Privacy policy

Care By Design (“Company”) takes your privacy seriously and is sensitive to potential concerns about how we use the personal information we collect from and about you. This Privacy Policy describes how we collect, use, process, and disclose personal information of consumers.  It applies both to your use of the https://www.cbd.org/ website and any other ways in which you may interact with Care By Design, such as when you speak to us on the phone.  It also describes the choices available to you regarding our use of your personal information.  Information for California residents is also included within this policy. 

This Privacy Policy is incorporated into our Terms & Conditions, and therefore governs your use of Care By Design’s services. By using Care By Design’s services, you accept the terms of this Privacy Policy. If you have questions or concerns about the Privacy Policy, please contact us at info@cannacraft.com.  If you are a consumer with a disability and are having trouble accessing this Privacy Policy, you may request to receive this Privacy Policy by emailing info@cannacraft.com or by calling 707-757-7075.

Information We Collect About Consumers.

In this section of the Privacy Policy, we explain what types of Personal Information we may collect about consumers.  The Personal Information collected depends on the type of interaction we have with a consumer (such as calling or visiting our website), the types of products a consumer considers or purchases, and what information Care By Design’s customers choose to share with us.  This section includes all of the information that we may collect about consumers though we may not collect all of these types of information for each person. 

As used in this Privacy Policy, Personal Information means information that relates, and is capable of being linked, to a particular person.  It does not include de-identified or aggregate information. 

Company potentially collects the following categories of information about consumers, some of which may be collected or maintained in a manner such that it can be considered Personal Information:

Identifiers: Examples of the types of identifiers that Company may collect include real names, postal addresses, online identifiers, Internet Protocol addresses (“IP addresses”), email addresses, account numbers, and other government identification numbers.

Other types of information:  Examples of other types of information include telephone numbers and financial information including bank account, credit card, and debit card numbers.  It also includes additional information provided to Company directly by you, such as when you complete a questionnaire or answer a survey. This category includes information identified as Personal Information in California Civil Code Section 1798.80(e) that is not otherwise categorized.

Characteristics protected under some laws: Examples of the types of characteristics that Company may collect include age, national origin, citizenship, marital status, medical information, sex, sexual orientation, and veteran or military status.

Commercial information: Examples of the types of commercial information that Company may collect includes records of products or services purchased, obtained, or considered from Company or our partners, and other purchasing or consuming histories or tendencies.

Internet information: Examples of the types of internet or other electronic network activity information that Company may collect includes browsing history, search history, information about the device the consumer is using to access our website or applications, and information regarding a consumer’s interaction with Care By Design’s or our partners’ websites, applications, or advertisements.  We may also collect information from visitors to our website such as browser settings, operating systems, referring/exit pages, and clickstream data.  When we send you an email, Company may also collect information, including about how you interact with that email.

Geolocation information: Company may collect information about where a consumer resides or is otherwise located.

Where We Collect Information About Consumers.

In this section of the Privacy Policy, we explain where and how we collect data about consumers.  We receive information about consumers from several categories of sources. 

Consumers:  The vast majority of the information that Company collects comes directly or indirectly from the consumer that it relates to.  Information that is collected directly from you is information that you provide when you complete a form online, use a chat feature, or speak to us on the phone.  We may also collect information indirectly about you when you interact with our website, through the use of cookies and other tracking technologies.  Indirect collection is described in more detail in the section below called “How Company Uses Cookies and Similar Technologies.”

Service Providers: We may collect information about you from our Service Providers.  As used in this Privacy Policy, Service Providers means entities that Company has contracted with to provide us with services to help fulfill our business needs.  Service Providers may also assist us in collecting information both directly and indirectly from you.

Business Partners and Affiliates:  We may collect information about you from our business partners and affiliates.  An example of the type of information that we may receive from business partners and affiliates is information about the product you purchased from them after you indicated an interest in an offer that Company presented to you. 

Publicly/Commercially Available Information:  We may collect information related to you from publicly available sources of information, including government records and commercially available sources of consumer information.  Examples of the type of information we may collect from publicly available sources is whether you have recently expressed interest in purchasing a product that Company sells.

How We Use the Information We Collect About Consumers.

In this section of the Privacy Policy, we explain our commercial and business purposes for collecting information about consumers.  Company uses the information that it has collected about consumers, for the purposes listed below.  In some instances, we may combine information that we have collected from multiple sources in order to fulfill these purposes.  Company potentially uses each category of information that we collect for each of these purposes.

If, in the future, Company wishes to use information about you in a manner that is not consistent with the purposes outlined below, we will seek your consent prior to the expanded use if and where we are legally required to do so.     

