Privacy Notice

THE CANNAVIST, A VAPOUROUND PUBLICATION

ORANGE FOX MEDIA LTD

Changes to Data Protection Law in the EU

The law in relation to data protection changed in the EU with effect from May 25, 2018. This remains in place post-Brexit. This Privacy Notice has been updated in compliance with the General Data Protection Regulation 2018 for those who receive marketing communications by email from THE CANNAVIST registering with effect from the launch of this website (January 28, 2019) to reflect your new and enhanced rights and to update how we process your personal data. You should read through this Privacy Notice to fully understand the basis upon which we collect your personal data, how we use it, where we store it and to whom it is disclosed.

Commitment to Privacy

We are committed to protecting your personal data and right to privacy. We will always keep your personal data safe and comply with applicable data protection legislation. The CANNAVIST commits to upholding a high standard of safeguarding the personal data of its subscribers and followers in the US, in addition to the EU/UK-specific terms and clauses laid out here.

Know Your Rights

By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country. If you are based in the UK, please go to https://ico.org.uk/ for more information.

Rights

What does this mean?

1. The right to be informed – You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this Privacy Notice.
2. The right of access –You have the right to obtain access to your personal data (if we’re processing it), and certain other information (similar to that provided in this Privacy Notice). This is so you’re aware and can check that we’re using your personal data in accordance with data protection law.
3. The right to rectification – You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
4. The right to erasure – This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. The right to restrict processing –You have rights to ‘block’ or suppress further use of your personal data. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to data portability –You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
7. The right to object to processing – You have the right to object to processing for direct marketing (which we do only with your consent) and also to processing which is carried out for the purposes of our legitimate interests.
8. The right to lodge a complaint – You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.
9. The right to withdraw consent – If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.

Please see the 'Requests' section for more information on how we will handle your requests.

Who Are We?

Please click here to see who we are in the “About Us” section of our website. The entities listed are of THE CANNAVIST (ORANGE FOX MEDIA LTD) only. References in this Notice to “we” or “us” are to the entities listed. The listed entities are committed to protecting your privacy and are joint data controllers within the meaning of data protection laws applicable in the European Union (EU) and European Economic Area (EEA). As data controllers, we have arrangements between us to ensure that we handle your personal data correctly and in accordance with data protection law. We have nominated a Data Compliance Officer within our organisation. These arrangements reflect our respective roles and responsibilities in relation to you, and considers which entity is in the best position to fulfil each obligation to you. If you would like more information, you can contact us by emailing dataprotection@cannavistmag.com. Please insert ‘My Data Protection’ in the subject field of your email. Alternatively, you can call +44 (0) 1332 650 239 and ask to speak with the Data Compliance Officer.

What Personal Data Do We Collect About You?

We collect the personal data you freely provide to us as part of your registration to THE CANNAVIST mailing list, and any further personal data you provide to update your details from time-to-time. This may include details like your name, address, place of residence, gender, date of birth, email address, landline and mobile phone numbers and perhaps other contact details relating to your role within the vape industry. Registration to our business-to-business or consumer databases require age verification (18+) We may also collect information about your preferences. We may ask you to provide us with information about your favourite products and brands and about your marketing preferences so we can make sure that we are contacting you using your preferred method of communication. Please note that we may require some basic contact information from you in the future.  This may include: – Your name – Your email address – A contact number – Your company’s name – Your company’s contact number – Your company’s address – Some bank details where online purchases are necessary When you are added to a mailing list, we will request your email address and possibly your name. Please note: Credit / Debit Card details are processed through a secure third-party website which specialises in this area and are not stored by us. If you have given us permission to do so, we will collect information about your approximate location based on your IP address with Google Analytics when you open emails. We collect cookies from your mobile device when you visit a website associated with THE CANNAVIST or one of our associated brands. When we interact with you (for example, when you are using services we provide) we may learn certain details about you that do not fit into one of the categories above. We may record this information where it is necessary in order to ensure we can remember important details about you in future. We ensure that only a small number of authorised personnel within THE CANNAVIST (ORANGE FOX MEDIA LTD) marketing department have access to this personal data and we will not use it for any purpose other than to build an ongoing relationship with you. If you have given us your consent to, we may market to you from time to time. We may ask for your feedback on certain items about your experiences with us, our mailing list content and whether you are likely to recommend THE CANNAVIST. The feedback we receive from you may affect the nature or volume of marketing material you receive from us where you have consented to receive such marketing material.

How We Use Your Personal Data?

We are processing your personal data to be able to provide you with the latest news, offers, giveaways, competitions and industry updates from THE CANNAVIST.

• When we make you aware of special offers / upgrades / updates / events, we can tailor these to you to make sure you are sent the kinds of offers you will be most interested in • When we think you may want to hear about something in particular, judged by your preferences.

