CannaDash – Privacy Policy

Cameron Foote, JS Pharmacy Pty Ltd and Gary McGraw trading as CannaDash (“CannaDash”, “we”) value and respect the privacy of its customers and the people we deal with. CannaDash is committed to protecting your personal information and complying with the Privacy Act 1988 (Cth) (“Privacy Act”) and other applicable privacy laws and regulations.

This Privacy Policy (“Policy”) describes how we collect, hold, use and disclose your personal information, and how we maintain the quality and security of your personal information. This Policy applies to this website and any other websites, domains or online platforms (including applications) owned and operated by CannaDash (“Website”).

We may amend this Policy at any time by incorporating the amended terms into this document. All additional and varied terms automatically take effect on the date they are incorporated into this Policy. We recommend that you revisit this Policy from time to time to ensure you are aware and understand any additional or varied terms as contained in the Policy.

1. What Personal Information Do We Collect?

The personal information we collect about you depends on the nature of your dealings with us or what you choose to share with us.

The personal information we usually collect about you may include, without limitation, the following:

• your name;
• your mailing or street address;
• your date of birth;
• your email address;
• your phone number;
• your postal address;
• your social media information;
• your age;
• your credit card information and other payment details;
• information about your company, business, or personal circumstances;
• information in connection with client surveys, questionnaires, and promotions;
• your device identity and type, I.P. address, geo-location information, page view statistics, advertising data, and standard web log information;
• information about third parties; and
• any other information provided by you to us via our Website or our online presence, or otherwise required by us or provided by you.

CannaDash may need to collect sensitive information about you including, without limitation, the following:

• information about your medical history;
• details regarding your current and past medications;
• details of your current or past medical conditions; and
• details of your prescriber, including their contact details.

If we collect your sensitive information, we will do so only:

• with your consent;
• if it is necessary to prevent a serious and imminent threat to life or health;
• as otherwise required or authorized by law; or
• to optimize a health-related outcome.

When CannaDash collects personal information, we take appropriate measures to protect the security of this information.

You will not have the option to interact with us anonymously or by using a pseudonym as it is impracticable for us to deal with you if you have not identified yourself or used a pseudonym. We also note that we are required by Federal and State laws to know your identity and other personal information to process your prescription(s) and supply you with your prescribed medicine(s). If you choose not to provide us with the required personal information, we may not be able to provide you with our services and products or otherwise interact with you.

2. How Do We Collect Your Personal Information?

We collect your personal information from you directly or indirectly via third parties and through a variety of ways, including when you:

• register and set up a user account with us;
• direct your prescriber to provide us with your script;
• communicate with us via Intercom;
• interact with us over the phone, SMS, or via social applications;
• interact with us in person;
• interact with us online or in writing;
• participate in surveys or questionnaires;
• attend a CannaDash event;
• subscribe to our mailing list; and
• interact with our Website, social applications, services, content, and advertising.

If you choose to register and set up a user account with our Website, then you will be requested to provide contact information (such as name, address, telephone number, email address etc). We use this information pursuant to our legitimate business interests to provide our goods and services to you.

3. How do we use your personal information?

We use personal information for many purposes in connection with our business activities and so that we can provide our goods and services to you. These purposes include, without limitation, the following:

• to provide you with goods, services and/or information that you may request from us;
• to verify your identity;
• process any of your orders and arrange delivery to you;
• to deliver to you a more personalised experience and service offering;
• to improve the quality of the goods and services we offer;
• for marketing and research purposes;
• for record keeping and administrative purposes;
• to comply with our legal obligations, resolve disputes or enforce our agreements with third parties;
• to respond to any queries or concerns you may have in relation to our service;
• to send you administrative messages, reminders, notices, updates, security alerts, and other information requested by you;
• to liaise, if required, with your prescriber to optimise a therapeutic outcome for you;
• to work within the scope of practice of a pharmacist to determine and optimise a health-related outcome for you; and
• for any other purpose reasonably considered necessary or desirable by CannaDash in relation to the operation of our business.

4. Disclosure of personal information to third parties

We may disclose your personal information to third parties in accordance with this Policy in circumstances where you would reasonably expect us to disclose your information. For example, we may disclose your personal information to:

• third-party service providers engaged by CannaDash including (without limitation) cloud providers, IT service providers, data storage providers, web-hosting and server providers, debt collectors, maintenance and repair providers, payment systems operators and other service providers located inside or outside of Australia;
• NostraData;
• our employees, contractors and/or related entities;
• credit-reporting and fraud-checking agencies;
• credit providers;
• our existing or potential agents or business partners;
• our marketing and advertising providers;
• our professional services advisors;
• any court, tribunal or authority with respect to a claim relating to you; and
• other third parties if required to do so by law.

5. Transfer of personal information overseas

Some of the third-party service providers we disclose personal information to may be based in or have servers located outside of Australia.

Where we disclose your personal information to third parties overseas, we will take reasonable steps to ensure that data security and appropriate privacy practices are maintained.