Providing Products and Services:  Company collects information for the purpose of providing products and services.  We may also use information to respond to inquiries from potential customers who are interested in learning more about our products.  Examples of the types of uses of consumer information for these purposes include producing and delivering products purchased by consumers, administering the Company website, and displaying content based on consumer preferences.

Security:  Company collects information for the purpose of ensuring that we maintain appropriate security over computer networks and our physical facilities.  We may also collect information for the purposes of detecting fraud or other suspicious activities.

Marketing:  Company collects information for use in marketing to current and prospective customers.  More information about how you can control the marketing you receive from Company is located in the sections “How Company Uses Cookies and Similar Technologies” and “How You Can Control The Information Company May Have About You.”

Product Development: Company collects information for use in improving our existing products and developing new products.

Analytics:  Company collects information for use in performing various types of analytics.  For example, Company uses information to analyze how visitors interact with our website, where visitors to our website arrive from and exit to, and gaining insights into the types of consumers that may be interested in our products and services.  We may also use information to develop inferences from the information we collect regarding consumer preferences, characteristics, predispositions, behaviors, and attitudes.

Operational Purposes:  Company collects information for use for our operational purposes, and the operational purposes of our service providers and business partners.  For instance, Company may use information for maintaining our website and other infrastructure, training and quality assurance, for conducting surveys or sweepstakes, to promote our brand, and to use in connection with our relationships with service providers and business partners.

Sharing with Service Providers and Business Partners:  Company may contract with companies or persons to provide certain services including credit card processing, shipping, data analysis and management, promotional services, etc. (“Service Providers”). Company provides Service Providers with the information needed for them to perform these services. Company may establish business relationships with other persons or entities whom Company believes trustworthy (“Select Partners”). In such cases, Company may rent, exchange, share and/or cross-reference information, including contact information about consumers that will enable such persons or entities to contact you regarding products and services that may be of interest to you.

Financial Reporting:  Company collects information for use in various types of financial reporting and other similar internal uses.  Examples of the types of financial reporting that Company may use consumer information in connection with are internal budgets and projections, calculation of compensation, and reporting to investors.

Business Transfers: If Company undertakes or is involved in any merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer or share some or all of our assets, including information related to consumers in connection with the transaction or in contemplation of the transaction (such as conducting due diligence).  If such an event occurs, your information may be treated like any other Company asset and sold, transferred, or shared with third parties, or used in ways not contemplated or permitted under this Privacy Policy. In this case, you will be notified via email and/or a prominent notice on our site of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information. 

In addition to the purposes listed above, Company may also use de-identified or aggregate data that is not capable of being linked to any individual consumer for additional purposes not listed above.

How We Share Consumer Information and Who We Share It With.

In this section of the Privacy Policy, we explain who we share consumer information with and under which circumstances we may do so.  

Service Providers: Company may share information about consumers with Service Providers who assist us with completing the business purposes outlined in the “How We Use the Information We Collect About Consumers” section.  

Business Partners and Affiliates: Company may share information with business partners and affiliates in limited circumstances.  These include:

  • If you express interest in an offer made by a business partner, we may provide information about you in connection with the offer you have selected.  If you later decide to opt-out from allowing Company to share your information with business partners for their marketing purposes, you may do so by contacting Customer Care at info@cannacraft.com or 707-757-7075.  To the extent that Company has already shared your information prior to your decision to opt-out, you may opt out from future marketing by contacting our business partners directly.
  • When you purchase a product from us that is bundled with a product offered by one of our business partners, we will share information about you with those business partners so that they can provide you with the product or services included with your purchase.  
  • Public Postings: Company may publicly share information about consumers, such as by displaying the information on our website or having the information published in publicly available media, in a limited number of circumstances. 
  • We may display personal testimonials of satisfied customers received through email surveys on our website or other marketing.  If you wish to update or delete your testimonial, you can contact us at info@cannacraft.com.  
  • When consumers leave us reviews either on the Company website, or on other publicly available websites, we may display these customer reviews on the Company website.  If you provide a review that we display and wish to update or delete it, you can also contact us at info@cannacraft.com.  We will delete your review at your request or if, at our discretion, we choose not to update your review as requested.
  • When we collect publicly available information, we may share that information on our website. 

Required by Law: Company may disclose consumer information as required by law, such as in response to a subpoena, a lawful request by a public authority, including to meet national security or law enforcement requirements, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legal request.

Related Parties: Company may disclose consumer information with businesses controlling, controlled by, under common control or affiliation with Care By Design. If Company is merged, acquired, or sold, or if some or all of our assets or equity are transferred, we may disclose or transfer consumer data in connection with the associated transactions.

