This Privacy Policy explains what personal information Cannagrow collects when you visit cannagrow.digital or enquire about our services, how we use it, who we share it with, and the choices and rights you have. We have tried to write it in plain language rather than legal boilerplate.
1. Who we are
Cannagrow ("Cannagrow", "we", "us" or "our") provides technology, IT and digital growth services to licensed cannabis operators. This policy applies to the website at cannagrow.digital and to enquiries and business communications we receive through it.
For the purposes of applicable data protection law, Cannagrow is the controller of the personal information described in this policy. You can reach us at hello@cannagrow.digital.
Where we process information on behalf of a client — for example, when operating or maintaining a dispensary's ecommerce platform, CRM or loyalty system — that client is the controller of the data in question and their own privacy notice governs it. We act as a service provider or processor under our agreement with them, and this policy does not replace their notice.
2. Information we collect
Information you give us
When you submit our contact form or email us, we collect the information you choose to provide. Our contact form asks for your name, phone number and email address, and optionally your dispensary or business name, the state you operate in, the number of stores you run and a message describing what you need.
Information collected automatically
When you visit the site, limited technical information is collected automatically, which may include your IP address, browser type and version, device type, operating system, referring page, the pages you view, and the dates and times of your visits.
Information we do not collect
We do not ask for and do not want sensitive personal information through this website. Please do not send us government identification numbers, financial account details, health information, or information about your customers through the contact form or by email.
3. How we use information
- To respond to your enquiry and provide the information, proposal or quote you asked for
- To contact you about your enquiry by email or phone, including follow-up where you have asked us to be in touch
- To provide, operate, support and improve our services under an agreement with you
- To understand how the website is used so we can improve its content and performance
- To protect the site and our systems against fraud, abuse, spam and security incidents
- To comply with our legal, tax and regulatory obligations, and to establish or defend legal claims
Where you have enquired about services and we have a client relationship or a live enquiry with you, we may send you occasional relevant updates about our services. You can opt out at any time by replying to any message or emailing us. We do not sell your personal information.
4. Legal bases for processing
Where data protection law requires us to identify a legal basis, we rely on the following: performance of a contract with you or steps taken at your request before entering one; our legitimate interests in operating, securing, improving and marketing our business, balanced against your rights; your consent, where we have asked for it, which you may withdraw at any time; and compliance with legal obligations.
5. Cookies and analytics
Cookies are small text files stored on your device. We use a limited number of them, and we may use analytics services to understand aggregate site usage such as which pages are visited and how visitors arrive. Analytics providers may set their own cookies and process technical information under their own privacy policies.
| Type | Purpose |
|---|---|
| Strictly necessary | Required for the site to load, function and remain secure. These cannot be switched off. |
| Analytics / performance | Help us understand aggregate usage so we can improve content and page performance. |
| Functional | Remember preferences so you do not have to set them on each visit. |
Most browsers let you refuse or delete cookies through their settings. Blocking cookies may affect how parts of the site work. Some browsers offer a "Do Not Track" or Global Privacy Control signal; where we are legally required to honour an opt-out preference signal, we do so.
6. How we share information
We do not sell personal information and we do not share it for cross-context behavioural advertising. We share information only as follows:
- Service providers. Companies that help us run the business — form handling and email delivery, hosting and infrastructure, analytics, and customer relationship tools. They may process your information only on our instructions and for the purposes we specify.
- Delivery partners. Where fulfilling your request involves specialist or on-site work, we may share the details necessary to arrange it with a vetted partner engaged by us and bound by confidentiality obligations.
- Professional advisers. Accountants, insurers and lawyers where reasonably necessary.
- Legal and safety. Where required by law, court order or lawful request, or where necessary to protect our rights, property or the safety of others.
- Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply to the information transferred.
Our contact form is processed by Formspree, which receives and delivers submissions to us. Their handling of that data is governed by their own privacy policy.
7. Data retention
We keep personal information only as long as we need it. Enquiries that do not become client relationships are generally kept for up to twenty-four months so we can pick up the conversation if you come back to us. Records relating to client engagements are kept for the life of the engagement and then for as long as needed to meet contractual, tax, accounting and legal requirements. Aggregated or de-identified information that cannot reasonably identify you may be kept indefinitely.
8. How we protect information
We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction. These include encryption of data in transit, access controls and least-privilege permissions, multi-factor authentication on business accounts, and periodic review of our providers.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator where the law requires it.
9. Your privacy rights
Subject to applicable law, you may have the right to:
- Ask what personal information we hold about you and request a copy
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete personal information we no longer need
- Object to or ask us to restrict certain processing
- Ask us to provide your information in a portable format
- Withdraw consent where our processing relies on it
- Opt out of marketing messages at any time
To exercise any of these, email hello@cannagrow.digital. We will respond within the time required by applicable law and may need to verify your identity first. We will not discriminate against you for exercising a privacy right.
10. US state privacy rights
Residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Virginia, Utah, Texas and others as those laws take effect — may have additional rights, including the right to know the categories of personal information collected and disclosed, the right to correct or delete it, the right to opt out of sale or targeted advertising, and the right to appeal a refused request.
As stated above, we do not sell personal information and do not use it for cross-context behavioural advertising. If you are a California resident, you may designate an authorised agent to make a request on your behalf. If we decline a request, you may appeal by replying to our response, and we will explain the outcome in writing.
11. New York SHIELD Act
Much of our work is with New York businesses. Where we hold private information about New York residents, we maintain a data security program with reasonable administrative, technical and physical safeguards consistent with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, and we will provide notification of a security breach as required by that Act.
12. Age restrictions
This website is intended for business audiences in the cannabis industry and is not directed to anyone under 21. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
13. International visitors
We operate from the United States and information we collect is processed there. If you access the site from outside the United States, you understand that your information will be transferred to and processed in a country whose data protection laws may differ from those of your own.
14. Third-party links
Our site and articles link to third-party websites we do not control. We are not responsible for their content or privacy practices, and we encourage you to read the privacy policy of any site you visit.
15. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The revised version takes effect when posted and the "Last updated" date at the top will change. Where the changes are significant, we will take reasonable steps to bring them to your attention.
16. How to contact us
Questions, requests or complaints about this policy or your personal information should go to hello@cannagrow.digital. If you are not satisfied with our response, you may have the right to complain to your local data protection or consumer protection authority.