6. How do we protect your personal information?

CannaDash will take reasonable steps to ensure that the personal information that we hold about you is kept confidential and secure, including by:

• having a robust physical security of our premises and databases/records;
• taking measures to restrict access to only personnel who need that personal information to effectively provide goods and services to you; and
• having technological measures in place (such as encryption, firewalls, secure server environments, anti-virus software and login and password protection).

The internet, however, is not always a secure place and we cannot guarantee total security of your personal information in all circumstances. We treat website and payment security seriously and we will use our best endeavours to provide a secure, safe platform for your online transactions with us.

You can also help to protect the privacy of your personal information by protecting the confidentiality of your account details and payment details. You should also make sure that you log out of your account once you finish using it and you should not disclose your account details to any other person. You should notify us immediately if you believe there may have been any security breach of your account.

When you provide personal information to us, you warrant that it is accurate, current and complete and undertake to maintain the accuracy, currency and completeness of the personal information we retain.

7. Online Activity

Electronic Communications

Once you register and set up a user account with us, we will send you a welcome email to verify your username and password. We will also respond to your enquiries, provide goods and services you request and manage your account. We will communicate with you by email, telephone or Intercom (chat system).

Subject to the marketing preferences which you give us, we will also send you information on new products, services, special savings, promotions and general information. If you do not want to receive this information, you can opt-out of receiving future mailings.

Cookies

The CannaDash Website uses cookies. A cookie is a small file of letters and numbers the Website puts on your device if you allow it. These cookies recognize when your device has visited our Website(s) before, so we can distinguish you from other users of the Website. This improves your experience and the CannaDash Website(s).

We do not use cookies to identify you, just to improve your experience on our Website(s). If you do not wish to use the cookies, you can amend the settings on your internet browser so it will not automatically download cookies. However, if you remove or block cookies on your computer, please be aware that your browsing experience and our Website’s functionality may be affected.

Website Analytics

Our Website may use analytical services to help us better understand visitor traffic, so we can improve our services. Although this data is mostly anonymous, it is possible that under certain circumstances, we may connect it to you.

Direct Marketing

We may send you direct marketing communications and information about our goods, services, opportunities, or events that we consider may be of interest to you if you have requested or consented to receive such communications. These communications may be sent in various forms, including mail, SMS, fax and email, in accordance with applicable marketing laws, such as the Australian Spam Act 2003 (Cth). You consent to us sending you those direct marketing communications by any of those methods. If you indicate a preference for a method of communication, we will endeavor to use that method whenever practical to do so.

You may opt-out of receiving marketing communications from us at any time by following the instructions to “unsubscribe” set out in the relevant communication. If you are experiencing issues trying to unsubscribe, please contact us via the email provided below.

In addition, we may also use your personal information or disclose your personal information to third parties for the purposes of advertising, including online behavioral advertising, Website personalization, and to provide targeted or retargeted advertising content to you (including through third party Websites).

8. Retention of Personal Information

We will not keep your personal information for longer than we need to. In most cases, this means that we will only retain your personal information for the duration of your relationship with us unless we are required to retain your personal information to comply with applicable laws, for example record-keeping obligations.

We will take reasonable steps to destroy or de-identify personal information if it is no longer needed for any purpose for which it may be used or disclosed in accordance with the Privacy Act.

9. How to Access and Correct Your Personal Information

CannaDash will endeavor to keep your personal information accurate, complete and up to date.

If you wish to make a request to access and/or correct the personal information we hold about you, you should make a request by contacting us via the email address provided below and we will usually respond within seven (7) days.

In some cases, we may decline your request to access your personal information. This might occur in circumstances where such access might:

• be unlawful;
• have an unreasonable impact on another person’s privacy;
• prejudice an investigation of unlawful activity; or
• where the personal information relates to existing or anticipated legal proceedings.

If we do refuse to provide you with access to your personal information, we will provide you with a reason or reasons for our decision.

10. Links to Third Party Sites

Our Website may contain links to websites operated by third parties. If you access a third-party website through our Website, personal information may be collected by that third party website. We make no representations or warranties in relation to the privacy practices of any third-party provider or website and we are not responsible for the privacy policies or the content of any third-party provider or website. Third party providers/websites are responsible for informing you about their own privacy practices and we encourage you to read their privacy policies.

11. Enquiries and Complaints

For complaints and enquiries about how CannaDash handles, processes or manages your personal information, please contact dispensary@cannadash.com.au. We may require proof of your identity and full details of your request before we can process your complaint.

Please allow up to seven (7) days for CannaDash to respond to your complaint. It will not always be possible to resolve a complaint to everyone’s satisfaction. If you are not satisfied with CannaDash’s response to a complaint, you have the right to contact the Office of Australian Information Commissioner (at www.oaic.gov.au) to lodge a complaint.

12. How to Contact Us

If you have a question or concern in relation to our handling of your personal information or this Policy, you can contact us for assistance as follows:

Email: dispensary@cannadash.com.au

Phone: 1300 085 024

This policy was last updated on 12 January 2024.