In addition to the circumstances listed above, Company may also share de-identified or aggregate data that is not capable of being linked to any individual consumer with additional entities not listed above. 

How Company Uses Cookies and Similar Technologies.

This section expands on how Company uses internet technologies, such as cookies, to collect information about consumers.

Cookies.  Company and its partners may use the standard cookie feature of major browser applications and third-party service providers, including Google Analytics features, or employ internally developed cookies and tracking codes, that allow Company to store a small piece of data on a visitor's computer, or any other device a visitor uses to access our website, about his or her visit to the website or use of other plug-ins exchanging information with Care By Design.  We also use similar technologies, such as JavaScripts or ETags, to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole.    You can remove persistent cookies by following directions provided in your Internet browser’s “help” directory.  If you reject cookies, you may still use our site, but your ability to use some areas of our site, such as order forms, will be limited. To manage Flash cookies, please click here.

Web Beacons.  We employ a software technology called clear gifs (a.k.a. web beacons), that help us track referrals from our partners and affiliates and better manage content on our website.  Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users.  In contrast to cookies, which are stored on a user’s computer hard drive, clear gifs are embedded invisibly on web pages and are about the size of the period at the end of this sentence.

3rd Party Tracking.  The use of tracking technologies by our service providers, technology partners, or other third-party assets (such as social media links) on the site is not covered by our Privacy Policy.  These third-parties may use cookies, clear gifs, images, and scripts to help them better manage their content on our site.   We do not have access or control over these technologies.  

Partner and Affiliate Tracking. Our partners and affiliates, including Google Analytics, may use cookies and web beacons to collect information about your activities on this and other websites to provide you targeted advertising based upon your interests. This means that these partners and affiliates may show our ads on sites across the Internet based upon your previous visits to our website. Together with our partners and affiliates, we may use these cookies and web beacons to report how your ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to your visits to our site. 

If you would like to learn more or opt out of receiving online display advertising tailored to your interests, please visit the Networking Advertising Initiative at www.networkadvertising.org/managing/opt_out.asp or the Digital Advertising Alliance at http://aboutads.info/choices.  If you wish to not have this information used for the purpose of serving you targeted ads, you may opt-out by clicking here.  Please note this does not opt you out of being served advertising.  You will continue to receive generic ads. If you delete your cookies, use a different browser, or buy a new computer, you will need to renew your online display advertising opt-out choice. You may also learn more about how Google Analytics uses your information by visiting Google’s page How Google Uses Information From Sites or Apps That Use Our Service.  You may also visit Google Analytics’ Ads Settings to opt out of Google’s use of cookies and customize Google Display Network ads, and Google Analytics’ Opt Out Browser Add-on for the web.

Third Party Links

Third-Party Websites. Company may maintain links to other websites and other websites may maintain links to Company’s websites. This Privacy Policy applies only to https://www.cbd.org/ and not to other websites accessible from Company or that you use to access Company, each of which may have privacy policies materially different from this Privacy Policy.  If you visit other websites, Company is not responsible for the privacy practices or content of those sites. It is your responsibility to review the privacy policies of non-Company websites to confirm that you understand and agree with them.

Social Media Widgets. Our website sometimes includes social media features, such as the Facebook “like” button and widgets, such as the “Share this” button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing it.

How You Can Control The Information Company May Have About You.

This section describes how you can access and control the information that Company may have about you.  It applies to all consumers worldwide, including individuals who have purchased from Company or who believe that information about them may have been provided to us by a third party.  Depending on where you reside, you may have additional rights beyond what is described in this section.  If you are a resident of California, please review the section “Information for California Residents” for more information about your rights.

Confirmation of Possession of Information Related to You.  Upon a verified request, and subject to the privacy interests of others and technical limitations, Company will provide you with information about whether we hold any information related to you. At Company’s sole discretion, unless otherwise required by law, we may in some instances correct or delete information upon a verified request.  Please note, however, that in certain circumstances we may be required by law to retain your Personal Information, or may need to retain your Personal Information in order to continue providing a product or service to you or another customer.

If you would like to submit a request about your data, you may do so by emailing us at info@cannacraft.com or by calling us at 707-757-7075.  After you submit the request, you may be asked to provide additional information in order to verify your identity.

User and Authorized Contact Access to Order Information. Company will give you information about your order. This may include information about the nature and status of your order, information you provided to process your order, payment information, and contact information. For some products, we may provide information about your order to other individuals named in the order. For product-specific information about who may request information about your order, please contact Customer Care at info@cannacraft.com or 707-757-7075.

