Last updated 22nd February 2023
This Leafypedia Privacy Notice (“Notice”) describes the information we collect, use, and disclose about you when you use the Site, and related services (together, the “Services”) and how we use, process, and disclose that information. We may reference this Notice with other notices.
1. Use By Minors
This Site is intended for persons 21 years of age and older. We do not knowingly collect information from individuals under 21 years of age, children, or minors.
If you learn that your child has provided us with Personal Information without your consent, you may alert us at email@example.com. If we learn that we have collected any Personal Information from anyone under 21, we will promptly take steps to delete such information.
2. What kinds of personal information do we hold about you?
The information we collect depends on how you interact with us, the Services you use, and the choices you make.
We collect information about you from different sources and in various ways when you use our Services, including information you provide directly, information collected automatically, third-party data sources, and information we infer or generate from other data.
Provided By You Directly. You may provide us with additional information by filling in forms on the Services or by corresponding with us or by using our Services by phone, text, email, live chat, or otherwise. If you contact us directly, we may collect the following types of information from you:
- Contact information. We collect contact information such as your name, username, email address, and phone number;
- Demographics data. When you register or at other times, we may ask you provide demographics information such as your location;
- Content and files. We collect photos, documents, files, and any other information that you provide us, such as reviews, content, and bio information. If you send us email messages or other communications, we will collect and retain those communications.
Examples of these processes can be found below.
2a. When you submit an enquiry via our website
When you submit an enquiry via our website, we ask you for your name, contact telephone number and email address. We use this information to respond to your query, including providing you with any requested information about our products and services. We may also email you several times after your enquiry in order to follow up on your interest and ensure that we have answered your it to your satisfaction. We will do this based on our legitimate interest in providing accurate information prior to a sale.
2b. When you sign up to receive our newsletter
When you sign up to receive our newsletter, we ask for your name and your email address. We will ask for your consent to use your name and email address to email you our newsletter which contains information about our products and other information which we feel might be of interest to you.
2c. When you download a white paper or ebook
When you request to download a sample document, such as a white paper or ebook, we ask for your name, company name (which is optional) and your email address. We use this information to email you a link to download the requested document. We may also email you after your download in order to follow up on your interest in our products and services. We will do this based on our legitimate interest in marketing to prospects for our products and services.
2d. When you submit a review about us
When you submit a review about us, we record your name, your email address and your IP (Internet Protocol) address, which is the address of your computer on the Internet. We use this information to provide verified independent views about our products and services to potential customers. Your name and the content of your review (but not your email address or IP address) may be publicly displayed on our website. We will do this based on our legitimate interest in marketing our products and services.
2e. When you take part in our feedback survey
When you take part in our feedback survey, we record your name, your email address, your organisation name, your job role and your answers to questions we ask about your opinion of, and use of, our products and services. We use this information to develop and improve our products and services and our customer relationships. Your job role, organisation and some or all of your comments may be publicly displayed on our website as a testimonial. We will do this based on our legitimate interest in marketing our products and services.
Information Collected Automatically. When you use the Services, we automatically collect information about you, for example:
- Usage data. We automatically log your activity on our Services, including pages you have viewed and actions you take on the Services and the URL of the website from which you came to our sites.
- Identifiers and device information. When you visit our Services, our servers automatically collect certain technical information about your device including your Internet protocol address and information about your device, including device identifiers, your browser type, language and identifying information, your operating system and application version, device types, device model and manufacturer, and your device operating system type and version.
- Geolocation data. Depending on your device and settings, we may collect geolocation data when you use our online services.
Our web pages may also contain electronic images known as web beacons (also called single-pixel gifs) that we use to help deliver cookies on our websites, count users who have visited those websites, and gather usage and performance data. We also include web beacons in our promotional email messages or newsletters to determine whether you open and act on them.
We, together with our third-party analytics service providers and advertising partners, use these technologies in our Services to collect personal information (such as the cookies stored on your browser, the advertising identifier on your mobile device, or the IP address of your device) when you visit our Services. We and our partners may also use these technologies to collect personal information about your online activities over time and across different Web sites. This information is used to store your preferences and settings, enable you to sign-in, analyze how our Services perform, track your interaction with the Services, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We and/or our partners also share the information we collect or infer with third parties for these purposes.
The third-party analytics and advertising providers we use on our websites include:
|Company/Service||Purpose(s)||Privacy Notices||Manage Settings (opt-out)|
|DoubleClick (Google||Advertising, analytics||https://policies.google.com/privacy||See association links below.|
|Google Tag Manager||www.google.com/policies/privacy/partners||https://policies.google.com/technologies/partner-sites|
|Facebook Audiences||Advertising||https://www.facebook.com/privacy/explanation||https://www.facebook.com/settings?tab=ads See association links below.|
|Facebook Audiences||https://www.facebook.com/privacy/explanation||See association links below.|
To learn about the privacy practices of these third parties and how to opt-out from their use of cookie data for targeted advertising purposes, click on the links above.
