HempWood cares about your privacy. For this reason, we only collect and use personal data as it might be needed for us to deliver to you our world-class products (collectively, hereafter referred to as our “Goods”). Your personal data includes information such as:

  • Name
  • Address
  • Telephone number
  • Date of birth
  • Email address
  • Other data collected that could directly or indirectly identify you.

Our Privacy Policy is intended to describe to you how and what data we collect, and how and why we use your personal data. It also describes options we provide for you to access, update or otherwise take control of your personal data that we process.

If at any time you have questions about our practices or any of your rights described below, you may reach our Data Protection Officer (“DPO”) and our dedicated team that supports this office by contacting us at [email protected]. This inbox is actively monitored and managed so that we can deliver an experience that you can confidently trust.

What information do we collect?

We collect information so that we can provide the best possible experience when you utilize our Goods. Much of what you likely consider personal data is collected directly from you when you:

  1. create an account or purchase any of our Goods (ex: billing information, including name, address, credit card number);
  2. request assistance from our customer support team (ex: phone number);
  3. complete contact forms or request newsletters or other information from us (ex: email); or
  4. participate in contests and surveys, apply for a job, or otherwise participate in activities we promote that might require information about you.

However, we also collect additional information when delivering our Goods to you to ensure necessary and optimal performance. These methods of collection may not be as obvious to you, so we wanted to highlight and explain below a bit more about what these might be (as they vary from time to time) and how they work:

Account related information is collected in association with your use of our Goods, such as account number, purchase history, information requests, and customer service requests and notes or details explaining what you asked for and how we responded.

Tracking cookies and similar technology on our website allows us to track your browsing behavior, links clicked, items purchased, your device type, and to collect various data, including analytics, about how you use and interact with our website. This allows us to provide you with more relevant product offerings, a better experience on our site, and to collect, analyze and improve the performance of our website. We may also collect your location (IP address) so that we can personalize your experience..

Supplemented Data may be received about you from other sources, including publicly available databases or third parties from whom we have purchased data, in which case we may combine this data with information we already have about you so that we can update, expand and analyze the accuracy of our records, identify new customers, and provide products that may be of interest to you. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.

How we utilize information.

We strongly believe in both minimizing the data we collect and limiting its use and purpose to only that (1) for which we have been given permission, (2) as necessary to deliver the Goods you purchase or interact with, or (3) as we might be required or permitted for legal compliance or other lawful purposes. These uses include:

Delivering, improving, updating and enhancing the Goods we provide to you. We collect various information relating to your purchase, use and/or interactions with our Goods. We utilize this information to:

  • Improve and optimize the operation and performance of our website.
  • Diagnose problems with and identify any security risks, errors, or needed enhancements to the website.
  • Detect and prevent fraud and abuse of our website and accompanying systems.
  • Collecting aggregate statistics about the use of the website.
  • Understand and analyze how you use our website and what products are most relevant to you.

Often, much of the data collected is aggregated or statistical data about how individuals use our website, and is not linked to any personal data, but to the extent it is itself personal data, or is linked or linkable to personal data, we treat it accordingly.

Sharing with trusted third parties. We may share your personal data with affiliated companies within our corporate family and with third parties with which we have partnered to allow you to integrate their services into our own website, and with trusted third party service providers as necessary for them to perform services on our behalf, such as:

  • Processing credit card payments
  • Serving advertisements
  • Conducting contests or surveys
  • Performing analysis of our website and customers demographics
  • Communicating with you, such as by email or survey delivery
  • Customer relationship management.

We only share your personal data as necessary for any third party to provide the services as requested or as needed on our behalf. These third parties (and any subcontractors) are subject to strict data processing terms and conditions and are prohibited from utilizing, sharing or retaining your personal data for any purpose other than as they have been specifically contracted for (or without your consent).

We may also share your information with third parties for the purpose of facilitating/allowing a merger, acquisition or sale of all or substantially all of our assets, in which case the acquiring company may continue to utilize your data in the manner for which it was provided and intended.

Communicating with you. We may contact you directly or through a third party service provider regarding products you have purchased from us or information you have signed up for (like newsletters), such as necessary to deliver transactional or service related communications. We may also contact you with offers for additional products we think you’ll find valuable if you give us consent, or where allowed based upon legitimate interests. You don’t need to provide consent as a condition to purchase our Goods. These contacts may include:

  • Email
  • Text (SMS) messages
  • Telephone calls
  • Automated phone calls or text messages.

You may also update your subscription preferences with respect to receiving communications from us and/or our partners by clicking on the “Preferences” link in the footer of the email.

If we collect information from you in connection with a co-branded offer, it will be clear at the point of collection who is collecting the information and whose privacy policy applies. In addition, it will describe any choice options you have in regards to the use and/or sharing of your personal data with a co-branded partner, as well as how to exercise those options.

