Privacy Policy
Privacy Policy
We value your privacy and are committed to safeguarding it through our adherence to this privacy policy (“Policy”). This Policy outlines the types of information that may be collected from you or that you may provide (“Personal Information”) on the Canndr® Thailand application (“Application” or “Service”) and any associated products and services (collectively, “Services”). It also explains how we collect, use, maintain, protect, and disclose Personal Information. Additionally, this Policy provides information on your choices regarding the use of your Personal Information and how you can access and update it.
This Policy constitutes a legally binding agreement between you (“User,” “you,” or “your”) and CANNDR LTD (“CANNDR LTD,” “we,” “us,” or “our”). If you are entering into this agreement on behalf of a business or other legal entity, you represent that you have the authority to bind such entity to this agreement. If you do not have such authority or do not agree with the terms of this agreement, you must not accept this agreement and may not access or use the Application and Services. By accessing and using the Application and Services, you acknowledge that you have read, understood, and agreed to be bound by the terms of this Policy. This Policy does not apply to the practices of companies we do not own or control or to individuals we do not employ or manage.
Automatic Collection of Information
When you use the application, our servers automatically record information that your device sends. This data may include details such as your device’s IP address, device type and version, operating system type and version, language preferences, the webpage you visited before using the Application and Services, the screens of the Application and Services that you interact with, time spent using the Application, search queries within the Application, access times and dates, and other statistics.
Automatically collected information is primarily used to identify potential abuse cases and compile statistical information about Application and Services usage and traffic. This statistical information is not aggregated in a way that would identify individual Users of the system.
Collection of Personal Information
You can access and use the Application and Services without revealing your identity or providing any information that could identify you as an individual. However, certain features within the Application may require you to provide specific Personal Information (such as your name and email address) to access them.
We collect some information directly from you through the Application and Services, but we may also obtain Personal Information about you from other sources, such as public databases and our joint marketing partners.
You have the option to withhold your Personal Information, but doing so may limit your access to certain features within the Application. If you are unsure about what information is mandatory, please feel free to contact us for clarification.
Privacy of Children
We do not knowingly collect Personal Information from individuals under the age of 20. If you are under 20, please do not submit any Personal Information through the Application and Services. If you believe that a child under 20 has provided Personal Information to us through the Application and Services, please contact us to request the removal of that information from our Services.
Parents and legal guardians are encouraged to supervise their children’s use of the Application and to instruct them not to provide Personal Information online without permission.
Use and Processing of Collected Information
We serve as both a data controller and data processor when handling Personal Information. Our role depends on the specific context in which we collect and process Personal Information.
We act as a data controller when we ask you to submit Personal Information necessary for your access and use of the Application and Services. In such cases, we determine the purposes and means of processing Personal Information.
In situations where you submit Personal Information through the Application and Services, we act as a data processor. In these instances, we do not own, control, or make decisions regarding the submitted Personal Information. The Personal Information is processed solely in accordance with your instructions, with you acting as the data controller.
We may need to collect and use certain Personal Information to provide the Application and Services to you or to comply with legal obligations. Failure to provide the requested information may prevent us from offering you the requested products or services. The information we collect from you may be used for various purposes, including creating and managing user accounts, fulfilling and managing orders, delivering products or services, improving products and services, sending updates, responding to inquiries, requesting user feedback, enhancing the user experience, posting customer testimonials, enforcing terms and conditions, protecting against abuse, responding to legal requests, and running and operating the Application and Services.
The processing of your Personal Information depends on how you interact with the Application and Services, your location, and the legal bases for processing. We may also combine or aggregate some of your Personal Information to improve and update our Application and Services.
Please note that under certain legislations, we may be allowed to process information until you object to such processing by opting out, without relying on consent or other legal bases.
Payment Processing (Currently Inactive)
While the Application offers information about verified dispensaries in Thailand, please note that payment processing is currently inactive. You will not be required to provide payment details, such as credit card information, within the Application.
Disclosure of Information
Depending on the requested Services or as necessary to complete any transaction or provide any Service you have requested, we may share your information with our trusted subsidiaries and joint venture partners, affiliates, contracted companies, and service providers (collectively, “Service Providers”) we rely upon to assist in the operation of the Application and Services available to you, and whose privacy policies align with ours or are in accordance with our policies regarding Personal Information. We will not share any personally identifiable information with third parties and will not share any information with unaffiliated third parties.
Service Providers are not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements. Service Providers are given the information they need only to perform their designated functions, and we do not authorize them to use or disclose any of the information provided for their marketing or other purposes.
We may also disclose any Personal Information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
In the event of a business transition, such as a merger or acquisition by another company, or the sale of all or a portion of our assets, your Personal Information will likely be among the transferred assets.
Retention of Information
We will retain and use your Personal Information for the period necessary to comply with our legal obligations, enforce our agreements, resolve disputes, and unless a longer retention period is required or permitted by law.
Any aggregated data derived from or incorporating your Personal Information may be used after you update or delete it, but not in a manner that would identify you personally. Once the retention period expires, Personal Information will be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.
Data Analytics
Our Application and Services may utilize third-party analytics tools that employ cookies, web beacons, or similar information-gathering technologies to collect standard internet activity and usage information. The information is used to compile statistical reports on User activity, such as frequency of visits, pages visited, and duration. This data helps us monitor performance and enhance our Application and Services. We do not employ third-party analytics tools to track or collect personally identifiable User information, nor do we associate information from these reports with individual Users.
Social Media Features
Our Application and Services may include Social Media Features, such as Facebook and Twitter buttons, Instagram buttons, and others. These features may collect your IP address and the page you are visiting on our Application and Services. Social Media Features may set a cookie to enable their proper functioning. They are hosted by their respective providers or directly on our Application and Services. Your interactions with these features are governed by the privacy policies of their providers.
Links to Other Resources
The Application and Services contain links to external resources not owned or controlled by us. We are not responsible for the privacy practices of such resources or third parties. We encourage you to review the privacy statements of these resources that may collect Personal Information.
Information Security
We secure the information you provide on our servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards to protect Personal Information in our control and custody. However, please be aware that data transmitted over the Internet or wireless networks is not entirely secure.
Data Breach
If we become aware that the security of the Application and Services has been compromised or that Users’ Personal Information has been disclosed to unrelated third parties due to external activity, we reserve the right to take appropriate measures, including investigation, reporting, and cooperation with law enforcement authorities. In case of a data breach, we will make reasonable efforts to notify affected individuals if there is a reasonable risk of harm to Users or if notice is required by law. Such notifications will be posted on the Application and Services and communicated via email.
Changes and Amendments
We reserve the right to modify this Policy, or its terms related to the Application and Services at our discretion. Any changes will be reflected in the updated date at the bottom of this page. We may also provide notice through other means, such as the contact information you have provided.
An updated version of this Policy will be effective immediately upon posting unless otherwise specified. Your continued use of the Application and Services after the effective date of the revised Policy constitutes your consent to those changes. However, we will not use your Personal Information in a manner materially different from what was stated when it was collected without your consent.
Acceptance of this Policy
By accessing and using the Application and Services and submitting your information, you acknowledge that you have read this Policy and agree to its terms and conditions. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Application and Services.
Contacting Us
If you have questions, concerns, or complaints regarding this Policy or your Personal Information, or if you wish to exercise your rights, please contact us using the following details:
We will make every reasonable effort to address and resolve complaints, disputes, and your rights as quickly as possible, within the timescales provided by applicable data protection laws.