Many of these companies are also members of associations, which provide a simple way to opt out of analytics and ad targeting, which you can access at:
- United States: NAI (http://www.networkadvertising.org/managing/opt_out.aspx) and DAA (http://www.aboutads.info/choices/)
- Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)
- Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)
California “Do Not Sell My Info”
The California Consumer Protection Act (“CCPA”) requires us to disclose categories of personal data sold to third parties and how to opt-out of future sales. The CCPA defines personal information to include online identifiers, including IP address, cookies IDs, and mobile IDs. The law also defines a “sale” to include simply making data available to third parties in some cases. We let advertising and analytics providers collect IP addresses, cookie IDs, mobile IDs through our sites and apps when you use our online services, but do not “sell” any other types of personal information.
If you do not wish for us or our partners to “sell” your personal data to third parties for advertising purposes, you can make your Do Not Sell Request by emailing info@Leafypedia.net.
Note that although we will not “sell” your personal data after we receive your email, we will continue to share some personal information with our partners (acting as our service providers) to help us perform advertising-related functions such as, but not limited to, measuring the effectiveness of our ads, managing how many times you may see an ad, reporting on the performance of our ads, ensuring services are working correctly and securely, providing aggregate statistics and analytics, improving when and where you may see ads, and/or reducing ad fraud. Further, emailing us will not necessarily opt you out of the use of previously sold personal information or stop all interest-based advertising. If you access this site (or app) from other devices or browsers, visit the link below from those devices or browsers to ensure your choice applies to the data collected when you use those devices or browsers.
Other information related to your right to opt-out from sales of personal data is contained in the California Privacy Rights section of this Notice.
Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.
Email web beacons. Most email clients have settings which allow you prevent the automatic downloading of images, which will disable web beacons in the email messages you read.
Do Not Track. Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described above.
Information obtained from third-party sources. We also obtain information from third parties. We protect information obtained from third parties according to the practices described in this Notice, plus any additional restrictions imposed by the source of the information. These third-party sources include, for example:
|Third Party Sources||Categories of Personal Data|
|Third party partners. Third party applications and services, including social networks you choose to connect with or interact with through our services. For example, if you create an account using, or otherwise connect your account to, a social networking services account (e.g. Twitter or Facebook), we may also collect information provided to us by such social networking service.||Contact information, demographic data, content and files, identifiers and device information, geolocation data, usage data, inferences|
|Co-Branding/Joint Partners. Partners with which we offer co-branded services or engage in joint marketing activities||Contact information, demographic data, content and files, identifiers and device information, geolocation data, usage data, inferences|
|Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address.||Contact information, demographic data, payment information, content and files, and device information, geolocation data, usage data, inferences|
|Publicly available sources. Public sources of information such as open government databases.||Contact information, demographic data, content and files, geolocation data.|
Information created or generated. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your city, state, and country location based on your IP address.
When you are asked to provide information, you may decline. And you may use app or device controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain products or features, those products or features may not be available or function correctly.
3. Your Sharing of Your Information
The Leafypedia Services may allow you to connect and share your actions, comments, content, profile, and information publicly or with other people. Depending on what domain your account is on and what type of account you have created, you may be able to control some of the categories of personal information shared via your profile from the account settings menu on the Site. Please be mindful of your own privacy needs as you choose who to connect with and what to share and make public. We cannot control the privacy or security of information you choose to make public or share with others.
The Services may also provide you with the option to share certain information from your Leafypedia account with social networking services like Facebook, Google, or Twitter. We are not responsible for the use or re-sharing by others of any of your information once it is made public. If you do not want your information to be made public, you should not use the Leafypedia Services in this manner and/or you should adjust your privacy settings on the applicable social networking service accordingly. We are not responsible for and we do not cont
3. How Leafypedia Uses Your Information
We use the information we collect for purposes described in this Notice or otherwise disclosed to you. For example, Leafypedia generally uses your information to:
|Purposes of Use||Categories of Personal Data|
|Product and Service Delivery. To provide and deliver our Services, including creating accounts on, securing, troubleshooting, improving, and personalizing those Services.||Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, usage data, inferences|
|Business Operations. To operate our business, such as billing, accounting, improving our internal operations, securing our systems, and detecting and protecting against fraudulent or illegal activity.||Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, usage data, inferences|
|Product and Service Improvement, Development, and Research. To improve our Services, develop new products or features, and conduct research.||Contact information, demographic data, payment information, content and files, identifiers and device information, geolocation data, usage data, inferences|
|Personalization. To understand you and your preferences to enhance your experience and enjoyment using our Services.||Contact information, demographic data, content and files, identifiers and device information, geolocation data, usage data, inferences|
|Customer Support. To provide customer support and respond to your questions.|
|Communications. To send you information about your use of the Services, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.||Contact information, demographic data, content and files, identifiers and device information, geolocation data, usage data.|
|Marketing. To communicate with you about new products, offers, promotions, rewards, contests, upcoming events, and other information about our products and those of our selected partners (see the Information Choices section of this Notice for how to change your preferences for promotional communications).|
|Advertising. To display advertising to you (see the Cookies and Similar Technologies section of this Notice for information about personalized advertising and your advertising choices).|
In carrying out these purposes, we combine data we collect from different sources to give you a more seamless, consistent, and personalized experience.
