By accessing or using any website, mobile application, or service (collectively, the “Services”) offered by BudBuddies (“we,” “us,” or “our”), you consent to the data practices described in this Privacy Policy, which supplements our Terms of Service. If you do not agree to this Privacy Policy, please do not use our Services.

1. Scope of This Policy

1.1 Applicability

This Privacy Policy applies to personal data we collect when you interact with our Services (e.g., website, mobile applications). It explains how we collect, use, disclose, and protect your personal information, as well as your rights over that information.

1. 2 Age Restrictions

Our Services are not intended for individuals under 21 years of age. We do not knowingly collect data from individuals under this age. If you suspect a minor has provided personal data, please contact us at support@budbuddies.cc so we can delete it promptly.

1. 3 Location o f Users

Although our primary operations are in the UK & Ireland, users in other jurisdictions acknowledge that their data may be transferred under UK or local data laws. You are responsible for ensuring your activities comply with the legal requirements in your location.

1.4 DPO / Representati ve

We currently do not meet the criteria requiring a formal Data Protection Officer (DPO). If you have privacy-related inquiries or concerns, please contact support@budbuddies.cc.

1. 5 Relationship to Terms o f Service

In case of any conflict between this Privacy Policy and our Terms of Service regarding personal data handling, this Privacy Policy prevails.

2. In forma tion We Collect

2. 1 Personal Information

- Name (or Alias): Necessary for shipping labels. You can opt to use an alias at your own risk (e.g., untraceable if lost).

- Shipping Address: Required to deliver orders; you can remove this data from your account post-delivery.

- Phone Number (Optional): Some couriers request a number to resolve delivery issues or provide updates.

- Email Address: Used for account creation, order confirmations, and support communication.

2. 2 Usage Data

- IP Address & Device Info: Collected for performance monitoring, security (e.g., suspicious login detection), and analytics.

- Browser Type & Pages Visited: Helps us understand usage patterns, improve site layout, and measure user engagement.

- Session Logs & Interaction Data: Used to diagnose technical issues, personalize content, and prevent fraud.

2. 3 Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

- Cookies:
  - - Session Cookies: Expire when you close your browser (e.g., essential for cart functionality).
  - - Persistent Cookies: Remain stored until expiration or manual deletion (e.g., remembering logins, analytics).
  - - First-Party Cookies: Placed by us for secure logins, cart management, or site preferences.
  - - Third-Party Cookies: Used by analytics providers or advertising networks, if you consent to them.

- Similar Tools (Web Beacons, Pixels): May be used for aggregated analytics or targeted promotions, subject to your consent where required.

(See Section 7 for more details on cookies and how to manage them.)

2.4 Payment Information

- Bank Transfer: We do not store your bank account details. The information you provide is used solely to confirm that your payment has been received for the order.

- Crypto Payments: We do not store your wallet addresses or private keys. We use the wallet address you provide only to confirm transactions and never store private keys or other sensitive information.

2. 5 User – Generated Content& Reviews

- Forum Posts, Comments, Feedback: We may display your posted content publicly unless you remove it or request removal.
  - - Comments: If your use of our Services includes posting comments (e.g., on blog posts), we collect the data shown in the comments form, and may also log the commenter’s IP address and browser user agent string to help with spam detection.
  - - Gravatar (If Applicable): An anonymized hash of your email may be sent to the Gravatar service to check if you have an associated avatar. After comment approval, your profile picture (if any) may be displayed publicly. Gravatar’s privacy policy is available at https://automattic.com/privacy/.

2.6 Media Uploads (If Applicable)

- If you upload images to the website (e.g., in comments, forums, or user profiles), you should avoid uploading images with embedded location data (EXIF GPS) included. Other visitors could download images and extract any location data. You can Remove Metadata Here or any other services online.

2.7 Special Categories of Data

We do not typically collect any special categories of data (e.g., health or medical details). If you voluntarily share medical-related context (e.g., a prescription scenario), it is processed solely to fulfill your request and is otherwise not retained.

3. Legal Basis for Processing (UK GDPR/EU GDPR)

We rely on one or more of the following bases:

- Consent: Sending marketing emails, placing non-essential cookies, or processing optional data.