Opting Out of Email.  We send promotional emails and newsletters from time to time to consumers who have provided us with their email address or whose email addresses we have obtained through other sources.  You can opt-out of promotional communications by using the “Unsubscribe” link and following the unsubscribe instructions in an email you receive from us or by contacting us at info@cannacraft.com.  We may also send service-related or transactional communications, which are not promotional.  Generally, you may not opt-out of these communications.  If you do not wish to receive service-related communications, you may terminate your account by emailing us at info@cannacraft.com.

Opting Out of SMS/Text Messages.  If you wish to stop receiving SMS or text messages from Company you can let us know by replying STOP to any SMS/text that you receive from us.  You may also let us know by contacting us at info@cannacraft.com or 707-757-7075.

Data Retention. At minimum, we will retain your information for as long as needed to provide you services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.  Company may maintain some or all of this data in its archives even after it has been removed from the Site.

Information Processed On Behalf of Third Parties

In some instances, Company may process Personal Information on behalf of third-party affiliates.  Company acknowledges that in these instances, you have the right to access your Personal Information.  Where Company has no direct relationship with the individuals whose Personal Information it processes, individuals seeking access, or seeking to correct, amend, or delete inaccurate data, should direct their inquiry to the third-party affiliate (the data controller). 

How Secure Is the Personal Information We Collect?

Our Commitment to Data Security. We strive to make certain that our servers and connections incorporate up to date encryption and security devices. Unfortunately, however, no data transmission is guaranteed to be 100% secure and we therefore cannot guarantee the security of information you transmit to or from our website or through the use of our services, and you provide this information at your own risk. ACCORDINGLY, WE DISCLAIM LIABILITY FOR THE THEFT, LOSS, OR INTERCEPTION OF, OR UNAUTHORIZED ACCESS OR DAMAGE TO, YOUR DATA OR COMMUNICATIONS BY USING OUR WEBSITE AND OUR SERVICES. YOU ACKNOWLEDGE THAT YOU UNDERSTAND AND ASSUME THESE RISKS.

IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED PLEASE CONTACT US IMMEDIATELY AT info@cannacraft.com OR 707-757-7075.

Enforcement. We periodically review this Privacy Policy and our compliance with it to verify that both are accurate. We encourage you to contact us with any concerns, and we will investigate and attempt to resolve any complaints and disputes about our privacy practices.

Information for California Residents.

If you are a resident of California, this section provides information regarding your rights, and Company’s responsibilities, regarding your Personal Information. 

California Resident Rights

California law allows California residents, upon a verifiable consumer request, to request that a business that collects consumers’ Personal Information give consumers access to certain information.  This includes the specific pieces and categories of Personal Information that the business has collected about the consumer, the categories of sources for that information, the business or commercial purposes for collecting the information, and the categories of third parties with which the information was shared.

California residents also have the right to submit a request for deletion of information under certain circumstances.  This is not an absolute right and, in some circumstances, Company may decline to delete the information, such as when Company has an on-going business relationship with you, when we have a continued need to use the information for purposes outlined in this Privacy Policy, or when we are legally required to retain the information.   

Consistent with California law, if you choose to exercise your rights, we will not charge you different prices or provide different quality of services unless those differences are related to your information.

How to Submit a Request for Access to Information or Deletion of Information

If you would like to submit a request about your data, we encourage you to do so by emailing info@cannacraft.com or by calling our toll-free number at 707-757-7075. 

After you submit the request you will be asked to verify your email address and may also be asked to provide additional information in order to verify your identity, including potentially providing a declaration under penalty of perjury.  Company will attempt to verify your identity by asking for information that correlates with the information that we have previously collected about you. Where this is not possible, Company may request you submit additional information for verification, such as proof of residency or redacted government-issued identification.  Please note that consistent with California law, we will be unable to satisfy your request until we have verified your identity.

You may also designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide Company with written permission for the agent to make the request on your behalf or provide us with an executed power of attorney.  You will also be required to submit your valid government issued-identification, and the authorized agent’s valid government-issued identification.

Changes To This Policy.

We may update this privacy policy to reflect changes to our information practices. If we make any material changes, a notice will be posted on this page along with the updated Privacy Policy prior to the change becoming effective. We encourage you to review this page periodically for the latest information on our privacy practices.

If you have any questions regarding our Privacy Policy, please contact us on the information below.

Mailing Address

2332 Circadian Way

Santa Rosa CA 95407

info@cannacraft.com

(707) 757-7075

 

Privacy Policy Revision History: Last updated January 2020