We may also use your information to verify your geographic location. We may use your geographic location data to personalize our Service, to recommend content, determine whether the information you have requested is available in your location, or to determine whether Service offerings are available in your location. If Information is aggregated or de-identified so it is no longer reasonably associated with an identified or identifiable natural person, Leafypedia may use it for any business purpose.
4. How Leafypedia Discloses Your Information
We may share your information as follows:
- We may share your personal information with your consent or at your direction or as otherwise as necessary to complete your transactions or provide the Services you have requested or authorized. By placing a reservation or order with a dispensary or retailer through our Services, you consent to Leafypedia sharing the information related to your reservation or order with the dispensary or retailer, to the extent necessary to fulfill your reservation or order.
- With our subsidiaries and affiliates, who may share common data systems and process information as needed to provide the Services and operate our business.
- We may also share your personal information with others who perform services on our behalf (for example, with Twilio if you make a call or receive/respond to a text using the Service).
- We may share your information with third-party service providers to fulfill your requests and to perform functions on our behalf. Examples include product reservation requests, fulfilling orders, and delivering orders. We only share information necessary for these third-party service providers to perform their functions, and any information shared may not be used for any other purpose.
- We may disclose your information if we believe we are required to do so by law, or to comply with a court order, judicial or other government subpoena, or warrant.
- We also may disclose your information if we believe doing so is appropriate or necessary to prevent any liability, or fraudulent, abusive, or unlawful uses or to protect Leafypedia and our Services; or any rights, property, or personal safety of Leafypedia or others, including as we believe is necessary to enforce our agreements, terms, and policies.
- In the event that Leafypedia is or may be acquired by or merged with another company or involved in any other business deal (or negotiation of a business deal), including a financing, transfer, or divestiture, involving sale or transfer of all or part of our business or assets, we may transfer or assign your information as part of or in connection with the transaction. Finally, in the event of insolvency, dissolution, bankruptcy, or receivership, information may be transferred as a business asset.
Third party analytics and advertising companies also collect personal information through our Services including, account information, marketing and communications data, demographic data, content and files, geolocation data, usage data, and inferences associated with identifiers and device information (such as cookie IDs, device IDs, and IP address) as described in the Cookies and Similar Technologies section of this Notice.
We may also share aggregated and/or anonymized data with our partners, advertisers, and other third parties as authorized by law for purposes including use for their own advertising and marketing activities.
Please note that some of our products include references or links to products provided by third parties whose privacy practices differ from ours. If you provide information to any of those third parties, or consent to our sharing information with them, that information is governed by their privacy statements.
5. How we protect your information
Leafypedia uses various safeguards designed to protect personal information submitted to us, including, where appropriate, encryption of data stored and encrypting information in transit. Where Leafypedia uses third party providers to store and transmit personal information, Leafypedia utilizes the security tools offered by these providers that are designed to protect personal information. In addition to use of certain security tools made available by third party providers, Leafypedia takes reasonable and appropriate steps to help protect your Information against loss, misuse, and unauthorized access, or disclosure. No company can fully prevent security risks, however. While we strive to protect your personal information, we cannot guarantee its absolute security. To help protect yourself and your information, choose a unique password for our Services and do not use a password on our Services that you would use on any other website or online service.
6. Overseas Transfers
We may sometimes use third party data processors that are located outside of the United States and located in the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where We transfer any personal data, we will take all reasonable steps to ensure that your data is treated as safely and securely under the Data Protection Act 1998 and GDPR. These services will be carried out by experienced and reputable organisations on terms which safeguard the security of your information and comply with the European data protection requirements. We always ensure all personal information is provided with adequate protection and all transfers of personal information outside the EEA are done lawfully.