- Legitimate Interests: Preventing fraud, analyzing usage, improving Services unless your fundamental rights override these interests.

4. How We Use Your Information

4.1 Service Delivery & Fulfillment

- Order Processing: Name/alias, shipping address, and (optionally) phone number ensure discreet parcel delivery.

- Account Management: Email/logins for account creation, login credentials, or password resets.

4. 2 Communications & Marketing

- Transactional Messages: Order confirmations, shipping updates, or service changes.

- Promotional Emails: Newsletters, coupons, or product launches if you opt in. You can unsubscribe anytime.

4. 3 Site Analytics & Improvements

- Usage Patterns: We analyze device info and visited pages to refine interface design and address performance bottlenecks.

- Cookie-Based Customization: Returning visitors can enjoy faster checkouts or personalized content.

4.4 Security & Fraud Prevention

- IP Logs & Suspicious Activity: Automated or manual checks for repeated failed logins or abnormal ordering patterns.

4. 5 Automated Decision – Making

- Fraud Screening: Certain orders may be held or flagged if our risk engine detects anomalies. You can request human intervention if you believe your order was incorrectly declined.

5. Data Sharing & Disclosure

5.1 Service Providers & Partners

Your data may be shared with third parties under strict confidentiality, for example, shipping couriers or spam detection services (such as Akismet or similar) for comment moderation.

5. 2 Compliance with Law

If we are legally compelled (e.g., by court orders or police warrants), we will not be able to share the required data due to the encryption mechanisms employed in our backend systems. Additionally, we provide mandatory notices and refuse unauthorized requests as detailed in our Terms of Service, Sections 7–8.

5. 3 Business Transfers

In a merger, acquisition, or asset sale scenario, user data (including personal data) may be transferred to the new entity. We will notify you in such events if data handling changes materially.

5.4 With Your Consent

We never sell or rent your personal data. Any additional disclosures not covered by this policy require your explicit consent.

6. Data Retention & User Rights

6.1 Typical Retention Periods

- Shipping Details: Held for up to 1 month post-delivery to handle refunds or disputes.

- Account Data: Kept as long as you maintain an account.

- Usage Logs: Retained for a limited period (e.g., 3 months) for diagnostics, security, or analytics.

- Comments & Metadata (If Applicable): Retained indefinitely unless you request removal, so follow-up comments can be recognized and approved automatically.

6. 2 Your Data Subject Rights

Depending on your jurisdiction (e.g., UK/EU), you may have the right to:

- Access: Request a copy of the personal data we hold.

- Rectification: Correct inaccurate or incomplete data.

- Erasure (“Right to be Forgotten”): Delete personal data, subject to certain exceptions.

- Restriction: Temporarily limit some processing activities.

- Portability: Obtain personal data in a machine-readable format.

- Objection: Object to processing based on legitimate interests or direct marketing.

- Automated Decision Making: Request human review if a fully automated decision significantly affects you.

6. 3 Exercising Your Rights

To exercise any rights, please email support@budbuddies.cc. We will respond within a reasonable timeframe, usually within one week, unless complexity extends this period.

6.4 Data Erasure & Minimization

Once your parcel arrives, you can remove shipping details from your account. We strive to maintain only minimal data necessary for legal or operational purposes. You can also request that any personal data (e.g., comments or profile information) be deleted unless we must retain it for legal, security, or administrative reasons.

6. 5 Breach Notifications

Should a data breach occur that poses a high risk to your rights and freedoms, we will notify you promptly, in accordance with GDPR/UK GDPR obligations.

7. Cookies & Similar Technologies

7.1 Types & Purposes

- Session Cookies: Essential for cart functionality; expire upon closing your browser.

- Persistent Cookies: Remain until expiration or manual deletion (e.g., storing login preferences).

- First-Party Cookies: Set by us for secure logins, cart management, or remembering site preferences.

- Third-Party Cookies: Used by analytics providers or advertisers (if any), subject to user consent.

- Comment Cookies: If you leave a comment, you may opt in to saving your name, email address, and website in cookies for convenience. These typically last for one year.

- Login Cookies: When you log in, we set up cookies to save login info and screen display choices. Login cookies last for two days; screen options cookies last for a year. If you select “Remember Me,” login persists for two weeks. Logging out removes these cookies.

