personal information, please contact us pursuant to our Contact Information section below.  
Data Requests   
If you would like to access, revise, or delete any personal information, please submit a written data request by contacting us pursuant to our Contact Information section below.  
We will take such steps as we deem necessary to verify your identity before proceeding with your data request. For example, we may ask you for a piece of information held in your records that you might reasonably be expected to know. We cannot disclose personal information pursuant to a data request to anyone other than the individual in question.  
Once any queries around the information requested have been resolved, copies of the information will be sent to you electronically wherever possible or, if this is not technically possible, by mail.  
If you submit multiple data requests and these data requests are excessive or manifestly unfounded,. In extreme circumstances, we reserve the right to refuse your data requests if they are excessive or manifestly unfounded.  
We will attempt to respond to proper and confirmed data requests within thirty (30) days, or as otherwise required by applicable law. If you are not satisfied with the way your data request was handled, you may refer your data request to your state (if in the UK) or country's data protection authority. In the United Kingdom, any such request should be directed to the Information Commissioner's Office.  
Your Right to Cancel or Modify Marketing Communications  
You have the right to cancel or modify the e-mail marketing communications you receive from us. You can exercise this right by following the instructions contained in our promotional e-mails or, in some cases, by logging into your User Account and changing your communication preferences. Please note that this will not affect subsequent or different subscriptions -- if you opt-out preferences are limited to certain types of e-mails, the opt-out will be so limited.  
While you can manage some of your e-mail preferences, please note that you cannot opt out of receiving certain administrative, transactional, or legal messages from Canndr™  which we may send in the course of legitimate business if you are signed up for a User Account and/or use certain features. However, such announcements can be terminated by asking us to close your User Account.  

7. Children Using The Websites Or Services  
Our Websites and Services are intended for adults only and require that users be no less than eighteen (18) years of age. Please note that certain of our Websites and Services require you to be at least twenty-one (21) years of age to access and use such Websites and Services. Please check the applicable terms and conditions for such Websites and Services for further information. Individuals under the age of eighteen (18) (or twenty-one (21) for applicable Websites and Services) are prohibited from creating a User Account and profile, accessing our Websites or Services, and/or ordering products on our Websites or Services. If you become aware that an underage user has created a User Account using false, stolen, or otherwise misleading information, please contact us immediately pursuant to our Contact Information section below.  


8. Security   
We have implemented a number of measures to help protect your personal information, including your Medical Cannabis Information. These measures include, but are not limited to, minimizing access to personal information to employees with a need to access it, and encrypting personal information provided through our Websites and Services using SSL/TLS. We comply with all relevant security standards to protect your privacy. Please note, however, that while we endeavor to keep our security measures up to date, no data security measures can guarantee complete security. In addition, there are steps you can take to help protect your information, including choosing a robust password for your device and/or User Account that nobody else knows or can easily guess, and keeping your log-in and password private.  
 is not responsible for the actions or activities of unauthorized third parties who compromise our security measures, and so we cannot be responsible for such an unauthorized party’s access, acquisition, or distribution of your personal information. If you believe your personal information has been compromised, we encourage you to notify us immediately pursuant to our Contact Information section below.  
Please note that we retain some personal information about you in accordance with our record retention policies, as required by law, or as required for the achievement of the purposes of the processing as mentioned above (e.g., to enforce any agreements or provide a product/service).  
It is important for you to protect against unauthorized access to your User Account, password, and computer. Be sure to sign off for your User Account when finished, especially if you are using a shared computer. You can learn more about steps you can take to protect your personal information at: https://www.consumer.ftc.gov/articles/0272-how-keep-your-personal-information-secure.  

9. International Data Transfer   
We share information globally, both internally within Canndr® and externally with our partners around the world. If you are located outside of the United Kingdom, please be aware that information we collect, including your personal information, may be transferred to, and processed, stored, and used within the United Kingdom. This transfer is necessary to provide our Websites and Services.  
The United Kingdom may have data protection laws that are different from those of your country. However, we take measures to ensure that any such transfers comply with applicable data protection laws and that your personal information remains protected to the standards described in this Privacy Policy.  

10. Contact Information   
For any questions related to this Privacy Policy or to submit a data request, you may contact us via e-mail at canndr@canndr.com, by phone at +44-7460440420, or write to us at the following address: 128 City Road, London, United Kingdom, EC1V 2NX  
For other customer service inquiries, please contact us via email at canndr@canndr.com or by phone on the phone number above. 

 v1.3. November 1, 2023 January 2023 Canndr Privacy Policy