If you make use of a service that allows you to import contacts (ex. using email marketing services to send emails on your behalf), we will only use the contacts and any other personal information for the requested service. If you believe that anyone has provided us with your personal information and you would like to request that it be removed from our database, please contact us at [email protected].

Transfer of personal data abroad. If you utilize our website from a country other than the country where our servers are located, your communications with us may result in transferring your personal data across international borders. Also, when you call us or initiate a chat, we may provide you with support from one of our global locations outside your country of origin.

Compliance with legal, regulatory and law enforcement requests. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (such as subpoena requests), to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical.

Website analytics. We use multiple web analytics tools provided by service partners, such as Google Analytics, to collect information about how you interact with our website, including what pages you visit, what site you visited prior to visiting our website, how much time you spend on each page, what operating system and web browser you use and network and IP information. We use the information provided by these tools to improve our website. These tools place persistent cookies in your browser to identify you as a unique user the next time you visit our website. Each cookie cannot be used by anyone other than the service provider (ex: Google for Google Analytics). The information collected from the cookie may be transmitted to and stored by these service partners on servers in a country other than the country in which you reside. Though information collected does not include personal data such as name, address, billing information, etc., the information collected is used and shared by these service providers in accordance with their individual privacy policies.

Targeted advertisements. Targeted ads or interest-based offers may be presented to you based on your activities on our website, and based on the products you currently own. These offers will display as varying product banners presented to you while browsing. We also partner with third parties to manage our advertising on our website. Our third party partners may use technologies such as cookies to gather information about such activities in order to provide you with advertising based upon your browsing activities and interests, and to measure advertising effectiveness. If you wish to opt out of interest-based advertising click here [or if located in the European Union click here]. Please note you will continue to receive generic ads.

Third-party websites. Our website contains links to third-party websites. We are not responsible for the privacy practices or the content of third-party sites. Please read the privacy policy of any website you visit.

The E.U-U.S and Swiss-U.S. Privacy Shield Frameworks.

Our parent company, Fibonacci, LLC (and our related entities, including HempWood.com) participates with the EU-U.S. and Swiss-U.S. Privacy Shield Framework. HempWood is committed to subjecting all personal data received from the EU or Switzerland, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List.

HempWood is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. HempWood will do its best to comply with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.

With respect to personal data received or transferred pursuant to each Privacy Shield Framework, HempWood is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, HempWood may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. Under certain conditions, more fully described on the Privacy Shield website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

In compliance with the Privacy Shield Principles, HempWood commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact us in any manner provided in the “CONTACT US” section below in this Privacy Policy.

HempWood has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU and Switzerland in the context of the employment relationship.

How you can access, update or delete your data.

To easily access, view, update, delete or port your personal data (where available), or to update your subscription preferences, please sign into your Account and visit “Account Settings.”

If you make a request to delete your personal data and that data is necessary for the products you have purchased, the request will be honored only to the extent it is no longer necessary for any Goods purchased or required for our legitimate business purposes or legal or contractual record keeping requirements.

If you are unable for any reason to access your Account Settings, then you may also contact us by one of the methods described in the “Contact Us” section below.

How we secure, store and retain your data.

We follow generally accepted standards to store and protect the personal data we collect, both during transmission and once received and stored, including utilization of encryption where appropriate.

We retain personal data only for as long as necessary to provide the Goods you have requested and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

  • mandated by law, contract or similar obligations applicable to our business operations;
  • for preserving, resolving, defending or enforcing our legal/contractual rights; or
  • needed to maintain adequate and accurate business and financial records.

If you have any questions about the security or retention of your personal data, you can contact us at [email protected].

‘Do Not Track’ notifications.

Some browsers allow you to automatically notify websites you visit not to track you using a “Do Not Track” signal. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” you may wish to visit www.allaboutdnt.com.

Age restrictions.

Our Goods are available for purchase only for those over the age of 18. Our Goods are not targeted to, intended to be consumed by or designed to entice individuals under the age of 18. If you know of or have reason to believe anyone under the age of 18 has provided us with any personal data, please contact us.

Changes in our Privacy Policy.

We reserve the right to modify this Privacy Policy at any time without notice. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

Data Protection Authority.

If you are a resident of the European Economic Area (EEA) and believe we maintain your personal data subject to the General Data Protection Regulation (GDPR), you may direct questions or complaints to your local supervisory authority or our lead supervisory authority, the UK’s Information Commissioner’s Office, as noted below:

www.ico.org.uk

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

Phone: 0303 123 1113

Contact Us.

If you have any privacy-related questions, concerns or complaints about our Privacy Policy, our practices or our Goods, you may contact our offices by emailing us directly at [email protected]. Alternatively, you may contact us by either of the following means:

We will respond to all requests, inquiries or concerns within thirty (30) days.

Last Updated: June 25, 2019