In addition, we use your personal data:

• To manage and improve THE CANNAVIST website and the marketing content we communicate to you via email • To better understand your behaviour in order to develop and improve your user experience • To analyse the effectiveness of our marketing and to help us provide more relevant offers, advice and information to you and others • To build up a clearer picture of our databases, both as a group and as individuals and thereby provide you with a seamless, relevant and consistent service; • To provide you with information about events, special offers, promotions and other relevant matters concerning THE CANNAVIST and the goods which we sell and services we provide (if you have given your consent for us to do so); • To advertise our magazine on social media to other people who may also be interested in what we have to offer (if you have given your consent for us to do so); • To advertise offers or promotions made available by our third party partners (as set out under the Who We Share Your Personal Data With section) if you have given us your consent to do so; • To provide any services which you may request or which we may offer as part of your membership or subscription; • To ensure that the information we hold is kept accurate and up to date; (if we have your consent, where this is required by law) for research and analysis and in order that we may contact you on occasion for such a purpose or for the purpose of conducting surveys or focus groups; and • To notify you about changes to our services

How Long We Store Your Data For?

We will keep your personal data for as long as you continue to interact with us (for example, if you read or click on an email we send you, make an online purchase, or attend an event we host or organise.) If we do not have any interaction with you for three years, we will attempt to contact you to see if you still want to be on our mailing list. If we do not hear from you or if you tell us, at any time, that you no longer want to be on our mailing list, we will delete your personal data from our records and unsubscribe you from our mailing list.

Who We Share Your Data With?

We share your personal data between ourselves – as we are identified in the ‘About Us’ section – by having joint access to a central database shared by our entities. THE CANNAVIST may operate off the Vapouround Magazine business-to-business database on the legal basis of legitimate interest, where vape businesses are concerned, by including it as part of our central database. This allows you to benefit from a relationship with the flagship Vapouround brand. If you are a consumer, your data will not be shared internally or externally, unless you sign up or subscribe to do so. For the purposes set out above, we may also provide your personal data to our suppliers and processors who perform certain business services for us. We share your personal data with third parties who:

• Process transaction information as outlined above, where you have made an online purchase
• If you have given your consent for us to do so communicate with you on our behalf via email;

In addition, we may disclose your personal data:

• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property or safety of our business, our customers or others. This includes, in specific cases, exchanging information with other companies and organisations for the purposes of fraud protection; and • To successors in title or replacement operators of all or part of our respective businesses.
• In the case of a competition, where the prize is supplied by another brand: Upon entering into the competition, applicants will be given the option to withhold  their data from being shared with the third party supplier. However, in order for the prize to be shipped, a minimal amount of personal data may still be required, such as: A name, address and email address (which may be used for tracking purposes).

The Legal Basis for us Using Your Personal Data

1. It may be necessary for us to process your personal data for the performance of the contract between us in relation to THE CANNAVIST.
2. In certain circumstances, we process your personal data after obtaining your consent to do so for the purposes of:

• Sending you marketing communications; • Advertising on social media platforms; • Using your location to deliver specific messaging and content to you; and • Using your location to monitor the effectiveness of our messaging.

3. In most cases, it is in our legitimate interests to collect and use the personal data referred to above (see What Personal Data Do We Collect About You? above) so that we can:

• Provide you with a service that is as useful, enjoyable and beneficial to you as possible, including by personalising our contact with you, making sure we tell you about all the offers that relate specifically to your preferences, and contacting you using your preferred method of communication; and
• Better understand our customer base so that we can improve our services and marketing activities (which could also benefit you).

When we rely on our legitimate interests in order to collect and use your personal data, we must consider whether those legitimate interests are overridden by your interests or your fundamental rights and freedoms by carrying out a legitimate interest assessment. We may continue only if we decide that your interests, rights and freedoms do not override our legitimate interests. We have undertaken a legitimate interests assessment to reaffirm this legal basis is suited to our mailing lists. We have considered these matters, and where we think there is a risk that one of your interests or fundamental rights and freedoms may be affected, we will not use your personal data unless there is another legal basis for us to do so (either that it is necessary for us to perform our contract with you, or on the basis of your consent). For example, we believe that collecting your location data may be intrusive, and so we will only do so with your consent.

What happens if you do not provide us with the personal data we request or ask that we stop processing your personal data?

If you ask that we stop using your personal data (see Your Rights above) then we may not be able to provide you with all the benefits of our mailing list. In such a case, you will be wiped from our memory.

How we may contact you

Our mailing lists and network work best when we are free to communicate with you to share details of promotions, upgrades, rewards, giveaways, events and offers you might be interested in. In order to provide you with the benefits of THE CANNAVIST, we may, if we have your consent, contact you by phone or email. If you no longer wish to receive such or certain communications, you can let us know by emailing us at dataprotection@cannavistmag.com.  You may also choose to click unsubscribe on any email you receive from us at any time and this will notify us that you wish to be removed from our mailing list. You will be unsubscribed and we will never use your details for contact again.

Requests to us

We are required, by law, to act on requests and provide information free of charge, except where your requests are manifestly unfounded or excessive (in particular because of their repetitive nature) in which case we may charge a reasonable fee (taking into account the administrative costs of providing the information or communication, or taking the action requested), or refuse to act on the request. Please consider your request responsibly before submitting it. Please submit your request in writing to dataprotection@cannavistmag.com. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.

Contacting us

If you need to contact us for any reason (including to exercise any of your rights in relation to data protection as set out above) please send us your request by emailing dataprotection@cannavistmag.com. Alternatively, you may call +44 (0) 1332 650 239.