To learn more about the European Commission’s decisions on the adequacy of personal data protections, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.
7. Retention of Information
We retain information for as long as necessary to provide the Services you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.
8. Information Choices
Access, correction, and deletion. If you wish to request access to, or correction or deletion of, information about you that we hold, you may email your request to info@Leafypedia.net.
To the extent permitted by applicable law, we reserve the right to charge a fee or decline requests that are unreasonable or excessive, where providing the information would be prohibited by law or could adversely affect the privacy or other rights of another person, or where we are unable to authenticate you as the person to whom the information relates.
Communication Preferences. You may opt out of receiving marketing/promotional emails from Leafypedia by following the instructions in those emails or by reviewing the settings in your account, depending on what type of account you have. You may opt out of receiving marketing/promotional text messages from Leafypedia at any time by replying STOP to a marketing/promotional text message. If you opt out of receiving marketing/promotional emails and/or text messages, we may still send you non-promotional emails, such as emails about your accounts or our ongoing business relations.
Choices for Cookies and Similar Technologies. See the Cookies and Similar Technologies section for choices about cookies and other analytics and advertising controls.
Many third-party tracking companies are also members of associations, which provide a simple way to opt out of analytics and ad targeting, which you can access at:
- United States: NAI (http://www.networkadvertising.org/managing/opt_out.aspx) and DAA (http://www.abouads.info/choices/)
- Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)
- Europe: European Digital Advertising Alliance (http://www.youronlinechoices.com/)
You may decline to share certain data with Leafypedia, in which case we may not be able to provide you with some of the features and functionality of the Site or Service. You may have the right to know what personal information Leafypedia has about you and to correct any inaccuracies. Please direct any such requests by email to privacy@Leafypedia.com. or by one of the other means listed at the end of this notice.
Right to Opt-out. You may opt-out of future “sales” of personal information. To do so, please visit our “Do Not Sell My Personal Information” page in the Cookies and Similar Technologies section of this Notice.
9. Privacy Rights
Your EU Privacy Rights
If the processing of personal data about you is subject to European Union data protection law, you have certain rights with respect to that data:
- You can request access to, and rectification or erasure of, personal data;
- If any automated processing of personal data is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal data in a usable and portable format;
- If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing;
- You can to object to, or obtain a restriction of, the processing of personal data under certain circumstances; and
- For residents of France, you can send us specific instructions regarding the use of your data after your death.
To make such request, contact us at the contact information set forth below. When we are processing data on behalf of another party that is the “data controller,” you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.
We rely on different lawful bases for collecting and processing personal data about you, for example, with your consent and/or as necessary to provide the Services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.
California Privacy Rights
If you are a California resident and the processing of personal information about you is subject to the California Consumer Privacy Act (“CCPA”), you have certain rights with respect to that information.
Right to Know. You have a right to request that companies provide you with the following information:
- The categories and specific pieces of personal information we have collected about you.
- The categories of sources from which we collect personal information.
- The purposes for collecting, using, or selling personal information.
- The categories of third parties with which we share personal information.
- The categories of personal information we have disclosed about you for a business purpose. Note that the CCPA defines “business purpose” broadly; and because we use service providers for a number of business purposes that require access to our systems that hold personal information (such as supplying cloud data storage, maintaining the security of our systems, and providing customer support), in the past 12 months we have disclosed for a business purpose data from each of the categories of personal information we maintain.
- The categories of personal information we have sold about you (if any), for each category of third parties to which the personal information was sold. Note that the CCPA defines “sell” and “personal information” very broadly, and some of our data sharing described in this Notice may be considered a “sale” under that definition. In particular, we let advertising and analytics providers collect IP addresses, cookie IDs, and mobile IDs through our sites and apps when you use our online services, but do not “sell” any other types of personal information. We provide our “Do Not Sell My Info” disclosures in the Cookies and Similar Technologies section of this Notice.
You may make such a “request to know” by contacting us at info@Leafypedia.net. Note that we have provided much of this information in this Notice.
Right to Request Deletion. You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request to delete, contact us at info@Leafypedia.net.
Right to Opt-Out. You have a right to opt-out from future “sales” of personal information. To do so, please visit our “Do Not Sell My Info” page in the Cookies and Similar Technologies section of this Notice.
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us. Further, to provide or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. Finally, you have a right to not be discriminated against for exercising rights set out in the CCPA.
Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes (“California Customers”) may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. California Customers may request further information about our compliance with this law by e-mailing info@Leafypedia.net. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated e-mail address.
10. Changes and Updates to this Privacy Notice
Leafypedia, 347 Fifth Avenue, Suite 1402-402, New York City, NY 10016, firstname.lastname@example.org