- Post-Editing Cookies: If you edit or publish an article, an additional cookie is saved in your browser. It contains no personal data but indicates the post ID of the article; it expires after 1 day.

7. 2 Do Not Track (DNT)

We do not currently alter our data collection in response to browser DNT signals. You may disable cookies through your browser settings; however, certain features may not function fully without them.

7. 3 Managing Cookies

You can manage or delete cookies in your browser settings. See www.allaboutcookies.org for detailed instructions. Refusing cookies might limit certain site functionalities.

7.4 Behavioral Advertising Opt Out

If we engage in third-party advertising, you may opt out of targeted ads via:

- Industry Portals: YourOnlineChoices, DAA’s WebChoice.

- Browser Settings: Adjust preferences or install browser extensions that block trackers.

8. Children’s Privacy

Our Services are not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information, please contact support@budbuddies.cc to remove it.

9. Third-Party Links & Embedded Content

We may link to external websites or embed content (e.g., videos, social media posts) not operated by BudBuddies. These sites or services may collect data about you, use cookies, and track your interactions in ways that we do not control. You should review the privacy policies of such third-party sites before providing any data.

10. International & Cross-Border Data Transfers

We primarily operate in the UK and Ireland; however, some of our service providers or technologies may operate in other countries. To ensure adequate data protection for any cross-border transfers, we adopt safeguards such as Standard Contractual Clauses where necessary. Note: We do not store any personal or customer-related information in an unencrypted format.

11. Payment Processing Details

11.1 Crypto Payments

- We only collect wallet addresses for confirmations, not private keys.

- Crypto is inherently pseudonymous; we cannot track personal information behind wallet addresses beyond the transaction details.

11. 2 Fraud Screening

- Automated or semi-automated checks may temporarily hold or decline suspicious orders.

- You can request human review if you believe your order was incorrectly flagged.

12. Mobile App – Specific Practices

12. Mobile Application Privacy Practices When you use the BudBuddies mobile application, we collect and process the following additional data: 12.1 Push Notifications We use OneSignal (a third-party push notification service) to deliver notifications about orders, promotions, and reminders. OneSignal collects: – A unique device identifier (player ID) – Device type, OS version, and timezone – Notification interaction data (delivery, opens) You can disable push notifications at any time via your device’s settings or within the app. See OneSignal’s privacy policy: https://onesignal.com/privacy_policy 12.2 Biometric Authentication (App Lock) The app offers optional Face ID, Touch ID, or fingerprint unlock. Your biometric data NEVER leaves your device and is never transmitted to or stored by BudBuddies. We only receive a yes/no signal from your device’s secure enclave indicating successful authentication. 12.3 Local Data Storage The app stores certain preferences locally on your device (age verification status, lock preferences, notification opt-in). This data is not transmitted to our servers and is removed when you uninstall the app. 12.4 WebView Browsing The app displays our website (budbuddies.cc) in a secure in-app browser. Browsing activity within this WebView is subject to the same data practices described elsewhere in this policy. 12.5 Age Verification The app requires you to confirm you are 21 years of age or older before use. We do not collect or store identity documents to verify this — confirmation is recorded locally on your device only. 12.6 No Tracking Across Apps We do not use the iOS App Tracking Transparency framework to track you across other apps or websites owned by other companies. 12.7 The mobile app may request camera access

The mobile app may request camera access to allow you to upload photos through forms on the BudBuddies website (e.g., support attachments). The app itself does not capture, store, or transmit images independently.

13. Updates to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time. If we make significant changes, we will notify you by email (if you have an account) or by posting a prominent notice on our site. Your continued use of our Services after such modifications indicates acceptance of the revised policy.

14. Dispute Resolution & Supervisory Authority

14.1 User Complaints

If you have concerns about our data practices, please contact us first at support@budbuddies.cc. We will attempt to resolve your issue promptly.

15. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data handling: BudBuddies Email: support@budbuddies.cc We will make every reasonable effort to respond in a timely manner.

Effective Date: 2024-06-22 Thank you for reading our Privacy Policy. We value your privacy and strive to protect your personal data in accordance with GDPR, UK GDPR, and other applicable regulations.